Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/xMqF-GDXvwbXy3dQQ6VjjRxF_sw.roa
File: xMqF-GDXvwbXy3dQQ6VjjRxF_sw.roa (raw, json)
Hash identifier: hZwGIzLUzvDAsehlXuAeXvrVXxDqcK+XQQPWJyBZmaU=
Subject key identifier: C4:CA:85:F8:60:D7:BF:06:D7:CB:77:50:43:A5:63:8D:1C:45:FE:CC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E87
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xMqF-GDXvwbXy3dQQ6VjjRxF_sw.roa
Signing time: Wed 29 Sep 2021 02:43:42 +0000
ROA not before: Wed 29 Sep 2021 02:43:42 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 112.105.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3719 (0xe87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:42 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C4CA85F860D7BF06D7CB775043A5638D1C45FECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:76:ae:91:59:3f:ef:3c:0d:84:00:31:f5:
c2:fa:55:8b:cd:b9:27:24:6e:86:9c:b3:ad:f7:d0:
44:1e:cd:a9:51:8a:47:90:4e:6d:18:2b:a0:4e:19:
73:17:83:73:b6:11:82:e7:98:5a:d3:3f:13:dd:89:
da:b1:68:0b:74:1f:06:33:56:21:22:58:99:f7:dd:
1d:f7:c8:62:ed:77:df:1f:d4:93:6d:dd:62:37:fc:
29:3c:22:ef:95:a6:6a:25:84:11:13:eb:0f:6d:9e:
8d:17:b6:7a:f3:66:92:db:b4:0d:62:d0:92:ca:2a:
23:65:fa:2d:c6:76:a4:f3:1d:b2:4f:99:c6:9e:6b:
f1:b7:63:57:c8:c6:fa:47:89:5d:45:7b:a9:1d:12:
78:10:b3:ad:0e:ef:83:77:48:71:bb:fd:3f:42:c8:
fa:b5:34:12:be:bb:bc:8f:33:39:ab:5e:a0:f5:e1:
f1:b0:00:0c:79:60:09:b8:a4:bf:0e:d8:a0:21:38:
d9:59:7e:6f:09:a6:a5:9d:41:43:6d:d0:9a:9c:0b:
3f:79:8e:71:24:06:b1:45:bb:7f:c3:15:bc:5e:c9:
3f:bc:7f:fe:a0:5f:a4:6f:21:0b:36:03:e6:a2:0e:
02:be:f8:e7:2b:c5:fb:10:af:1b:35:fb:47:6d:ed:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CA:85:F8:60:D7:BF:06:D7:CB:77:50:43:A5:63:8D:1C:45:FE:CC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xMqF-GDXvwbXy3dQQ6VjjRxF_sw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.64.0/18
Signature Algorithm: sha256WithRSAEncryption
21:bf:c5:e8:44:3d:db:a6:6c:ae:5b:c4:7f:48:0e:42:d6:94:
c2:8d:6f:5b:63:9f:23:dc:3f:fb:df:e8:9c:9c:56:e8:30:1b:
ee:2e:20:87:56:a4:12:14:92:00:f3:fa:2e:78:90:80:22:e9:
10:e7:d7:9e:78:e0:a7:04:ab:42:dd:f5:a3:d0:8a:70:ed:86:
95:4f:bc:eb:ee:3a:7c:61:a2:ee:3f:f7:7f:99:e3:ea:82:9e:
76:19:59:34:33:43:93:b3:ae:b8:79:d8:b8:06:a5:90:3e:a8:
69:a7:da:03:3a:17:ec:9b:b2:21:8b:40:74:32:37:18:f6:9d:
84:58:91:73:4b:9e:2d:18:b5:12:ba:ca:e1:85:9c:1d:65:b1:
a8:01:fe:5d:56:76:6a:2d:23:a1:10:ae:36:8d:7f:5a:79:96:
98:c2:c8:55:f8:e7:87:9e:05:fd:52:71:28:85:e1:27:60:2e:
17:d8:e2:86:4d:7f:56:54:9e:46:7b:0a:53:a7:21:8a:45:ae:
55:c6:82:4b:3e:8d:ec:95:2e:ea:63:0b:77:30:42:1b:3d:1a:
34:76:d5:5c:93:d9:42:00:8b:5b:42:bb:da:07:f6:76:6d:1b:
e8:52:45:49:69:b8:bd:eb:39:0e:9a:09:99:c5:0f:b1:3b:2b:
9b:80:be:02
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTA5Mjkw
MjQzNDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEM0Q0E4NUY4NjBEN0JG
MDZEN0NCNzc1MDQzQTU2MzhEMUM0NUZFQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6GnaukVk/7zwNhAAx9cL6VYvNuSckboacs6330EQezalRikeQ
Tm0YK6BOGXMXg3O2EYLnmFrTPxPdidqxaAt0HwYzViEiWJn33R33yGLtd98f1JNt
3WI3/Ck8Iu+VpmolhBET6w9tno0XtnrzZpLbtA1i0JLKKiNl+i3GdqTzHbJPmcae
a/G3Y1fIxvpHiV1Fe6kdEngQs60O74N3SHG7/T9CyPq1NBK+u7yPMzmrXqD14fGw
AAx5YAm4pL8O2KAhONlZfm8JpqWdQUNt0JqcCz95jnEkBrFFu3/DFbxeyT+8f/6g
X6RvIQs2A+aiDgK++OcrxfsQrxs1+0dt7RDLAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUxMqF+GDXvwbXy3dQQ6VjjRxF/swwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMveE1xRi1HRFh2d2JYeTNkUVE2Vmpq
UnhGX3N3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnBpQDAN
BgkqhkiG9w0BAQsFAAOCAQEAIb/F6EQ926ZsrlvEf0gOQtaUwo1vW2OfI9w/+9/o
nJxW6DAb7i4gh1akEhSSAPP6LniQgCLpEOfXnnjgpwSrQt31o9CKcO2GlU+86+46
fGGi7j/3f5nj6oKedhlZNDNDk7OuuHnYuAalkD6oaafaAzoX7JuyIYtAdDI3GPad
hFiRc0ueLRi1ErrK4YWcHWWxqAH+XVZ2ai0joRCuNo1/WnmWmMLIVfjnh54F/VJx
KIXhJ2AuF9jihk1/VlSeRnsKU6chikWuVcaCSz6N7JUu6mMLdzBCGz0aNHbVXJPZ
QgCLW0K72gf2dm0b6FJFSWm4ves5DpoJmcUPsTsrm4C+Ag==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:09 2025 by rpki-client