Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/bLyGQD0NDTXcTfcT6o9jcR1ap1s.roa
File: bLyGQD0NDTXcTfcT6o9jcR1ap1s.roa (raw, json)
Hash identifier: NU98EkY8XD3gmChj7Zwp7ivcW807MuhMViAprr/Xgns=
Subject key identifier: 6C:BC:86:40:3D:0D:0D:35:DC:4D:F7:13:EA:8F:63:71:1D:5A:A7:5B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0EC8
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bLyGQD0NDTXcTfcT6o9jcR1ap1s.roa
Signing time: Wed 29 Sep 2021 02:43:58 +0000
ROA not before: Wed 29 Sep 2021 02:43:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131586
IP address blocks: 175.183.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3784 (0xec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6CBC86403D0D0D35DC4DF713EA8F63711D5AA75B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7d:24:eb:e7:c0:b7:f7:30:28:33:65:f8:b1:
b0:f8:5f:85:8d:f3:48:28:00:51:68:03:78:c0:66:
ed:8c:2f:70:23:3f:6e:b7:f1:9a:8a:c9:14:2b:1e:
54:aa:29:38:5a:18:87:82:42:65:6a:1f:1c:5b:0c:
b7:ca:c6:bd:27:5d:90:9c:9b:5b:9d:b9:b8:50:df:
5c:95:63:d0:ac:28:f6:64:0b:b0:87:b5:80:ce:d6:
25:88:17:55:ec:89:39:69:fc:fe:0a:79:5e:6c:f8:
54:07:1f:8d:7f:d8:d0:bd:f5:be:d1:4a:18:04:ac:
b1:12:45:53:b1:3f:d3:ac:fb:eb:52:d8:16:c9:63:
18:46:18:1c:83:fb:7a:77:6d:28:59:da:da:44:0b:
05:6a:b3:1c:b3:0f:51:a8:ac:46:f0:0e:d2:98:63:
b4:83:5a:4b:79:c1:7b:33:41:3c:7c:68:97:40:cb:
db:2e:6a:79:03:2c:cd:04:47:80:ac:66:a0:72:26:
be:bf:49:3a:11:48:74:df:93:70:04:a2:a7:3e:a6:
ca:e5:65:6a:64:a3:b3:df:11:8c:8a:31:f0:1f:00:
0c:22:d8:a9:08:7b:56:98:26:17:85:44:37:8d:a0:
bd:fe:38:62:ac:44:19:04:15:fd:10:bf:b6:5a:9f:
72:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:86:40:3D:0D:0D:35:DC:4D:F7:13:EA:8F:63:71:1D:5A:A7:5B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bLyGQD0NDTXcTfcT6o9jcR1ap1s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.137.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:09:5a:51:66:d4:c7:25:db:77:8f:1e:9d:5a:fb:7d:38:0c:
22:6c:7e:72:ba:a7:0a:33:bb:f4:8c:9c:17:4c:83:82:b0:14:
c6:4a:c3:ec:ce:31:c6:1a:1d:95:26:ee:9f:01:37:b3:4c:e5:
d5:52:a2:10:ff:0d:62:7e:97:2f:70:8d:76:93:5f:95:4a:e9:
b5:99:6f:0a:e5:1a:7c:59:49:1b:60:6f:60:fe:49:e6:cb:c2:
3e:31:b1:f3:81:d7:d1:a9:15:2a:f5:4c:0f:27:5f:8a:f9:ff:
57:d1:8c:5a:7d:26:f7:57:ca:9c:7f:60:2f:db:cc:5d:92:cb:
79:1e:27:4a:ad:8f:77:80:42:21:ed:59:0e:97:b2:86:ff:e9:
52:48:eb:7a:83:19:93:86:0a:43:55:19:e7:c6:59:17:11:a1:
46:5e:0e:b0:23:0d:23:05:e7:93:c1:ce:91:18:a9:ea:94:9a:
c0:a6:59:b9:88:d3:ef:2e:88:a9:21:6f:4f:67:52:31:ec:34:
cb:6f:90:5d:74:47:ad:5e:d7:a3:4f:f7:cd:0e:1a:43:17:1f:
95:ed:79:ea:98:f3:1a:3c:70:0d:2f:50:39:c8:a5:7f:26:a2:
67:de:94:13:22:e9:3d:ca:ab:6d:a7:92:df:7f:78:09:16:70:
cb:a0:d6:8d
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDsgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTA5Mjkw
MjQzNThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDZDQkM4NjQwM0QwRDBE
MzVEQzRERjcxM0VBOEY2MzcxMUQ1QUE3NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtfSTr58C39zAoM2X4sbD4X4WN80goAFFoA3jAZu2ML3AjP263
8ZqKyRQrHlSqKThaGIeCQmVqHxxbDLfKxr0nXZCcm1udubhQ31yVY9CsKPZkC7CH
tYDO1iWIF1XsiTlp/P4KeV5s+FQHH41/2NC99b7RShgErLESRVOxP9Os++tS2BbJ
YxhGGByD+3p3bShZ2tpECwVqsxyzD1GorEbwDtKYY7SDWkt5wXszQTx8aJdAy9su
ankDLM0ER4CsZqByJr6/SToRSHTfk3AEoqc+psrlZWpko7PfEYyKMfAfAAwi2KkI
e1aYJheFRDeNoL3+OGKsRBkEFf0Qv7Zan3J1AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUbLyGQD0NDTXcTfcT6o9jcR1ap1swHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYkx5R1FEME5EVFhjVGZjVDZvOWpj
UjFhcDFzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK+3iTAN
BgkqhkiG9w0BAQsFAAOCAQEAnQlaUWbUxyXbd48enVr7fTgMImx+crqnCjO79Iyc
F0yDgrAUxkrD7M4xxhodlSbunwE3s0zl1VKiEP8NYn6XL3CNdpNflUrptZlvCuUa
fFlJG2BvYP5J5svCPjGx84HX0akVKvVMDydfivn/V9GMWn0m91fKnH9gL9vMXZLL
eR4nSq2Pd4BCIe1ZDpeyhv/pUkjreoMZk4YKQ1UZ58ZZFxGhRl4OsCMNIwXnk8HO
kRip6pSawKZZuYjT7y6IqSFvT2dSMew0y2+QXXRHrV7Xo0/3zQ4aQxcfle156pjz
GjxwDS9QOcilfyaiZ96UEyLpPcqrbaeS3394CRZwy6DWjQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:30:12 2025 by rpki-client