Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BNlyzWg8bUxdbFqqZ9c5J22ZBeQ.roa
File: BNlyzWg8bUxdbFqqZ9c5J22ZBeQ.roa (raw, json)
Hash identifier: DV/W3iW5ts2DCj0xSwNfMUwkhN0Ize2OKMtn+kqwiLg=
Subject key identifier: 04:D9:72:CD:68:3C:6D:4C:5D:6C:5A:AA:67:D7:39:27:6D:99:05:E4
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0D1F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BNlyzWg8bUxdbFqqZ9c5J22ZBeQ.roa
Signing time: Sun 07 Feb 2021 11:48:28 +0000
ROA not before: Sun 07 Feb 2021 11:48:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 113.196.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3359 (0xd1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:48:28 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=04D972CD683C6D4C5D6C5AAA67D739276D9905E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:30:42:e0:f8:8f:33:13:8f:4f:d2:cf:cc:
f5:a4:12:da:f1:9f:b1:68:8e:54:53:68:cb:48:bd:
3c:99:c2:84:84:84:82:26:42:c6:30:45:49:b8:91:
b5:fa:9c:df:5c:8e:e1:ba:9d:65:2a:ec:71:82:3f:
d7:e3:3c:66:07:f2:45:31:9e:a5:6c:bc:42:16:d0:
ad:54:e7:8e:07:10:5c:c4:3e:42:87:2d:fd:42:26:
2f:66:b2:27:10:fd:c2:36:78:b2:87:ef:ed:0c:34:
14:7e:98:31:38:7d:d5:12:b8:73:3e:df:c2:f2:f5:
f9:05:d3:56:80:c8:12:60:f5:c0:dd:a1:08:8d:21:
b4:cb:af:1b:cc:1e:05:6a:fe:5e:1e:05:5c:61:3f:
31:cf:ec:0b:5c:81:35:d6:24:06:42:db:ba:62:0e:
26:64:79:d3:26:b3:70:ea:7c:27:72:1e:03:c3:e3:
e4:88:9a:bc:c2:1c:6c:57:e7:ac:6f:96:3c:4e:24:
de:24:2e:98:ed:6f:52:9c:03:29:68:51:f9:fc:7a:
f7:0e:e9:d5:9b:24:ca:4d:f3:97:d1:7a:17:48:30:
50:26:32:9e:b5:18:cb:72:54:25:27:f1:af:f4:b9:
75:e8:c0:eb:c0:16:d1:7e:cd:59:4f:58:cb:c0:d5:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D9:72:CD:68:3C:6D:4C:5D:6C:5A:AA:67:D7:39:27:6D:99:05:E4
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BNlyzWg8bUxdbFqqZ9c5J22ZBeQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5b:6c:22:5d:4d:f2:eb:14:a4:7d:ce:15:13:b7:12:6f:d6:78:
47:7c:89:4e:cd:23:d2:b2:e5:fa:3b:07:ac:b7:1c:f7:1a:83:
20:57:14:4b:b6:92:85:a3:81:c8:72:e8:3b:19:7b:21:8c:0b:
c2:63:63:c9:91:ef:37:33:57:83:c9:f5:e9:ae:43:79:d1:a6:
94:14:07:0b:64:f9:11:1c:df:9c:58:3e:f8:4d:5f:07:56:c5:
50:bd:68:8f:cd:79:2e:5e:74:f2:31:cf:b1:ef:72:c4:c4:0c:
5e:31:ac:9b:b7:0e:38:c5:fd:9f:e2:fb:f0:6a:b5:ae:f1:05:
02:d2:7b:21:b7:ae:38:a3:d2:45:72:72:2a:8a:ac:a9:40:e7:
bb:5c:8d:d0:53:89:1b:c0:a4:b7:73:98:7b:ae:5e:ed:61:9e:
01:77:9c:6e:98:c4:54:4c:17:56:5d:e8:6f:1f:32:be:b8:e5:
52:0b:e8:6b:11:d3:cd:db:a7:4a:ab:8d:f1:de:08:26:82:13:
fc:8b:22:68:a8:71:bc:27:c7:40:13:ec:19:19:1a:a8:cd:c4:
5f:e7:99:29:17:24:d4:d7:98:70:82:57:a7:09:8e:5a:37:9b:
de:8d:31:24:59:84:61:09:8b:1b:bf:6a:79:37:16:b2:ae:f2:
7a:ee:86:5d
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDR8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcx
MTQ4MjhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDA0RDk3MkNENjgzQzZE
NEM1RDZDNUFBQTY3RDczOTI3NkQ5OTA1RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtOzBC4PiPMxOPT9LPzPWkEtrxn7FojlRTaMtIvTyZwoSEhIIm
QsYwRUm4kbX6nN9cjuG6nWUq7HGCP9fjPGYH8kUxnqVsvEIW0K1U544HEFzEPkKH
Lf1CJi9msicQ/cI2eLKH7+0MNBR+mDE4fdUSuHM+38Ly9fkF01aAyBJg9cDdoQiN
IbTLrxvMHgVq/l4eBVxhPzHP7AtcgTXWJAZC27piDiZkedMms3DqfCdyHgPD4+SI
mrzCHGxX56xvljxOJN4kLpjtb1KcAyloUfn8evcO6dWbJMpN85fRehdIMFAmMp61
GMtyVCUn8a/0uXXowOvAFtF+zVlPWMvA1W+9AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUBNlyzWg8bUxdbFqqZ9c5J22ZBeQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQk5seXpXZzhiVXhkYkZxcVo5YzVK
MjJaQmVRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3HEgDAN
BgkqhkiG9w0BAQsFAAOCAQEAW2wiXU3y6xSkfc4VE7cSb9Z4R3yJTs0j0rLl+jsH
rLcc9xqDIFcUS7aShaOByHLoOxl7IYwLwmNjyZHvNzNXg8n16a5DedGmlBQHC2T5
ERzfnFg++E1fB1bFUL1oj815Ll508jHPse9yxMQMXjGsm7cOOMX9n+L78Gq1rvEF
AtJ7IbeuOKPSRXJyKoqsqUDnu1yN0FOJG8Ckt3OYe65e7WGeAXecbpjEVEwXVl3o
bx8yvrjlUgvoaxHTzdunSquN8d4IJoIT/IsiaKhxvCfHQBPsGRkaqM3EX+eZKRck
1NeYcIJXpwmOWjeb3o0xJFmEYQmLG79qeTcWsq7yeu6GXQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org