Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/n-utiFXfFLCl9FIzWcDmQvmZNuw.roa
File: n-utiFXfFLCl9FIzWcDmQvmZNuw.roa (raw, json)
Hash identifier: j4rP2M4wlZcH2KMwob+wAGKJ9bHQuKjU5tSERw1XxRk=
Subject key identifier: 9F:EB:AD:88:55:DF:14:B0:A5:F4:52:33:59:C0:E6:42:F9:99:36:EC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0BFB
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/n-utiFXfFLCl9FIzWcDmQvmZNuw.roa
Signing time: Sun 07 Feb 2021 06:43:19 +0000
ROA not before: Sun 07 Feb 2021 06:43:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 220.229.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3067 (0xbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:43:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9FEBAD8855DF14B0A5F4523359C0E642F99936EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:be:ce:bd:4e:90:a7:5e:c2:3d:00:58:3c:
fb:28:b9:12:57:e7:1b:de:8d:0b:39:57:29:82:f8:
67:5b:f8:b8:06:f0:4c:b4:2d:51:2f:03:d9:7b:58:
fa:1c:f6:5c:0c:ea:82:13:32:62:8a:01:18:63:26:
e5:49:66:df:52:eb:6f:04:fa:b8:53:44:f7:7b:0b:
70:87:d2:6c:e3:0f:43:5d:28:ec:d0:3f:7f:43:9a:
1d:d4:fc:7c:ae:23:cc:e6:06:2f:af:f3:9a:53:b5:
7c:66:88:97:00:7f:25:41:25:b3:f9:07:4f:90:85:
6e:0c:1f:3b:89:37:02:00:01:16:1c:ea:8c:39:9e:
4d:90:e4:4a:2b:ac:09:68:d0:08:7d:8a:cd:1a:cf:
2f:c0:60:5c:26:61:06:31:99:45:9f:c7:d2:78:d6:
b0:26:fd:fb:ca:0b:89:17:c4:a7:d9:c4:ce:d8:cd:
cc:91:e5:54:bc:52:3f:78:a8:d6:3c:ad:36:f2:28:
c6:e0:45:af:e3:dd:3f:df:13:ef:5e:b4:41:4b:b1:
21:ad:de:40:b9:d4:e4:da:b7:3e:4b:0d:7a:cc:b9:
e3:57:80:71:3d:8a:02:02:2e:b9:a2:4a:c9:42:b1:
16:a1:72:7e:73:b8:5f:a5:90:d2:b0:d5:f7:b5:eb:
3b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EB:AD:88:55:DF:14:B0:A5:F4:52:33:59:C0:E6:42:F9:99:36:EC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/n-utiFXfFLCl9FIzWcDmQvmZNuw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:d9:33:3e:36:b4:bd:b0:c9:65:6d:50:bf:48:8f:dc:cc:f5:
99:79:57:13:72:2d:36:77:33:44:af:67:e8:12:ac:54:03:d4:
1d:65:f0:d0:93:a3:12:74:b8:96:0d:18:ee:43:00:83:e3:db:
58:df:27:29:d8:a2:7f:2d:11:a9:99:49:27:fd:43:b6:a0:d9:
19:03:f6:52:3b:a5:b6:07:d1:84:14:a7:76:50:56:b2:7a:86:
04:78:e6:fe:e6:b4:66:80:89:6c:f4:5a:92:c3:4e:5d:4a:69:
df:94:df:04:38:96:e8:cd:a5:e9:06:62:17:d7:2b:e7:3a:e4:
00:1e:fc:70:53:96:6a:ed:a2:71:43:4a:de:d2:a2:ae:9d:84:
5c:ae:7d:ed:38:3b:29:60:cf:7a:e3:d9:7d:0b:ba:86:f3:71:
32:78:a2:0d:3c:ac:e4:90:70:52:5b:ef:65:f6:fd:12:47:ca:
94:f0:bf:de:3b:c6:59:ea:34:ee:e2:8d:ef:ae:50:1d:4e:8a:
63:86:57:b4:6d:e0:96:58:88:6a:fc:81:87:29:a8:aa:51:10:
a8:e8:bb:f7:34:1d:4e:77:ba:a4:84:32:e1:aa:2f:a7:2f:2d:
9c:ba:48:87:ce:9d:da:e3:c6:c8:87:6a:77:18:07:75:6b:3a:
c3:45:35:50
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICC/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcw
NjQzMTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDlGRUJBRDg4NTVERjE0
QjBBNUY0NTIzMzU5QzBFNjQyRjk5OTM2RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQMb7OvU6Qp17CPQBYPPsouRJX5xvejQs5VymC+Gdb+LgG8Ey0
LVEvA9l7WPoc9lwM6oITMmKKARhjJuVJZt9S628E+rhTRPd7C3CH0mzjD0NdKOzQ
P39Dmh3U/HyuI8zmBi+v85pTtXxmiJcAfyVBJbP5B0+QhW4MHzuJNwIAARYc6ow5
nk2Q5EorrAlo0Ah9is0azy/AYFwmYQYxmUWfx9J41rAm/fvKC4kXxKfZxM7YzcyR
5VS8Uj94qNY8rTbyKMbgRa/j3T/fE+9etEFLsSGt3kC51OTatz5LDXrMueNXgHE9
igICLrmiSslCsRahcn5zuF+lkNKw1fe16zsnAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUn+utiFXfFLCl9FIzWcDmQvmZNuwwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbi11dGlGWGZGTENsOUZJeldjRG1R
dm1aTnV3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANzlMA0G
CSqGSIb3DQEBCwUAA4IBAQAT2TM+NrS9sMllbVC/SI/czPWZeVcTci02dzNEr2fo
EqxUA9QdZfDQk6MSdLiWDRjuQwCD49tY3ycp2KJ/LRGpmUkn/UO2oNkZA/ZSO6W2
B9GEFKd2UFayeoYEeOb+5rRmgIls9FqSw05dSmnflN8EOJbozaXpBmIX1yvnOuQA
HvxwU5Zq7aJxQ0re0qKunYRcrn3tODspYM9649l9C7qG83EyeKINPKzkkHBSW+9l
9v0SR8qU8L/eO8ZZ6jTu4o3vrlAdTopjhle0beCWWIhq/IGHKaiqURCo6Lv3NB1O
d7qkhDLhqi+nLy2cukiHzp3a48bIh2p3GAd1azrDRTVQ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-fra.rpki-client.org