Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/bpNIv1n6vzz2IuZvUJ851NVWR0c.roa
File: bpNIv1n6vzz2IuZvUJ851NVWR0c.roa (raw, json)
Hash identifier: Rx2DxZQKsTtLS8iwJU7o0Lc1NMSlXQVgL4hjBE7OMgY=
Subject key identifier: 6E:93:48:BF:59:FA:BF:3C:F6:22:E6:6F:50:9F:39:D4:D5:56:47:47
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C43
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bpNIv1n6vzz2IuZvUJ851NVWR0c.roa
Signing time: Sun 07 Feb 2021 07:23:13 +0000
ROA not before: Sun 07 Feb 2021 07:23:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 106.105.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3139 (0xc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 07:23:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6E9348BF59FABF3CF622E66F509F39D4D5564747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:60:51:6e:bf:97:41:d8:64:e3:f4:db:2d:
33:7c:bc:5b:86:2d:f3:29:6c:e6:95:68:e6:e4:87:
24:4c:68:68:18:0e:d2:ae:7b:7d:f9:24:3b:36:f6:
c0:7c:19:5d:93:9f:7f:1a:22:54:6c:68:30:34:b9:
1f:dd:dc:d3:4c:ec:d3:ec:a6:3f:65:74:77:d3:da:
24:42:9e:01:ce:18:a1:c5:ea:14:fd:4f:f8:85:3d:
44:4a:00:61:ea:09:97:df:99:63:d2:4c:2d:6d:ad:
d9:31:f0:d1:6b:93:a3:7d:63:6e:00:71:e9:15:e7:
74:c8:ed:2d:1e:70:0f:fb:ca:86:73:3e:a7:94:19:
a0:89:57:f9:49:48:0b:6d:dd:1f:d3:0a:b7:d7:3d:
7d:74:d4:d0:37:f5:03:90:a2:a4:97:a9:7f:ec:18:
f8:ac:24:6d:d5:61:95:16:04:83:26:b5:31:98:cd:
04:d0:8b:2d:f4:93:4a:39:18:0a:e9:97:1e:bb:c7:
81:fa:bb:89:4c:dd:a6:5c:ef:95:e4:4e:b6:be:81:
f3:ca:ae:33:e8:9d:33:b0:c0:f2:76:ab:cd:4b:59:
9d:0f:55:d4:a1:9a:b1:ca:ab:48:99:29:60:41:ad:
d8:b5:2d:73:10:26:b6:9d:e3:9d:04:e0:ae:0a:1b:
08:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:93:48:BF:59:FA:BF:3C:F6:22:E6:6F:50:9F:39:D4:D5:56:47:47
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bpNIv1n6vzz2IuZvUJ851NVWR0c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.24.0/21
Signature Algorithm: sha256WithRSAEncryption
63:51:ac:70:95:78:dd:e3:5e:6f:a4:47:23:98:ff:3f:4e:e6:
e2:0d:50:c6:6b:a7:6d:98:34:30:4c:2a:b0:50:67:3b:a2:45:
14:7b:98:87:b0:62:1d:df:c5:66:73:19:f4:e3:6e:04:45:f8:
e7:aa:b6:f3:6e:cf:da:fb:ae:a3:2a:31:a0:6a:ef:57:95:40:
52:dc:31:0f:a7:e8:dd:d9:ea:f1:8e:f1:3c:f4:ca:a0:47:68:
68:46:1e:38:b2:23:53:e2:32:62:c1:93:ad:8c:33:0b:df:7b:
0f:64:9e:3d:71:ec:00:5c:cb:d0:f4:4d:21:d9:7e:10:d3:b8:
b2:15:55:1d:ca:5e:91:1b:f9:91:f0:d8:5b:99:50:74:ba:b6:
cc:1f:e4:12:92:8d:25:15:c5:3c:17:3d:b6:20:37:e8:ff:99:
ef:c1:82:f4:ca:eb:47:d2:6b:60:d5:76:c5:df:e8:66:94:f3:
36:ac:4f:bf:59:da:d3:02:1f:52:cd:92:96:dc:9d:ea:b7:cf:
a5:7f:2c:1c:17:b3:a3:dc:e7:f1:e7:ba:4d:1d:44:99:60:ad:
45:1f:43:84:3f:c4:25:cb:84:1a:b7:70:67:ce:db:55:97:23:
29:d1:f1:fd:85:43:a9:93:29:d1:05:f2:5e:e0:cd:1c:cc:9e:
f4:cf:0a:10
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcw
NzIzMTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZFOTM0OEJGNTlGQUJG
M0NGNjIyRTY2RjUwOUYzOUQ0RDU1NjQ3NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJbWBRbr+XQdhk4/TbLTN8vFuGLfMpbOaVaObkhyRMaGgYDtKu
e335JDs29sB8GV2Tn38aIlRsaDA0uR/d3NNM7NPspj9ldHfT2iRCngHOGKHF6hT9
T/iFPURKAGHqCZffmWPSTC1trdkx8NFrk6N9Y24AcekV53TI7S0ecA/7yoZzPqeU
GaCJV/lJSAtt3R/TCrfXPX101NA39QOQoqSXqX/sGPisJG3VYZUWBIMmtTGYzQTQ
iy30k0o5GArplx67x4H6u4lM3aZc75XkTra+gfPKrjPonTOwwPJ2q81LWZ0PVdSh
mrHKq0iZKWBBrdi1LXMQJrad450E4K4KGwiLAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUbpNIv1n6vzz2IuZvUJ851NVWR0cwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYnBOSXYxbjZ2enoySXVadlVKODUx
TlZXUjBjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2ppGDAN
BgkqhkiG9w0BAQsFAAOCAQEAY1GscJV43eNeb6RHI5j/P07m4g1QxmunbZg0MEwq
sFBnO6JFFHuYh7BiHd/FZnMZ9ONuBEX456q2827P2vuuoyoxoGrvV5VAUtwxD6fo
3dnq8Y7xPPTKoEdoaEYeOLIjU+IyYsGTrYwzC997D2SePXHsAFzL0PRNIdl+ENO4
shVVHcpekRv5kfDYW5lQdLq2zB/kEpKNJRXFPBc9tiA36P+Z78GC9MrrR9JrYNV2
xd/oZpTzNqxPv1na0wIfUs2Sltyd6rfPpX8sHBezo9zn8ee6TR1EmWCtRR9DhD/E
JcuEGrdwZ87bVZcjKdHx/YVDqZMp0QXyXuDNHMye9M8KEA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:30:16 2025 by rpki-client