Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/aQf11vwYueJI_7wH83I43dXPGEQ.roa
File: aQf11vwYueJI_7wH83I43dXPGEQ.roa (raw, json)
Hash identifier: 36yuRi8Sb+sI/163QdtJ0Q7PZdbm80bBCGlECCKPaUo=
Subject key identifier: 69:07:F5:D6:FC:18:B9:E2:48:FF:BC:07:F3:72:38:DD:D5:CF:18:44
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13B2
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aQf11vwYueJI_7wH83I43dXPGEQ.roa
Signing time: Fri 01 Sep 2023 09:25:18 +0000
ROA not before: Fri 01 Sep 2023 09:25:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 122.147.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5042 (0x13b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6907F5D6FC18B9E248FFBC07F37238DDD5CF1844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:ef:fa:c3:d7:28:08:19:b4:ff:49:26:60:
61:fd:ab:77:a5:80:7c:5e:d3:10:56:5c:a5:c9:e2:
2f:19:c8:1c:90:ce:c2:5c:ae:8a:b3:9b:e1:6e:6f:
85:ae:a0:db:9b:5d:42:15:c4:4e:36:19:4b:88:45:
fe:2c:2a:84:fd:3e:4a:98:21:b3:83:08:30:bd:0d:
7b:11:40:cb:ae:95:87:e5:89:7e:d0:4e:5a:f4:22:
62:c7:aa:b7:ca:77:76:c9:e8:9f:a5:24:79:c8:96:
59:cf:7c:c5:29:4f:e1:04:f4:52:6e:07:b0:b2:6a:
82:ab:bd:60:d6:a2:f6:59:48:ec:df:75:5f:30:c9:
0c:0c:11:ff:1d:c7:84:8f:75:25:79:3e:f0:90:38:
32:ea:26:e7:ba:a6:87:02:14:e4:48:6c:ce:47:46:
73:62:a3:c4:a0:9c:4c:30:0b:6b:ed:b9:2b:11:29:
c8:e1:55:a6:bc:21:b8:9a:2a:05:52:0d:fb:dc:f3:
60:98:69:97:fa:6a:e0:2c:c9:97:59:c2:de:97:55:
d7:f6:c7:86:81:e0:63:89:72:3d:2c:2b:32:b4:19:
85:cd:d2:d0:25:19:3d:41:b0:a2:51:38:7b:90:80:
88:2c:80:41:82:d0:e4:85:15:63:84:1f:d2:d9:b3:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:07:F5:D6:FC:18:B9:E2:48:FF:BC:07:F3:72:38:DD:D5:CF:18:44
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aQf11vwYueJI_7wH83I43dXPGEQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.24.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:d7:dd:67:a5:e7:89:e5:91:f1:4c:e1:6c:90:d4:27:0a:98:
7c:00:67:49:fb:71:cb:4d:04:db:ff:52:da:f0:d7:b6:01:ea:
af:2b:11:cb:d4:c8:d5:68:a4:e7:00:4b:12:25:09:e6:6b:2f:
81:a1:85:c8:41:88:33:7d:cc:2a:2f:e3:1e:52:61:24:ef:c2:
2b:86:cc:63:38:e8:55:6f:03:78:15:30:36:54:53:15:c0:0f:
b1:6a:95:cd:ca:8c:3f:0e:64:ea:c0:61:fd:2e:9e:0c:e5:e3:
94:7b:a7:a9:75:c2:06:13:29:c4:d2:54:ae:73:4b:4d:0b:aa:
0b:58:9b:d7:7a:5c:09:26:9d:86:47:6f:5d:b3:cc:05:35:9b:
08:65:f6:d3:2d:a1:b7:28:ea:0c:67:cf:86:e2:1e:ba:7b:3d:
e9:28:21:da:33:b8:f3:fa:d5:b7:f5:66:02:b1:9e:91:7b:55:
93:e5:c6:9b:fb:cf:d0:98:5c:fa:02:98:da:18:66:dc:6b:a0:
c1:4a:d8:f7:5c:35:28:c1:f4:df:64:30:55:2c:3b:4b:ad:49:
2a:58:19:94:e4:ce:d1:90:32:dd:b1:44:ec:9e:eb:c6:8b:3c:
38:e4:a4:c3:0c:39:f6:7e:cd:b6:f2:94:24:22:a3:ec:03:34:
a5:2b:b2:8e
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICE7IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw
OTI1MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY5MDdGNUQ2RkMxOEI5
RTI0OEZGQkMwN0YzNzIzOERERDVDRjE4NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAXO/6w9coCBm0/0kmYGH9q3elgHxe0xBWXKXJ4i8ZyByQzsJc
roqzm+Fub4WuoNubXUIVxE42GUuIRf4sKoT9PkqYIbODCDC9DXsRQMuulYfliX7Q
Tlr0ImLHqrfKd3bJ6J+lJHnIllnPfMUpT+EE9FJuB7CyaoKrvWDWovZZSOzfdV8w
yQwMEf8dx4SPdSV5PvCQODLqJue6pocCFORIbM5HRnNio8SgnEwwC2vtuSsRKcjh
Vaa8IbiaKgVSDfvc82CYaZf6auAsyZdZwt6XVdf2x4aB4GOJcj0sKzK0GYXN0tAl
GT1BsKJROHuQgIgsgEGC0OSFFWOEH9LZswXDAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUaQf11vwYueJI/7wH83I43dXPGEQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYVFmMTF2d1l1ZUpJXzd3SDgzSTQz
ZFhQR0VRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3qTGDAN
BgkqhkiG9w0BAQsFAAOCAQEAXtfdZ6XnieWR8UzhbJDUJwqYfABnSftxy00E2/9S
2vDXtgHqrysRy9TI1Wik5wBLEiUJ5msvgaGFyEGIM33MKi/jHlJhJO/CK4bMYzjo
VW8DeBUwNlRTFcAPsWqVzcqMPw5k6sBh/S6eDOXjlHunqXXCBhMpxNJUrnNLTQuq
C1ib13pcCSadhkdvXbPMBTWbCGX20y2htyjqDGfPhuIeuns96Sgh2jO48/rVt/Vm
ArGekXtVk+XGm/vP0Jhc+gKY2hhm3GugwUrY91w1KMH032QwVSw7S61JKlgZlOTO
0ZAy3bFE7J7rxos8OOSkwww59n7NtvKUJCKj7AM0pSuyjg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:36 2025 by rpki-client