Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-PWUMk1oksdG8pZuo1_7O7HgeHU.roa
File: -PWUMk1oksdG8pZuo1_7O7HgeHU.roa (raw, json)
Hash identifier: wgpxA2MWkfuCtzMw8r2ySE5ybObxE4teywP3LAemSZY=
Subject key identifier: F8:F5:94:32:4D:68:92:C7:46:F2:96:6E:A3:5F:FB:3B:B1:E0:78:75
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08D0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-PWUMk1oksdG8pZuo1_7O7HgeHU.roa
Signing time: Tue 29 Sep 2020 09:52:29 +0000
ROA not before: Tue 29 Sep 2020 09:52:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131584
IP address blocks: 106.105.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2256 (0x8d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:29 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F8F594324D6892C746F2966EA35FFB3BB1E07875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:ab:0e:fc:7b:be:67:97:39:53:1c:24:e8:
aa:c2:8c:9b:f9:bb:0c:53:0d:49:8f:f3:91:75:cf:
5c:6d:92:cc:b5:36:ae:33:7a:3e:7c:4b:2a:42:76:
d2:b6:01:50:7c:a7:2d:61:1b:cd:7a:87:58:89:fc:
50:15:8c:5b:54:c2:b7:fe:1a:f1:3f:1d:45:99:6a:
0a:0d:9a:bb:f2:9e:b2:db:a8:07:f0:37:1c:9e:bf:
36:96:2d:f0:9e:28:7b:2d:a8:0c:0c:24:e3:d0:a3:
7c:d8:de:19:37:8e:70:69:15:f2:18:76:ec:c7:e9:
36:c5:bf:0f:87:9b:57:f9:a9:c4:6f:4c:88:8d:99:
c5:f7:03:51:55:30:9a:d6:b5:a7:a5:5b:9f:19:5b:
0c:74:57:e1:98:9a:3a:77:4d:c4:dc:a7:a0:4e:e6:
a0:e0:4c:59:76:26:1b:0d:29:82:97:9b:ac:c8:70:
00:51:f5:43:c3:44:c7:3b:64:9a:b1:05:29:e7:37:
1d:1b:95:8a:f7:81:df:64:84:b3:28:61:e4:31:2e:
ef:06:59:cd:4f:f6:62:de:5c:97:9d:68:aa:10:bf:
55:33:76:7e:d1:6f:b2:59:bd:b1:88:7d:1b:06:d2:
84:a5:d0:29:0a:e2:ac:63:92:98:d1:42:7f:f5:7c:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F5:94:32:4D:68:92:C7:46:F2:96:6E:A3:5F:FB:3B:B1:E0:78:75
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-PWUMk1oksdG8pZuo1_7O7HgeHU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.180.0/24
Signature Algorithm: sha256WithRSAEncryption
83:0f:4c:8c:e4:3d:a0:22:43:db:a8:67:6d:a4:b9:fa:57:52:
69:c8:ce:24:f0:3b:e4:78:9c:40:17:7b:6a:dd:76:6d:9c:31:
4a:1b:d4:ff:1c:cf:6a:5e:c7:27:e7:26:24:3d:cd:5c:55:f7:
24:66:8f:fd:f6:af:f8:07:37:a0:ea:51:ce:7e:00:5d:3e:7b:
9d:12:ed:8b:e8:f0:ef:b6:5f:02:4b:ad:9f:cc:0a:61:bb:18:
41:4b:44:e9:ee:4f:bc:7c:91:7d:44:91:49:75:ef:d2:b9:e0:
ce:f1:b8:1b:26:e5:2a:b2:4f:aa:19:f9:4c:a7:88:18:fd:82:
3a:a8:1b:58:1b:c0:2a:38:c8:9d:2b:f7:4c:e1:59:1c:fa:42:
e0:aa:41:5a:f9:cb:88:61:a9:69:b4:c1:9b:77:a5:a9:71:f7:
72:81:c5:98:40:01:45:cc:e0:83:05:fe:01:06:19:1f:ed:9c:
62:6e:9b:b8:9e:cf:05:85:1b:cf:60:7a:f9:40:47:85:58:52:
5e:57:6d:16:0d:c5:4b:11:bc:0f:09:74:a7:fe:b2:8e:51:d7:
11:d5:57:76:8d:b1:ab:35:f5:9f:71:ce:ce:b9:e6:0b:d7:9b:
e9:d9:35:a1:72:03:3a:1e:f2:36:36:57:d3:d9:f1:71:38:64:
89:49:64:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:32:15 2025 by rpki-client