Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-CBgwmdepEZLZPxDlS4HzibbgSM.roa
File: -CBgwmdepEZLZPxDlS4HzibbgSM.roa (raw, json)
Hash identifier: Mxg5Tvg2n+5o3GzxWYn1/PZxr+gqWeauRQD/kG8zvo0=
Subject key identifier: F8:20:60:C2:67:5E:A4:46:4B:64:FC:43:95:2E:07:CE:26:DB:81:23
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1317
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-CBgwmdepEZLZPxDlS4HzibbgSM.roa
Signing time: Fri 01 Sep 2023 09:24:28 +0000
ROA not before: Fri 01 Sep 2023 09:24:28 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131597
IP address blocks: 106.105.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4887 (0x1317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:28 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F82060C2675EA4464B64FC43952E07CE26DB8123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8f:e3:05:91:21:ba:4b:a3:85:1a:12:a6:08:
39:2f:5e:41:ae:ad:38:71:69:95:94:bc:be:23:44:
71:a1:83:17:33:43:eb:50:f7:6d:84:1d:0c:7a:35:
fb:0a:ed:e8:bb:a6:39:dd:0d:d7:f1:47:d2:54:46:
0e:79:72:37:94:a8:fc:13:cf:e4:80:83:95:04:37:
02:20:a0:df:3e:1a:d9:25:e6:04:8f:03:97:9a:63:
05:58:6c:bc:c1:fa:86:bc:68:36:2b:77:0c:16:c9:
17:2b:46:78:b0:9a:e5:23:cb:17:17:80:fe:94:6d:
b7:28:00:6f:b7:dc:a2:47:56:f7:55:e1:50:5c:77:
b6:eb:09:34:73:9e:31:8d:96:1d:b7:01:ea:d3:f0:
a6:88:a8:b7:f2:c9:51:83:02:05:1a:78:fd:51:99:
81:b8:35:e5:c5:e8:a8:7f:47:87:c2:50:eb:a8:8f:
6b:a4:25:ee:51:46:5d:07:72:6f:08:ab:ce:6b:fd:
d3:f4:38:e4:0c:78:ad:32:d1:45:79:e9:40:e5:fa:
af:1b:0d:cb:52:30:28:8e:21:60:7d:e0:28:76:8c:
74:5c:a0:fc:24:01:19:ea:7b:0d:29:33:80:71:b9:
b4:e7:83:8a:b3:d5:40:31:be:cb:02:d7:e5:cb:54:
0e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:20:60:C2:67:5E:A4:46:4B:64:FC:43:95:2E:07:CE:26:DB:81:23
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-CBgwmdepEZLZPxDlS4HzibbgSM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:32:8d:49:a9:dd:25:82:3f:80:74:95:4b:bd:ea:51:8f:7f:
7c:eb:83:dc:aa:a2:52:f4:14:bd:d8:d5:0a:b2:f9:b3:8f:fb:
cf:f8:58:85:dd:04:93:8c:92:87:36:70:cc:23:f1:e5:53:77:
55:e5:b5:dd:e8:0c:a4:08:36:79:59:bf:47:be:df:52:7f:36:
af:f4:e7:c8:52:af:20:b7:88:ba:d5:55:68:2b:50:e7:98:a4:
a3:e4:b5:f4:5c:70:30:c7:e1:95:d6:7b:d0:ef:3f:bb:94:28:
f1:28:eb:e7:77:e9:cd:55:06:80:37:74:c2:44:5c:73:fc:08:
06:da:6f:9d:3a:47:c5:17:aa:cb:3c:c6:ac:b9:a2:d4:8f:bc:
75:d8:78:29:2d:fc:26:49:65:c3:7b:cb:cf:95:52:ed:0e:a7:
a9:fa:a2:4d:dc:ef:84:80:aa:11:98:35:0e:19:c3:7d:47:f8:
67:e2:ba:20:68:9d:8f:ca:b9:ab:ff:37:b4:9f:87:41:72:d2:
6d:e1:2b:75:77:d0:c0:6c:42:39:4e:73:5b:ea:f7:0b:63:00:
60:21:35:e8:0f:8c:bd:dd:1f:11:e8:e7:32:46:af:10:1d:b5:
b0:7d:4a:67:c4:e8:0b:85:df:9c:98:32:a0:f3:d4:57:25:1f:
6b:eb:e1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:58 2025 by rpki-client