Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/AVucDWgOpLwxlmyZqRUGMsEDtVU.roa
File: AVucDWgOpLwxlmyZqRUGMsEDtVU.roa (raw, json)
Hash identifier: 4zRNSQ1slQtPhSf2y9AcGxx0H2WwiOW5mJpxzkRztok=
Subject key identifier: 01:5B:9C:0D:68:0E:A4:BC:31:96:6C:99:A9:15:06:32:C1:03:B5:55
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E89
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/AVucDWgOpLwxlmyZqRUGMsEDtVU.roa
Signing time: Wed 29 Sep 2021 02:43:43 +0000
ROA not before: Wed 29 Sep 2021 02:43:43 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18049
IP address blocks: 112.105.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3721 (0xe89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:43 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=015B9C0D680EA4BC31966C99A9150632C103B555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:1e:87:86:80:8a:8d:56:fb:7f:6b:8d:bc:
45:51:fe:76:b7:bf:21:c2:b4:33:73:96:d3:38:dc:
6e:7d:c7:c8:f7:01:21:15:bc:61:02:9a:f7:f7:5a:
e2:e6:a5:e4:7c:38:70:1b:a8:2d:3b:27:44:ac:f8:
a5:18:f4:42:b5:bb:90:06:62:a8:44:46:d2:52:0f:
34:37:ca:75:b8:0a:e0:63:78:08:3b:db:ff:d5:ca:
84:2d:8d:1d:81:f9:07:40:46:b7:47:87:b7:ec:e4:
93:03:11:07:9e:ef:37:4a:6c:08:27:03:78:7d:92:
6c:89:bb:a2:8a:b1:00:69:a5:76:38:8c:8f:09:f3:
9e:60:f8:9d:df:45:23:70:79:b7:2e:15:20:74:7e:
fa:1e:15:c1:5f:14:30:6c:88:ee:18:8e:02:b3:7f:
3b:d7:ac:16:4b:13:72:6c:f7:29:84:77:9f:43:fc:
55:58:f8:49:28:c0:c7:95:63:32:a5:a0:6b:ef:b8:
c3:74:86:e9:9d:6d:b7:bc:ec:bd:38:c2:c2:ef:da:
b4:d1:1b:49:6d:44:18:3a:63:54:24:5c:2f:4d:c0:
b6:09:55:41:02:5b:5c:d7:ac:2b:f5:d5:db:a3:34:
c1:8e:12:4b:3c:39:8e:46:c1:1c:1b:4d:b4:e6:68:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5B:9C:0D:68:0E:A4:BC:31:96:6C:99:A9:15:06:32:C1:03:B5:55
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/AVucDWgOpLwxlmyZqRUGMsEDtVU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:c7:cd:6b:18:1c:70:02:04:a5:f0:d5:73:86:f2:68:75:63:
a1:d6:d2:39:c3:e5:be:c6:95:d7:d6:ed:43:1b:f0:f3:79:fc:
49:ab:f9:f5:16:be:c6:be:ad:27:d5:cd:f7:78:cf:fe:3b:ea:
50:0f:de:8e:6e:9a:a8:21:b4:8f:b4:c4:12:ae:99:df:5f:99:
a3:78:61:05:d6:1b:40:fe:81:62:4c:78:0b:5e:66:aa:83:7e:
50:86:f5:51:69:b9:25:23:81:4d:64:b1:e1:7b:a3:fc:bf:fd:
65:69:d4:2f:78:fe:a0:14:79:f7:9e:62:bc:0a:cd:32:9c:37:
7b:71:a5:98:43:64:ad:23:cd:6c:50:04:e4:a8:9b:e0:a5:27:
9b:e5:df:58:2c:8d:1e:7c:56:f8:04:b4:e5:c1:08:1c:f3:d9:
64:2f:18:91:8d:03:88:96:06:b0:08:ee:db:22:d4:b3:e4:8d:
4d:ef:4b:89:49:50:67:93:6b:8a:b5:85:45:29:f3:39:77:bd:
c1:33:a8:9d:d2:ce:b9:0a:ab:f4:dc:65:33:03:ef:db:50:65:
c2:cc:d2:f1:87:8b:f2:b0:2b:df:09:10:b5:d5:66:47:10:cf:
62:c5:f1:0c:e3:7c:3c:e6:7a:05:50:3f:83:6a:12:cd:94:76:
c6:b5:86:7c
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDokwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTA5Mjkw
MjQzNDNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDAxNUI5QzBENjgwRUE0
QkMzMTk2NkM5OUE5MTUwNjMyQzEwM0I1NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCibh6HhoCKjVb7f2uNvEVR/na3vyHCtDNzltM43G59x8j3ASEV
vGECmvf3WuLmpeR8OHAbqC07J0Ss+KUY9EK1u5AGYqhERtJSDzQ3ynW4CuBjeAg7
2//VyoQtjR2B+QdARrdHh7fs5JMDEQee7zdKbAgnA3h9kmyJu6KKsQBppXY4jI8J
855g+J3fRSNwebcuFSB0fvoeFcFfFDBsiO4YjgKzfzvXrBZLE3Js9ymEd59D/FVY
+EkowMeVYzKloGvvuMN0humdbbe87L04wsLv2rTRG0ltRBg6Y1QkXC9NwLYJVUEC
W1zXrCv11dujNMGOEks8OY5GwRwbTbTmaDVbAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUAVucDWgOpLwxlmyZqRUGMsEDtVUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQVZ1Y0RXZ09wTHd4bG15WnFSVUdN
c0VEdFZVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXBpIDAN
BgkqhkiG9w0BAQsFAAOCAQEAusfNaxgccAIEpfDVc4byaHVjodbSOcPlvsaV19bt
Qxvw83n8Sav59Ra+xr6tJ9XN93jP/jvqUA/ejm6aqCG0j7TEEq6Z31+Zo3hhBdYb
QP6BYkx4C15mqoN+UIb1UWm5JSOBTWSx4Xuj/L/9ZWnUL3j+oBR5955ivArNMpw3
e3GlmENkrSPNbFAE5Kib4KUnm+XfWCyNHnxW+AS05cEIHPPZZC8YkY0DiJYGsAju
2yLUs+SNTe9LiUlQZ5NrirWFRSnzOXe9wTOondLOuQqr9NxlMwPv21BlwszS8YeL
8rAr3wkQtdVmRxDPYsXxDON8POZ6BVA/g2oSzZR2xrWGfA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org