Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ccG1-_SQtw72ALK3I4FzW_NRMHo.roa
File: ccG1-_SQtw72ALK3I4FzW_NRMHo.roa (raw, json)
Hash identifier: xa55fhpn3cMt9kB3xxXRIpamylpPjib2ReiKePTpMgM=
Subject key identifier: 71:C1:B5:FB:F4:90:B7:0E:F6:00:B2:B7:23:81:73:5B:F3:51:30:7A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08B5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ccG1-_SQtw72ALK3I4FzW_NRMHo.roa
Signing time: Tue 29 Sep 2020 09:52:21 +0000
ROA not before: Tue 29 Sep 2020 09:52:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 115.30.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229 (0x8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:21 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=71C1B5FBF490B70EF600B2B72381735BF351307A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:fe:a2:d2:a7:7a:2a:6e:8a:3e:56:02:1b:
62:32:64:81:e7:33:ba:e9:36:3e:25:56:ba:fd:54:
b9:70:0a:80:5d:0f:6c:d8:b9:4c:0b:5b:d4:7c:9d:
60:c1:03:55:4a:48:1d:21:ea:3c:74:b8:56:8a:9c:
a3:c6:f3:89:bf:ae:f2:7c:7b:83:b3:b0:85:1b:80:
5a:a8:6e:31:12:60:6c:93:5c:5f:9d:6a:f3:b1:ab:
b0:67:28:8d:b5:42:a6:db:95:c7:d3:8e:48:fb:44:
f3:19:20:88:80:98:9b:ef:35:8b:e9:31:ff:32:b7:
e4:9a:e3:19:31:5a:61:e7:9a:1c:16:fe:1f:96:07:
41:43:70:1e:75:05:05:39:e6:cd:51:1d:38:52:bc:
2a:60:8f:bb:4d:36:4d:13:f5:e3:59:d6:00:eb:eb:
1d:e0:ab:52:92:7e:ad:db:39:88:85:8f:95:a1:e5:
a8:06:b7:c7:ae:d5:3d:47:79:e2:c8:65:6c:ae:e3:
89:df:4d:f4:4e:81:f4:db:78:8d:3b:c0:3a:1c:76:
c7:28:bb:88:28:b6:f1:c7:45:33:3f:0e:d1:6e:18:
72:74:7c:38:b2:c7:9f:5b:ce:f4:51:56:71:4d:97:
1d:69:a2:e1:64:e8:a5:75:2d:5f:44:f6:16:12:a9:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C1:B5:FB:F4:90:B7:0E:F6:00:B2:B7:23:81:73:5B:F3:51:30:7A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ccG1-_SQtw72ALK3I4FzW_NRMHo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.64.0/18
Signature Algorithm: sha256WithRSAEncryption
c7:c0:03:95:54:c3:05:8d:84:cc:e0:21:df:1c:71:c4:90:c8:
85:6c:a1:64:c4:d8:fd:0f:ff:f3:b8:bf:80:83:c1:52:7a:54:
27:34:45:f7:22:51:9c:0d:ff:46:1c:13:28:ab:6c:5b:e4:c7:
5d:a2:bc:80:2e:35:52:19:a5:98:48:20:c2:1f:aa:e4:cd:15:
05:1c:1c:1f:96:04:ce:ca:e0:54:17:c4:47:09:86:22:3c:7d:
fb:0e:aa:29:bf:0e:1c:8a:98:e0:5d:6f:bd:1f:27:91:22:19:
d9:ce:25:7d:84:bd:28:29:6a:a2:1c:e0:97:a0:02:ed:09:fb:
99:33:ce:1c:f0:88:01:75:1e:5c:5d:79:f2:1b:65:96:2b:52:
a2:76:e1:57:46:1f:27:9f:98:9d:7b:53:6d:d2:a0:e8:0b:e5:
69:26:4e:d2:e8:25:16:c2:2b:5e:42:50:2a:bf:9e:4e:68:7a:
77:af:ea:41:2a:61:c5:21:73:dd:d5:4e:27:b0:2c:cf:27:bd:
2f:ba:58:6f:03:17:89:f9:7c:b0:bb:2a:23:32:f0:29:2c:55:
fb:cd:a4:61:6d:80:ff:c1:fa:9f:ed:b8:f1:8d:83:9e:21:4c:
07:34:92:dc:ec:0c:60:ac:0e:90:3a:ea:13:9f:39:59:ec:06:
1d:62:1e:36
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyMjFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDcxQzFCNUZCRjQ5MEI3
MEVGNjAwQjJCNzIzODE3MzVCRjM1MTMwN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4+P6i0qd6Km6KPlYCG2IyZIHnM7rpNj4lVrr9VLlwCoBdD2zY
uUwLW9R8nWDBA1VKSB0h6jx0uFaKnKPG84m/rvJ8e4OzsIUbgFqobjESYGyTXF+d
avOxq7BnKI21QqbblcfTjkj7RPMZIIiAmJvvNYvpMf8yt+Sa4xkxWmHnmhwW/h+W
B0FDcB51BQU55s1RHThSvCpgj7tNNk0T9eNZ1gDr6x3gq1KSfq3bOYiFj5Wh5agG
t8eu1T1HeeLIZWyu44nfTfROgfTbeI07wDocdscou4gotvHHRTM/DtFuGHJ0fDiy
x59bzvRRVnFNlx1pouFk6KV1LV9E9hYSqQ75AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUccG1+/SQtw72ALK3I4FzW/NRMHowHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvY2NHMS1fU1F0dzcyQUxLM0k0RnpX
X05STUhvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnMeQDAN
BgkqhkiG9w0BAQsFAAOCAQEAx8ADlVTDBY2EzOAh3xxxxJDIhWyhZMTY/Q//87i/
gIPBUnpUJzRF9yJRnA3/RhwTKKtsW+THXaK8gC41UhmlmEggwh+q5M0VBRwcH5YE
zsrgVBfERwmGIjx9+w6qKb8OHIqY4F1vvR8nkSIZ2c4lfYS9KClqohzgl6AC7Qn7
mTPOHPCIAXUeXF158htllitSonbhV0YfJ5+YnXtTbdKg6AvlaSZO0uglFsIrXkJQ
Kr+eTmh6d6/qQSphxSFz3dVOJ7Aszye9L7pYbwMXifl8sLsqIzLwKSxV+82kYW2A
/8H6n+248Y2DniFMBzSS3OwMYKwOkDrqE585WewGHWIeNg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:21:22 2025 by rpki-client