Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/GhJb1xrueBDybFmvwhNyMsAkWPA.roa
File: GhJb1xrueBDybFmvwhNyMsAkWPA.roa (raw, json)
Hash identifier: /imLk6TjPmGbFwqZLbGjjlgCsh068bdSNLfadLJZ0O0=
Subject key identifier: 1A:12:5B:D7:1A:EE:78:10:F2:6C:59:AF:C2:13:72:32:C0:24:58:F0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0F85
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GhJb1xrueBDybFmvwhNyMsAkWPA.roa
Signing time: Tue 14 Jun 2022 00:56:42 +0000
ROA not before: Tue 14 Jun 2022 00:56:42 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 23675
IP address blocks: 106.105.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3973 (0xf85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Jun 14 00:56:42 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1A125BD71AEE7810F26C59AFC2137232C02458F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:8d:18:e0:cd:4a:59:53:37:c7:99:02:71:
4d:f3:91:a6:45:af:d0:d8:74:88:9d:48:dc:1c:6a:
a0:1e:99:71:48:7f:6d:85:ff:f5:24:d2:3a:0e:0a:
d8:0c:13:f3:96:fd:c1:33:7c:5e:ad:82:10:32:98:
6e:37:f0:ed:0f:c0:90:6c:f1:a1:19:9b:fc:d2:04:
d5:57:0e:7c:3c:14:83:23:02:c3:98:a3:36:e5:db:
0a:72:32:09:14:37:1f:2e:1a:15:9a:fe:47:fd:b8:
6e:7a:91:6e:fa:a0:a4:86:0a:29:9f:af:db:2d:a8:
c3:d4:7d:bd:e9:17:e0:9f:9a:fe:7f:0d:f2:74:01:
d1:ea:28:b8:ea:bc:f3:ad:70:5e:43:e5:16:74:e8:
33:4d:f3:3b:4e:83:ea:cb:d6:9e:a7:6f:33:62:f7:
c9:9b:b5:62:ab:e1:89:e1:08:98:df:1a:75:01:d0:
7e:4e:7e:7b:85:65:81:d4:e8:6a:90:f3:e9:62:90:
e6:4f:d6:0f:7b:b4:b3:96:c2:6e:56:b8:6c:d4:47:
ca:30:ac:08:00:3c:f3:9b:ee:7b:53:07:45:6f:c0:
b7:be:12:2b:0c:41:d3:68:8c:fc:02:e9:b2:b6:91:
38:1f:40:9c:00:6b:c5:7d:ac:4f:0c:03:93:85:c4:
bf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:12:5B:D7:1A:EE:78:10:F2:6C:59:AF:C2:13:72:32:C0:24:58:F0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GhJb1xrueBDybFmvwhNyMsAkWPA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.110.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e9:62:58:4d:11:42:84:b9:35:55:f7:eb:de:67:45:5f:68:
7e:96:9a:7e:99:f9:82:d0:0d:fb:48:4f:a8:2c:58:8b:d9:a3:
47:41:07:66:92:4c:80:91:6b:b6:c6:29:b8:39:d0:5c:f3:05:
34:f3:0b:fa:b3:c6:8e:65:20:14:22:ab:bd:0a:70:fd:59:cf:
7d:6a:76:2a:f5:be:91:3f:32:2f:10:6a:34:b1:fe:3a:ca:2e:
27:ce:dc:8e:05:63:5f:a6:59:14:6f:06:12:27:10:04:e3:78:
c0:27:36:09:e6:ae:76:c5:60:89:85:5e:23:d6:a3:bf:19:4e:
76:85:8c:5b:c4:5e:b3:af:41:36:1f:f4:80:ac:ff:f9:b4:8b:
4b:8e:b8:e2:38:85:90:e8:cf:ab:19:dc:01:27:87:d4:d8:c8:
10:0b:0d:82:cd:9b:48:12:ea:a1:46:9e:47:27:ee:0b:fc:99:
66:e8:c1:0e:e0:88:a1:f5:76:63:0b:0f:63:37:f1:b9:09:0b:
37:68:db:4c:dd:e9:79:11:34:32:6d:64:60:ba:9c:c6:ae:62:
e1:dc:97:f3:37:99:bb:5d:b1:aa:fd:64:d0:57:bd:41:27:e3:
9d:28:2f:6d:b0:6b:9c:e9:80:7d:12:c7:77:9f:6e:0a:de:b6:
98:13:9e:6b
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA2MTQw
MDU2NDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDFBMTI1QkQ3MUFFRTc4
MTBGMjZDNTlBRkMyMTM3MjMyQzAyNDU4RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQY40Y4M1KWVM3x5kCcU3zkaZFr9DYdIidSNwcaqAemXFIf22F
//Uk0joOCtgME/OW/cEzfF6tghAymG438O0PwJBs8aEZm/zSBNVXDnw8FIMjAsOY
ozbl2wpyMgkUNx8uGhWa/kf9uG56kW76oKSGCimfr9stqMPUfb3pF+Cfmv5/DfJ0
AdHqKLjqvPOtcF5D5RZ06DNN8ztOg+rL1p6nbzNi98mbtWKr4YnhCJjfGnUB0H5O
fnuFZYHU6GqQ8+likOZP1g97tLOWwm5WuGzUR8owrAgAPPOb7ntTB0VvwLe+EisM
QdNojPwC6bK2kTgfQJwAa8V9rE8MA5OFxL/rAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUGhJb1xrueBDybFmvwhNyMsAkWPAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvR2hKYjF4cnVlQkR5YkZtdndoTnlN
c0FrV1BBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGppbjAN
BgkqhkiG9w0BAQsFAAOCAQEAi+liWE0RQoS5NVX3695nRV9ofpaafpn5gtAN+0hP
qCxYi9mjR0EHZpJMgJFrtsYpuDnQXPMFNPML+rPGjmUgFCKrvQpw/VnPfWp2KvW+
kT8yLxBqNLH+OsouJ87cjgVjX6ZZFG8GEicQBON4wCc2CeaudsVgiYVeI9ajvxlO
doWMW8Res69BNh/0gKz/+bSLS4644jiFkOjPqxncASeH1NjIEAsNgs2bSBLqoUae
RyfuC/yZZujBDuCIofV2YwsPYzfxuQkLN2jbTN3peRE0Mm1kYLqcxq5i4dyX8zeZ
u12xqv1k0Fe9QSfjnSgvbbBrnOmAfRLHd59uCt62mBOeaw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org