Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/vk1VVvf5eIT3eqsRqMAxEHF3-Ew.roa
File: vk1VVvf5eIT3eqsRqMAxEHF3-Ew.roa (raw, json)
Hash identifier: KxnGLJrWBd6djVs1JjR4hnLplY25wDEwLXLCdxyRPTY=
Subject key identifier: BE:4D:55:56:F7:F9:78:84:F7:7A:AB:11:A8:C0:31:10:71:77:F8:4C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E1F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vk1VVvf5eIT3eqsRqMAxEHF3-Ew.roa
Signing time: Wed 29 Sep 2021 02:43:13 +0000
ROA not before: Wed 29 Sep 2021 02:43:13 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 218.210.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3615 (0xe1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:13 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BE4D5556F7F97884F77AAB11A8C031107177F84C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:d1:f3:d3:9e:88:d6:eb:01:17:d2:9d:eb:
2f:a1:aa:2b:0a:7b:c4:cf:96:76:77:0b:f0:bc:03:
35:4a:91:80:26:b9:56:12:f5:a4:e2:1c:30:aa:be:
5c:0d:3a:e3:05:9d:c3:f7:71:25:54:49:d4:f3:b6:
7f:3d:89:b0:26:79:16:26:67:4b:28:2a:ef:da:f1:
1e:e0:13:fc:0c:4e:e0:36:86:d9:a6:53:8a:c9:48:
c4:55:a7:63:1c:a7:8b:78:fa:3c:c0:02:ab:c2:21:
a8:a0:75:c3:57:87:c6:8c:14:83:39:5d:57:78:e9:
bb:40:ed:27:f7:a5:29:87:ed:dc:16:06:7d:1d:21:
82:5b:ce:03:32:75:8b:6a:07:c8:13:fa:9b:bd:06:
0b:c4:fd:76:68:60:31:27:3c:c2:6e:e4:b5:ca:99:
51:04:13:40:74:29:b2:aa:2d:95:c8:e8:6a:8c:66:
ba:83:b6:96:6b:e0:b4:15:0f:f3:93:43:f8:ea:1f:
39:f9:58:1c:f7:c9:c2:04:cc:94:f5:a4:82:37:a5:
4f:5c:c4:b4:b8:06:5c:7a:10:10:84:71:4e:97:45:
91:98:b4:34:73:34:36:5d:f8:0d:65:37:9d:74:2c:
48:4c:a4:5a:8b:e4:8a:bf:02:01:f9:6a:17:77:9c:
a7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4D:55:56:F7:F9:78:84:F7:7A:AB:11:A8:C0:31:10:71:77:F8:4C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vk1VVvf5eIT3eqsRqMAxEHF3-Ew.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:d7:7f:6e:05:8e:93:32:a8:d8:c5:7c:8e:bd:98:bd:7c:7c:
23:1d:ec:7e:84:ee:6c:55:a3:4a:c2:f9:e0:be:6a:e7:13:0d:
6f:ba:4e:5b:3e:10:6c:97:88:94:f5:7c:0d:9e:34:f6:8c:af:
21:47:7a:f0:4d:71:10:65:bf:15:6f:8a:22:58:28:68:cc:1d:
55:77:1f:75:77:24:e5:57:e1:b4:ef:df:1d:97:36:9a:4d:4e:
56:23:58:fa:0d:1b:85:35:03:d2:5d:c0:95:77:ce:39:a0:4d:
87:e6:41:1a:65:da:9e:81:07:4f:f4:2f:67:e2:df:d2:82:de:
0b:0d:70:b6:9b:01:b0:7f:f0:77:50:19:8e:a1:32:2e:fe:e6:
12:6a:89:55:c7:0a:68:1d:4c:a0:32:a5:88:17:a3:80:1c:6e:
60:e4:28:80:40:ac:f0:f2:0c:39:8e:4d:43:ab:7b:c8:30:7b:
f5:6b:e9:35:ad:0c:d3:42:a3:4c:04:62:4a:d6:a1:6d:a8:5c:
f0:01:39:30:9b:d0:8a:2c:0e:74:72:c8:a3:ce:5b:52:86:d5:
f4:a7:96:ba:7a:74:ee:ec:9e:d1:5e:28:cc:7d:d0:ae:26:49:
c9:7c:0d:f9:de:c1:00:72:74:d8:ec:58:bc:c1:d0:ef:68:0e:
ab:fd:3a:eb
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICDh8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTA5Mjkw
MjQzMTNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEJFNEQ1NTU2RjdGOTc4
ODRGNzdBQUIxMUE4QzAzMTEwNzE3N0Y4NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVYtHz056I1usBF9Kd6y+hqisKe8TPlnZ3C/C8AzVKkYAmuVYS
9aTiHDCqvlwNOuMFncP3cSVUSdTztn89ibAmeRYmZ0soKu/a8R7gE/wMTuA2htmm
U4rJSMRVp2Mcp4t4+jzAAqvCIaigdcNXh8aMFIM5XVd46btA7Sf3pSmH7dwWBn0d
IYJbzgMydYtqB8gT+pu9BgvE/XZoYDEnPMJu5LXKmVEEE0B0KbKqLZXI6GqMZrqD
tpZr4LQVD/OTQ/jqHzn5WBz3ycIEzJT1pII3pU9cxLS4Blx6EBCEcU6XRZGYtDRz
NDZd+A1lN510LEhMpFqL5Iq/AgH5ahd3nKdvAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUvk1VVvf5eIT3eqsRqMAxEHF3+EwwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvdmsxVlZ2ZjVlSVQzZXFzUnFNQXhF
SEYzLUV3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANrSMA0G
CSqGSIb3DQEBCwUAA4IBAQC3139uBY6TMqjYxXyOvZi9fHwjHex+hO5sVaNKwvng
vmrnEw1vuk5bPhBsl4iU9XwNnjT2jK8hR3rwTXEQZb8Vb4oiWChozB1Vdx91dyTl
V+G0798dlzaaTU5WI1j6DRuFNQPSXcCVd845oE2H5kEaZdqegQdP9C9n4t/Sgt4L
DXC2mwGwf/B3UBmOoTIu/uYSaolVxwpoHUygMqWIF6OAHG5g5CiAQKzw8gw5jk1D
q3vIMHv1a+k1rQzTQqNMBGJK1qFtqFzwATkwm9CKLA50csijzltShtX0p5a6enTu
7J7RXijMfdCuJknJfA353sEAcnTY7Fi8wdDvaA6r/Trr
-----END CERTIFICATE-----
Generated at Thu Apr 17 16:04:05 2025 by rpki-client