Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/lFdmktooD40ZwEaxFHXNHp-Ihbg.roa
File: lFdmktooD40ZwEaxFHXNHp-Ihbg.roa (raw, json)
Hash identifier: i1wJspTDOefSUyl0b6aAz20cbXzMx/8bXQ0khSrzm34=
Subject key identifier: 94:57:66:92:DA:28:0F:8D:19:C0:46:B1:14:75:CD:1E:9F:88:85:B8
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0DA9
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lFdmktooD40ZwEaxFHXNHp-Ihbg.roa
Signing time: Fri 01 Sep 2023 09:24:29 +0000
ROA not before: Fri 01 Sep 2023 09:24:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 192.72.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3497 (0xda9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 1 09:24:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=94576692DA280F8D19C046B11475CD1E9F8885B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:6f:34:d8:77:d5:dc:18:af:1e:8e:fa:69:
3c:c2:d1:48:1d:6e:ac:d0:3b:ae:23:b0:f8:a0:a4:
7c:49:47:ab:5c:97:31:09:e3:05:1f:de:e4:5c:69:
3b:86:46:ce:8c:fc:9c:f3:dc:f5:15:26:de:bf:ce:
27:63:eb:d7:9e:82:d1:4e:dc:92:60:6c:4c:c4:4e:
05:ad:52:31:e6:c1:13:b6:0b:99:35:fb:b7:5a:24:
3a:be:97:29:b6:2a:5b:d4:7d:c5:3e:12:54:87:19:
50:a9:eb:a6:76:74:89:5d:cf:38:5a:6c:9d:18:6c:
9a:65:8c:d4:f4:26:f7:74:30:a5:87:6c:de:36:bc:
d5:58:55:2e:81:d1:94:be:3e:39:39:78:24:38:10:
7b:28:cd:92:6d:91:9b:e9:8d:ce:71:4f:ba:b5:61:
93:e0:c9:84:7c:a4:c5:eb:da:7c:6d:da:cb:f3:a3:
88:df:c8:2d:c6:49:30:17:15:d4:c1:f0:b3:5b:58:
8b:f1:3e:7e:82:c4:b9:8b:08:1e:d4:02:47:d7:63:
7f:cc:c8:e7:3f:60:4e:67:6a:b5:d6:ee:d5:ec:f7:
fe:62:94:7b:f2:e4:09:50:ac:9e:bd:45:83:37:89:
e6:e6:72:a7:71:7f:63:61:da:4f:b4:bb:94:b0:0b:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:57:66:92:DA:28:0F:8D:19:C0:46:B1:14:75:CD:1E:9F:88:85:B8
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lFdmktooD40ZwEaxFHXNHp-Ihbg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.252.0/24
Signature Algorithm: sha256WithRSAEncryption
38:60:93:47:cd:a5:42:88:fd:88:d0:a5:a6:04:2d:ef:c7:56:
ed:c4:36:ab:1f:f8:b4:c6:33:8f:bf:b6:7c:94:17:a6:01:8a:
55:72:1d:12:a3:7c:74:81:1f:88:6d:ef:0a:cd:68:c4:c5:4f:
c4:72:25:34:a6:cf:c4:a6:14:45:8b:d3:eb:8b:03:69:32:29:
71:c6:12:c2:5f:62:6a:13:9d:1e:f5:ae:0f:b3:32:49:31:89:
ed:36:ab:9f:88:70:a6:f0:17:3c:8e:64:31:90:9e:33:b7:27:
0b:00:98:40:36:9b:50:90:91:4c:5b:f4:8e:f0:ef:74:23:3e:
bf:7d:66:80:7c:62:19:d7:d1:84:07:41:65:a8:39:37:3c:69:
65:a1:1b:89:b3:15:b0:0d:24:f6:58:29:3a:73:0a:d3:62:cb:
00:1f:9f:59:11:4a:48:83:58:ad:63:98:62:25:2e:7b:ef:4d:
26:1e:70:58:2e:eb:f1:87:f3:33:a9:d4:d1:60:a0:04:60:8f:
4f:9e:01:a1:2d:45:c0:58:2f:70:bc:d0:da:49:5b:f0:98:a8:
15:43:36:f1:f7:fc:4a:af:c7:a8:95:b8:54:bc:4a:7f:53:ff:
b1:4b:a9:45:ad:99:f4:39:bd:b7:b6:95:26:37:a3:85:eb:d1:
63:0d:59:eb
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB
NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMzA5MDEw
OTI0MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk0NTc2NjkyREEyODBG
OEQxOUMwNDZCMTE0NzVDRDFFOUY4ODg1QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9tG802HfV3BivHo76aTzC0UgdbqzQO64jsPigpHxJR6tclzEJ
4wUf3uRcaTuGRs6M/Jzz3PUVJt6/zidj69eegtFO3JJgbEzETgWtUjHmwRO2C5k1
+7daJDq+lym2KlvUfcU+ElSHGVCp66Z2dIldzzhabJ0YbJpljNT0Jvd0MKWHbN42
vNVYVS6B0ZS+Pjk5eCQ4EHsozZJtkZvpjc5xT7q1YZPgyYR8pMXr2nxt2svzo4jf
yC3GSTAXFdTB8LNbWIvxPn6CxLmLCB7UAkfXY3/MyOc/YE5narXW7tXs9/5ilHvy
5AlQrJ69RYM3iebmcqdxf2Nh2k+0u5SwC3kHAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUlFdmktooD40ZwEaxFHXNHp+IhbgwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC
1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90
S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbEZkbWt0b29ENDBad0VheEZIWE5I
cC1JaGJnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBI/DAN
BgkqhkiG9w0BAQsFAAOCAQEAOGCTR82lQoj9iNClpgQt78dW7cQ2qx/4tMYzj7+2
fJQXpgGKVXIdEqN8dIEfiG3vCs1oxMVPxHIlNKbPxKYURYvT64sDaTIpccYSwl9i
ahOdHvWuD7MySTGJ7Tarn4hwpvAXPI5kMZCeM7cnCwCYQDabUJCRTFv0jvDvdCM+
v31mgHxiGdfRhAdBZag5NzxpZaEbibMVsA0k9lgpOnMK02LLAB+fWRFKSINYrWOY
YiUue+9NJh5wWC7r8YfzM6nU0WCgBGCPT54BoS1FwFgvcLzQ2klb8JioFUM28ff8
Sq/HqJW4VLxKf1P/sUupRa2Z9Dm9t7aVJjejhevRYw1Z6w==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:06 2025 by rpki-client