Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1813bx9_meOz5L7OyETh35yM9_8.roa
File: 1813bx9_meOz5L7OyETh35yM9_8.roa (raw, json)
Hash identifier: l4AbTpWM8+mVipgGOtqQUlE09FfA5gBh1+abrAoRqM8=
Subject key identifier: D7:CD:77:6F:1F:7F:99:E3:B3:E4:BE:CE:C8:44:E1:DF:9C:8C:F7:FF
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0DA8
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1813bx9_meOz5L7OyETh35yM9_8.roa
Signing time: Fri 01 Sep 2023 09:24:23 +0000
ROA not before: Fri 01 Sep 2023 09:24:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 192.72.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3496 (0xda8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 1 09:24:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D7CD776F1F7F99E3B3E4BECEC844E1DF9C8CF7FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:6b:97:49:de:64:e4:bd:84:d1:8b:70:7e:
13:74:47:91:f7:36:a6:c4:79:9f:a9:e8:df:2c:85:
9f:76:84:89:ed:49:e2:cf:33:47:5a:94:96:84:b5:
87:6a:14:5e:4d:98:fe:74:c7:53:44:5c:54:d5:47:
cd:3a:c8:55:63:34:f3:45:af:22:51:5b:93:13:da:
72:8c:3b:08:b0:92:b7:58:37:58:01:26:56:83:12:
68:de:ed:b5:8f:82:fd:dd:f8:e1:74:4a:70:57:3e:
06:cb:2a:40:a4:84:ea:b2:89:02:2d:ed:ef:d2:64:
90:c6:8d:ed:0d:df:db:b3:75:55:6e:5e:66:3c:a3:
3b:48:62:cd:b4:2c:c7:38:78:94:9b:f5:de:1a:a2:
6d:60:4a:81:5b:f6:7b:f7:a6:ee:ea:ac:f1:21:81:
dd:bf:8d:0d:98:f7:d2:a5:b5:46:be:99:4f:80:ec:
90:fd:ea:c9:fd:47:6c:f9:03:e9:40:ab:4c:a3:3d:
a3:4f:d2:2e:d4:84:a4:4e:13:af:08:07:e3:57:de:
2b:f6:7c:cc:98:1a:35:93:25:45:d8:1f:6d:25:45:
0c:6c:6c:f9:83:bf:8a:dd:b9:25:fe:fa:a1:4a:64:
7b:c2:36:c9:68:26:6e:5d:4b:57:22:65:6c:8b:70:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CD:77:6F:1F:7F:99:E3:B3:E4:BE:CE:C8:44:E1:DF:9C:8C:F7:FF
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1813bx9_meOz5L7OyETh35yM9_8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.192.0/19
Signature Algorithm: sha256WithRSAEncryption
29:69:99:42:d2:a5:bf:75:f8:f9:2e:38:13:73:60:67:5f:12:
9d:be:db:a7:d1:ab:9f:ac:e3:4c:30:36:ed:a2:55:70:1c:75:
f0:16:6c:63:55:df:b0:d2:62:1e:35:4f:da:77:11:ff:23:49:
d2:30:17:73:04:a0:86:e3:a1:34:72:51:b5:44:aa:92:e1:72:
51:2c:d3:b2:a5:77:92:4e:77:fe:60:35:e6:75:65:68:86:da:
3f:7e:3d:3e:db:6e:0d:9e:ed:48:41:5e:e9:f0:97:fc:61:c0:
71:1f:ec:c7:21:e7:a3:17:f3:9c:41:d2:e0:3c:ea:05:75:f9:
97:78:41:f0:f7:16:cd:65:d3:c6:9b:83:a4:53:00:0b:8b:9c:
9c:ad:39:84:9a:b8:45:ab:37:33:ab:bf:8f:c3:47:72:c0:73:
52:74:67:32:49:c6:d1:d5:35:2e:38:0b:a6:c3:f1:c0:75:db:
ca:e1:8c:9f:ff:73:f6:ee:f8:6d:b7:6a:88:d7:80:51:b3:42:
c2:0b:c1:2e:42:75:37:7a:08:e5:a6:ed:bf:c6:c4:ab:05:30:
e1:ab:b8:5a:e1:05:fb:22:15:41:2f:90:83:6a:7c:b9:3e:b6:
0b:83:b7:a1:62:5f:07:b3:ca:37:f5:d8:fa:75:eb:a5:a9:cb:
15:ae:c7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:34 2025 by rpki-client