Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/iFf7mxLY1J9-XTrOsUtZ6oIduHo.roa
File: iFf7mxLY1J9-XTrOsUtZ6oIduHo.roa (raw, json)
Hash identifier: UZL69XiOqkRYXkorN2cXmDtuVcRSd7v6jGItQiuP+ZU=
Subject key identifier: 88:57:FB:9B:12:D8:D4:9F:7E:5D:3A:CE:B1:4B:59:EA:82:1D:B8:7A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10AE
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iFf7mxLY1J9-XTrOsUtZ6oIduHo.roa
Signing time: Wed 01 Feb 2023 10:28:53 +0000
ROA not before: Wed 01 Feb 2023 10:28:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 123.205.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4270 (0x10ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:53 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8857FB9B12D8D49F7E5D3ACEB14B59EA821DB87A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:f0:43:35:ab:b1:a5:d9:06:eb:26:0b:1c:
d8:e9:95:70:5d:d6:e7:b5:12:ed:88:eb:f2:45:e9:
d7:0c:d7:b0:63:8d:b2:61:16:a8:93:9c:44:56:fb:
8b:1f:97:d1:18:d9:c2:a5:25:4f:18:15:ae:c2:c6:
23:b5:a9:66:94:36:97:88:14:a6:fd:3b:93:f4:f5:
45:6b:07:da:07:a6:45:91:7a:e7:f5:f6:47:0e:1f:
96:72:c1:32:23:73:9e:76:bf:82:7b:a4:65:f4:ba:
b9:1b:7b:93:dc:58:03:8e:c9:96:6f:f9:c8:8e:9a:
a8:be:ad:20:5b:58:00:b0:9c:3d:07:1f:42:7b:82:
dc:30:ff:6e:55:ba:16:a1:44:58:78:10:f7:58:9f:
63:e5:41:e6:de:5b:de:e5:bb:1b:de:cf:32:be:a4:
c8:83:3d:06:2b:c8:d4:8f:fc:73:3f:8d:0e:4b:1b:
4f:11:98:28:07:eb:d3:b9:d9:d7:12:2d:37:0e:94:
50:c9:28:12:9f:22:09:0a:c9:be:01:b9:4c:83:33:
9e:74:e4:50:5e:4f:db:76:4c:06:ee:60:02:9f:c2:
3d:b7:da:8f:e8:d6:50:c0:66:5a:91:d0:fb:05:e2:
fb:97:14:a6:4d:8d:52:68:bf:9d:60:fb:95:29:4b:
11:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:57:FB:9B:12:D8:D4:9F:7E:5D:3A:CE:B1:4B:59:EA:82:1D:B8:7A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iFf7mxLY1J9-XTrOsUtZ6oIduHo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.0.0/18
Signature Algorithm: sha256WithRSAEncryption
91:3e:ae:0d:a6:a3:74:ba:86:41:0d:8b:f1:4e:aa:2a:9b:9e:
93:99:78:8b:fd:bf:44:63:9e:aa:ad:a9:42:04:cf:b7:7f:5b:
de:65:f1:79:d7:a5:d9:b6:d5:96:a2:d4:76:7f:d3:46:30:9e:
c1:08:bd:bd:1d:45:83:39:b3:37:79:4a:01:0b:7f:34:1d:6a:
04:be:70:bd:f5:8a:14:9e:b8:1d:fe:cb:11:d7:13:06:72:b6:
08:e7:30:8b:c7:30:66:69:14:90:67:b5:a0:7d:64:0a:77:7d:
5a:86:1c:fc:45:82:98:34:c1:34:6d:dc:43:07:2c:45:fb:6f:
74:73:ef:ce:84:21:68:eb:b3:4a:ea:d6:22:00:f8:5c:e8:0a:
84:09:96:6e:af:ff:3b:4b:17:8a:2d:68:0a:c7:56:a2:c5:31:
c8:6d:bd:f4:3a:93:f3:c1:5d:bc:bf:71:5a:a0:52:7a:9d:60:
a0:15:8e:fd:7f:7d:f6:03:f9:aa:b8:26:d7:a5:c9:e7:11:26:
90:17:a1:65:a6:45:81:ad:95:dc:ef:57:5c:82:10:76:87:3a:
f4:26:33:b0:fe:b7:f3:d9:3b:6e:8e:f6:c9:c2:f2:da:bb:49:
45:50:ad:b7:18:0e:55:e9:21:2a:20:f8:b3:4e:b7:5a:e6:b5:
f4:5a:ed:14
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzAyMDEx
MDI4NTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDg4NTdGQjlCMTJEOEQ0
OUY3RTVEM0FDRUIxNEI1OUVBODIxREI4N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsoPBDNauxpdkG6yYLHNjplXBd1ue1Eu2I6/JF6dcM17BjjbJh
FqiTnERW+4sfl9EY2cKlJU8YFa7CxiO1qWaUNpeIFKb9O5P09UVrB9oHpkWReuf1
9kcOH5ZywTIjc552v4J7pGX0urkbe5PcWAOOyZZv+ciOmqi+rSBbWACwnD0HH0J7
gtww/25VuhahRFh4EPdYn2PlQebeW97luxvezzK+pMiDPQYryNSP/HM/jQ5LG08R
mCgH69O52dcSLTcOlFDJKBKfIgkKyb4BuUyDM5505FBeT9t2TAbuYAKfwj232o/o
1lDAZlqR0PsF4vuXFKZNjVJov51g+5UpSxHjAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUiFf7mxLY1J9+XTrOsUtZ6oIduHowHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvaUZmN214TFkxSjktWFRyT3NVdFo2
b0lkdUhvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnvNADAN
BgkqhkiG9w0BAQsFAAOCAQEAkT6uDaajdLqGQQ2L8U6qKpuek5l4i/2/RGOeqq2p
QgTPt39b3mXxedel2bbVlqLUdn/TRjCewQi9vR1FgzmzN3lKAQt/NB1qBL5wvfWK
FJ64Hf7LEdcTBnK2COcwi8cwZmkUkGe1oH1kCnd9WoYc/EWCmDTBNG3cQwcsRftv
dHPvzoQhaOuzSurWIgD4XOgKhAmWbq//O0sXii1oCsdWosUxyG299DqT88FdvL9x
WqBSep1goBWO/X999gP5qrgm16XJ5xEmkBehZaZFga2V3O9XXIIQdoc69CYzsP63
89k7bo72ycLy2rtJRVCttxgOVekhKiD4s063Wua19FrtFA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:21:59 2025 by rpki-client