Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/nBRTnPRIQ9UGU3mJV1xx8kqNG8Y.roa
File: nBRTnPRIQ9UGU3mJV1xx8kqNG8Y.roa (raw, json)
Hash identifier: 3gsiZ35iJvOZI2bLn1PiegpOTA0KD/v5WAWLAkK12Q0=
Subject key identifier: 9C:14:53:9C:F4:48:43:D5:06:53:79:89:57:5C:71:F2:4A:8D:1B:C6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/nBRTnPRIQ9UGU3mJV1xx8kqNG8Y.roa
Signing time: Thu 15 Sep 2022 02:43:19 +0000
ROA not before: Thu 15 Sep 2022 02:43:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 2401:a040::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9C14539CF44843D506537989575C71F24A8D1BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:a7:65:89:cd:72:60:c0:92:56:9e:f4:d2:
a4:03:8c:0e:60:6e:d1:02:ec:5c:85:d6:c7:96:ab:
97:9c:43:5b:99:29:68:35:28:9e:de:62:3a:67:c0:
f0:9d:0e:9a:7e:a1:42:71:5b:d6:9c:a6:ec:4d:bf:
2f:63:53:3e:da:de:4c:4e:c1:74:0c:14:92:8b:1d:
22:3e:eb:ce:36:eb:09:6a:84:8a:82:de:1c:9b:06:
11:35:a2:56:57:91:a6:8e:02:53:55:11:00:0d:2b:
1b:f9:d2:c7:46:1e:d8:aa:d5:39:1e:03:9a:94:43:
93:b4:41:4a:fd:db:58:81:00:6f:e3:4b:71:53:4f:
e0:00:da:d6:2d:40:8b:f8:81:f7:9d:54:af:59:4b:
fd:60:4e:c6:1e:1d:a3:71:8f:81:79:87:55:4f:bc:
32:9d:46:f3:eb:0e:da:f8:70:e7:ad:66:ee:8a:37:
78:cc:dc:fc:1d:e5:04:f4:ba:90:23:86:25:f4:be:
97:89:be:68:6e:a3:54:66:22:35:a7:0d:de:d7:84:
51:fd:24:56:5b:39:eb:2c:52:5a:91:b9:d9:20:c3:
8c:dd:88:b7:fb:3e:a9:1a:6e:d3:9e:85:86:92:e5:
22:e9:ee:ea:a1:6c:1e:57:e7:37:a7:23:75:ee:36:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:14:53:9C:F4:48:43:D5:06:53:79:89:57:5C:71:F2:4A:8D:1B:C6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/nBRTnPRIQ9UGU3mJV1xx8kqNG8Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:a040::/32
Signature Algorithm: sha256WithRSAEncryption
65:97:54:ec:4d:dc:53:bc:8e:12:f3:cc:08:ae:8c:b9:06:0e:
16:00:20:9b:c2:fd:21:bc:25:59:12:fa:5d:74:19:5e:8a:97:
1c:a1:59:02:14:78:fc:64:a8:31:a3:1a:14:7e:b2:6b:75:3a:
f5:85:4a:5b:69:da:e6:25:c7:ba:7d:65:db:40:5e:67:39:38:
68:c5:ed:50:02:ae:4c:e0:89:f6:eb:fb:db:db:57:c4:27:58:
a4:33:66:3f:e8:f0:c0:8c:f2:83:fa:8e:b3:2b:61:ca:69:59:
0d:d4:56:86:72:a8:08:bc:27:21:66:16:03:4e:77:f0:d2:91:
c7:1d:b5:37:9d:5e:69:45:d1:79:eb:88:54:6c:55:c2:19:e9:
71:fa:7e:fc:01:35:97:b4:9b:a0:28:5a:d4:e0:db:c7:7f:b4:
3f:1d:c2:24:26:e1:4c:20:15:aa:40:a2:e0:38:fa:c3:f6:3d:
80:00:d5:15:0d:d3:22:10:af:c4:1a:e8:5a:90:5a:0d:2a:2a:
83:01:33:23:59:3a:1c:cd:9a:48:4c:bc:69:00:85:a1:cf:df:
45:eb:49:bb:38:47:38:a6:55:a4:2d:8a:3a:59:17:6b:04:88:
7a:54:fd:4a:75:24:b9:7e:d0:ac:9b:07:e3:cb:08:62:4e:fe:
67:5a:a8:f6
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDlDMTQ1MzlDRjQ0ODQz
RDUwNjUzNzk4OTU3NUM3MUYyNEE4RDFCQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEaqdlic1yYMCSVp700qQDjA5gbtEC7FyF1seWq5ecQ1uZKWg1
KJ7eYjpnwPCdDpp+oUJxW9acpuxNvy9jUz7a3kxOwXQMFJKLHSI+68426wlqhIqC
3hybBhE1olZXkaaOAlNVEQANKxv50sdGHtiq1TkeA5qUQ5O0QUr921iBAG/jS3FT
T+AA2tYtQIv4gfedVK9ZS/1gTsYeHaNxj4F5h1VPvDKdRvPrDtr4cOetZu6KN3jM
3Pwd5QT0upAjhiX0vpeJvmhuo1RmIjWnDd7XhFH9JFZbOessUlqRudkgw4zdiLf7
PqkabtOehYaS5SLp7uqhbB5X5zenI3XuNtS7AgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUnBRTnPRIQ9UGU3mJV1xx8kqNG8YwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbkJSVG5QUklROVVHVTNtSlYxeHg4
a3FORzhZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBoEAw
DQYJKoZIhvcNAQELBQADggEBAGWXVOxN3FO8jhLzzAiujLkGDhYAIJvC/SG8JVkS
+l10GV6KlxyhWQIUePxkqDGjGhR+smt1OvWFSltp2uYlx7p9ZdtAXmc5OGjF7VAC
rkzgifbr+9vbV8QnWKQzZj/o8MCM8oP6jrMrYcppWQ3UVoZyqAi8JyFmFgNOd/DS
kccdtTedXmlF0XnriFRsVcIZ6XH6fvwBNZe0m6AoWtTg28d/tD8dwiQm4UwgFapA
ouA4+sP2PYAA1RUN0yIQr8Qa6FqQWg0qKoMBMyNZOhzNmkhMvGkAhaHP30XrSbs4
RzimVaQtijpZF2sEiHpU/Up1JLl+0KybB+PLCGJO/mdaqPY=
-----END CERTIFICATE-----
Generated at Thu Apr 17 17:14:35 2025 by rpki-client