Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fFzanaje4fGcoUowYhRxnk9cNGE.roa
File: fFzanaje4fGcoUowYhRxnk9cNGE.roa (raw, json)
Hash identifier: YkgRwZVJWrKIOkK5ooyY6SGKhIHUjg/eVvSlDTFGtiM=
Subject key identifier: 7C:5C:DA:9D:A8:DE:E1:F1:9C:A1:4A:30:62:14:71:9E:4F:5C:34:61
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0DED
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fFzanaje4fGcoUowYhRxnk9cNGE.roa
Signing time: Wed 29 Sep 2021 02:43:00 +0000
ROA not before: Wed 29 Sep 2021 02:43:00 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 61.56.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3565 (0xded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:00 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7C5CDA9DA8DEE1F19CA14A306214719E4F5C3461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:2f:95:a6:63:3f:50:6a:59:19:d1:36:93:
a2:f3:22:70:3b:34:b1:e3:cb:c8:29:73:62:9a:09:
c3:ed:e9:88:e8:d9:22:a1:07:85:57:93:8e:81:63:
26:c6:7e:98:b4:5f:d2:9e:ef:f7:7f:d9:31:ba:d4:
ab:b5:ec:87:82:35:fd:d2:72:9a:e9:c7:4c:99:c2:
7b:17:6f:4e:1c:7a:c4:37:54:8d:a2:8d:34:d3:9d:
db:fb:15:15:dd:b9:fd:54:6d:5b:7b:2b:7e:09:2b:
19:ca:4b:fe:ae:0b:84:52:0c:8a:85:94:d6:1a:e3:
f9:71:44:85:58:de:06:2b:bc:ca:ec:83:20:91:d8:
64:c6:93:45:8c:63:a9:3b:2a:3b:36:37:54:9d:5d:
cf:8b:a3:0c:e3:90:f1:83:f1:ee:d7:ae:15:6f:65:
01:7f:51:f2:81:80:57:5e:39:4f:cd:2f:75:bd:1b:
de:04:15:c1:86:f0:d1:5a:d0:87:7c:43:b2:fd:c1:
ff:75:0a:7f:0e:a4:92:64:a1:48:a3:53:80:25:b0:
cf:3b:6c:8c:4e:ed:da:f3:cc:d6:4a:a4:60:03:c7:
d6:e3:9d:7f:61:ac:e2:cd:df:84:3c:dd:1a:89:61:
b8:13:08:04:e0:50:f3:9b:ef:c3:ba:7a:45:84:c4:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5C:DA:9D:A8:DE:E1:F1:9C:A1:4A:30:62:14:71:9E:4F:5C:34:61
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fFzanaje4fGcoUowYhRxnk9cNGE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.224.0/19
Signature Algorithm: sha256WithRSAEncryption
44:86:0f:d5:63:e0:96:2e:4a:13:21:68:bd:94:3f:d3:7b:45:
37:4e:a1:ec:b6:ac:21:5f:fa:ab:3f:08:66:4f:12:e9:41:f9:
12:d4:66:87:47:c2:7f:b9:41:ad:46:95:18:81:06:2d:7d:51:
54:8e:a1:54:81:93:b6:0e:e7:2d:87:dc:a8:87:2c:05:0e:5c:
67:28:60:3b:76:97:3b:0d:55:4f:d2:b2:f6:2a:8f:50:0f:fe:
cc:42:b4:f1:04:fc:f0:65:0a:76:8c:ee:e8:f4:f7:d4:5b:68:
ed:fa:d9:d4:99:ad:65:01:df:1c:64:84:45:53:5f:06:70:97:
19:7d:20:74:70:25:12:24:12:85:94:ba:b2:48:b8:4c:c6:c3:
37:4d:70:bf:8a:33:b4:ec:7e:dc:0d:0d:3e:3b:0f:fe:b3:86:
b2:12:6b:28:d1:3b:77:51:7a:4b:92:6c:99:f3:bc:d8:b5:f0:
d7:7d:f7:39:b8:cc:2f:d3:50:5d:5c:82:24:11:a3:5d:9c:31:
91:fa:1b:4a:0f:20:60:43:e7:5e:08:23:5c:0a:76:8a:cf:a9:
2d:e2:8a:a1:e7:af:50:2a:cd:51:16:65:79:43:9f:c6:89:c7:
df:9f:54:46:f1:11:6b:a1:80:5b:ff:62:4d:0b:c8:0e:1c:43:
3c:d2:1a:df
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTA5Mjkw
MjQzMDBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDdDNUNEQTlEQThERUUx
RjE5Q0ExNEEzMDYyMTQ3MTlFNEY1QzM0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC88y+VpmM/UGpZGdE2k6LzInA7NLHjy8gpc2KaCcPt6Yjo2SKh
B4VXk46BYybGfpi0X9Ke7/d/2TG61Ku17IeCNf3Scprpx0yZwnsXb04cesQ3VI2i
jTTTndv7FRXduf1UbVt7K34JKxnKS/6uC4RSDIqFlNYa4/lxRIVY3gYrvMrsgyCR
2GTGk0WMY6k7Kjs2N1SdXc+LowzjkPGD8e7XrhVvZQF/UfKBgFdeOU/NL3W9G94E
FcGG8NFa0Id8Q7L9wf91Cn8OpJJkoUijU4AlsM87bIxO7drzzNZKpGADx9bjnX9h
rOLN34Q83RqJYbgTCATgUPOb78O6ekWExHRPAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUfFzanaje4fGcoUowYhRxnk9cNGEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZkZ6YW5hamU0Zkdjb1Vvd1loUnhu
azljTkdFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBT044DAN
BgkqhkiG9w0BAQsFAAOCAQEARIYP1WPgli5KEyFovZQ/03tFN06h7LasIV/6qz8I
Zk8S6UH5EtRmh0fCf7lBrUaVGIEGLX1RVI6hVIGTtg7nLYfcqIcsBQ5cZyhgO3aX
Ow1VT9Ky9iqPUA/+zEK08QT88GUKdozu6PT31Fto7frZ1JmtZQHfHGSERVNfBnCX
GX0gdHAlEiQShZS6ski4TMbDN01wv4oztOx+3A0NPjsP/rOGshJrKNE7d1F6S5Js
mfO82LXw1333ObjML9NQXVyCJBGjXZwxkfobSg8gYEPnXggjXAp2is+pLeKKoeev
UCrNURZleUOfxonH359URvERa6GAW/9iTQvIDhxDPNIa3w==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:35:32 2025 by rpki-client