Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-qsa79jwtnngEgCLeOqPxRFt84Q.roa
File: -qsa79jwtnngEgCLeOqPxRFt84Q.roa (raw, json)
Hash identifier: J6tqJ56QF0v+dEA67Bdmd97uGnET5PDCmb6GmV17eEA=
Subject key identifier: FA:AB:1A:EF:D8:F0:B6:79:E0:12:00:8B:78:EA:8F:C5:11:6D:F3:84
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0DF6
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-qsa79jwtnngEgCLeOqPxRFt84Q.roa
Signing time: Wed 29 Sep 2021 02:43:02 +0000
ROA not before: Wed 29 Sep 2021 02:43:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 60.245.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3574 (0xdf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:02 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FAAB1AEFD8F0B679E012008B78EA8FC5116DF384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:92:48:56:29:f7:c0:8d:ce:eb:0c:4e:69:e9:
56:b7:b1:6e:2a:be:15:10:61:74:9b:8c:34:be:ff:
04:a4:db:ad:31:a2:e9:25:de:f9:b5:b3:2d:6e:02:
33:5f:2c:6f:cd:92:7a:d5:f8:5e:7e:c6:1f:46:c7:
44:2e:f4:42:50:18:a9:16:86:9c:73:fb:90:f3:a3:
ce:81:99:b1:20:3f:75:62:d4:15:bf:25:2c:0e:60:
81:ad:1e:51:65:92:ad:d8:1d:1e:07:21:33:00:e9:
3e:10:d1:82:b4:53:68:4f:f8:a2:7a:01:d5:78:70:
86:65:1a:c2:03:58:3a:aa:cd:69:bc:5f:f0:fc:0c:
d6:20:8a:9a:04:14:45:26:86:61:6e:1f:77:95:e3:
9a:17:be:a9:94:f0:04:3d:d2:1b:9f:34:09:db:61:
ad:c6:64:19:9a:57:40:0d:3a:68:fc:76:c2:84:a7:
2f:72:0b:15:b9:40:72:c1:2d:10:dc:4a:65:1c:cf:
42:5d:27:e4:23:e9:6c:69:12:50:4b:5c:fb:8a:4c:
9c:97:22:1a:0e:f6:07:86:57:df:5f:55:e4:79:dc:
f7:32:1b:58:52:ea:5f:cc:f8:d0:95:32:96:47:9d:
d3:06:07:0d:d2:05:4b:3f:bf:db:c3:ba:37:7a:1d:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AB:1A:EF:D8:F0:B6:79:E0:12:00:8B:78:EA:8F:C5:11:6D:F3:84
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-qsa79jwtnngEgCLeOqPxRFt84Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.245.96.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:51:0c:45:8d:43:98:4b:33:b1:55:43:be:ce:7e:67:21:34:
cd:ba:61:cf:e8:4d:00:32:4f:00:11:d3:27:fa:56:ba:39:44:
f0:e4:bc:67:ee:e9:32:78:bb:fb:13:f7:0e:56:32:86:e9:2e:
6a:de:19:a5:a2:d3:9e:85:65:79:a7:cf:a9:ec:25:f5:e5:ee:
8b:94:c8:5d:8f:d6:50:4e:25:65:79:7c:aa:1c:8f:35:a9:c0:
58:11:a0:3c:4e:b2:7d:dc:77:57:6a:33:bd:4c:67:98:44:9b:
ba:aa:bb:a2:d5:7c:7d:75:6b:5e:d8:2a:42:8c:43:14:e6:dd:
9e:77:8e:5e:9c:bc:e0:cf:1e:7a:81:9f:d7:91:42:84:7c:bf:
38:21:c3:5f:81:64:ad:50:55:43:3b:e0:f5:68:38:5d:19:d1:
dd:41:60:d5:32:90:06:1f:c9:19:35:aa:29:ba:34:1f:24:6e:
8e:c1:04:23:80:cf:93:78:a8:71:69:17:42:17:23:22:4d:de:
94:b7:de:c9:82:69:57:38:f6:1d:91:5f:04:72:7b:a1:9e:29:
8e:6e:74:cc:89:7c:fe:d2:16:16:6f:09:51:8b:d9:14:54:01:
2c:24:c2:c9:a3:24:21:42:8e:6c:e1:b4:e3:b4:0c:38:fe:a6:
85:30:18:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:37 2025 by rpki-client