Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/0xI_io0ZURWI6NBCojcYgPzo4Bg.roa
File: 0xI_io0ZURWI6NBCojcYgPzo4Bg.roa (raw, json)
Hash identifier: F9rmlWTZyTGiyIjHZBTsyyPBK5gkm5y/39FR0vTUctU=
Subject key identifier: D3:12:3F:8A:8D:19:51:15:88:E8:D0:42:A2:37:18:80:FC:E8:E0:18
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 09FA
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0xI_io0ZURWI6NBCojcYgPzo4Bg.roa
Signing time: Sun 07 Feb 2021 06:35:46 +0000
ROA not before: Sun 07 Feb 2021 06:35:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 192.72.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2554 (0x9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Feb 7 06:35:46 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D3123F8A8D19511588E8D042A2371880FCE8E018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:3f:bf:94:7b:8a:d6:39:49:af:8e:83:61:
bd:8f:25:9c:dc:0e:0d:f5:45:a3:c8:ef:47:9e:96:
f9:5a:f5:fe:cf:25:b6:59:a0:ba:b1:c1:f8:27:48:
7e:d9:3e:4a:25:a6:d6:06:0c:71:8b:82:8d:ae:e4:
4b:57:43:5e:34:7f:74:1f:40:25:66:15:a5:03:db:
55:f3:12:22:90:e0:66:f2:cb:e3:2f:ed:92:c8:31:
74:98:00:0b:c7:f2:e9:78:a9:03:7a:bf:f8:d1:a0:
ac:34:44:a0:bf:1a:3c:4c:90:f1:f6:fb:da:f5:c4:
fd:b4:45:61:0a:3e:8b:fd:16:8d:f9:3c:b5:64:0c:
c9:b1:c4:87:a4:15:f6:48:fd:9b:d3:4f:27:61:bb:
5e:3b:1b:6c:fc:f2:73:0b:5e:99:9b:17:3e:6c:fd:
9e:f7:cc:7c:63:89:99:df:90:29:e2:e7:71:41:bf:
85:81:6a:5c:6e:3f:4e:94:a3:d2:b9:5e:22:42:b1:
c2:b7:ed:9f:7b:6d:37:fd:79:44:a2:16:cf:c3:1c:
88:1c:47:fc:aa:92:54:9f:20:5b:02:ae:13:61:dd:
28:fd:9e:dc:41:51:fd:dd:13:07:af:15:90:a4:cc:
3e:cc:7e:d6:fc:5f:a4:bb:1d:60:15:85:fc:0a:c7:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:12:3F:8A:8D:19:51:15:88:E8:D0:42:A2:37:18:80:FC:E8:E0:18
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0xI_io0ZURWI6NBCojcYgPzo4Bg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:ac:42:27:e9:fa:58:65:bc:a5:8f:2d:68:ca:80:44:f3:79:
da:8d:cd:ea:e5:6d:48:ae:a1:de:03:c5:07:2c:d2:6f:c1:a1:
2e:f3:54:6d:d6:1c:d4:8e:a3:59:77:fa:33:c4:93:c5:e5:26:
84:e6:e3:78:54:8f:40:ee:6d:91:f1:6e:7e:34:f3:0f:c4:d3:
cc:b5:74:4f:41:81:dc:a1:e8:96:af:ec:86:61:11:24:e6:4f:
c1:8a:1d:3e:6a:71:9d:eb:76:ab:e5:c4:d9:f8:2e:79:91:63:
64:03:d3:a1:89:ba:a1:34:a8:d6:e8:4d:24:08:f5:95:0d:f3:
63:0f:6c:28:c6:ee:f1:52:d2:09:8c:60:3e:c3:74:e9:6d:8c:
fb:ba:f8:68:30:27:90:60:aa:15:c3:69:57:fa:b2:a0:cd:37:
13:8b:1f:76:70:ff:24:ea:51:85:d4:44:d5:16:6e:d5:25:0c:
a1:22:92:3c:f8:c9:b6:c4:a7:ad:e6:8f:ab:b5:7b:da:7a:4c:
66:1f:17:5c:be:02:a5:f6:cd:4f:35:13:2b:d8:cd:0b:44:ba:
f6:55:d3:d6:33:67:af:b8:ea:6b:9e:c6:ef:fe:6b:f0:3a:fe:
00:3c:9e:f6:83:ea:9e:8c:2a:55:83:be:91:0a:ed:73:6d:8d:
8c:88:6e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:17:05 2025 by rpki-client