Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1vuzg6bO0UGwzNBvFz99OvKutQI.roa
File: 1vuzg6bO0UGwzNBvFz99OvKutQI.roa (raw, json)
Hash identifier: havx3X0NlD6f9a2qbxa3dRrSUrRL5iwm0FfZvXZG8is=
Subject key identifier: D6:FB:B3:83:A6:CE:D1:41:B0:CC:D0:6F:17:3F:7D:3A:F2:AE:B5:02
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1309
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1vuzg6bO0UGwzNBvFz99OvKutQI.roa
Signing time: Fri 01 Sep 2023 09:24:24 +0000
ROA not before: Fri 01 Sep 2023 09:24:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 115.30.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4873 (0x1309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D6FBB383A6CED141B0CCD06F173F7D3AF2AEB502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:ed:97:6b:d6:2c:60:5d:7b:e5:62:2f:30:
e0:5c:7d:87:20:26:2e:46:86:b4:46:f2:4f:22:14:
0d:ef:12:b6:22:91:e2:ad:52:4b:6f:62:24:96:66:
4a:4a:7e:c1:b5:30:9d:90:fa:be:3b:c3:2d:1a:87:
8f:c2:68:95:dd:4d:ea:fd:83:ea:d9:2d:21:d2:1d:
4a:4f:0e:b9:8f:8a:13:2d:3a:b8:53:9b:65:70:a3:
b9:e4:13:82:0e:54:80:8e:5f:12:31:28:89:f9:91:
cb:46:84:d9:da:63:bc:aa:cf:d3:ec:3c:89:1b:3c:
dc:d6:83:ab:a5:11:2f:bb:9c:aa:ec:92:b7:56:72:
60:aa:a3:5e:0a:90:a3:a4:3e:da:e4:cc:96:5f:22:
e5:51:b0:37:27:5f:7e:4b:f2:5b:5c:75:4d:2c:37:
31:33:c1:8c:52:77:0f:81:d5:0c:13:f1:7d:9f:47:
7c:0f:3e:ca:c8:dc:c5:9e:18:80:40:78:b5:62:86:
81:79:37:9c:d8:55:a8:97:00:9c:39:80:59:b5:3c:
76:6f:d1:36:0f:c6:2b:cd:a6:f1:95:db:5d:b5:da:
b8:0f:bc:6c:52:07:d3:02:31:7b:3c:6b:06:ee:77:
8b:60:4e:91:2b:ae:f8:e5:7c:90:6c:84:8e:3d:a2:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FB:B3:83:A6:CE:D1:41:B0:CC:D0:6F:17:3F:7D:3A:F2:AE:B5:02
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1vuzg6bO0UGwzNBvFz99OvKutQI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ac:53:ea:43:41:7f:85:8b:96:bd:3b:d6:27:02:38:91:73:5a:
3f:c9:c9:5b:f3:61:0d:48:26:c7:be:46:fc:77:bb:f9:c3:fe:
7e:c5:67:c1:fb:02:4e:61:5a:49:ea:16:b7:8b:56:50:06:f5:
c6:c8:82:b5:25:09:eb:45:c3:d5:04:9e:31:8f:60:df:7f:79:
d9:d1:62:58:5d:b3:ae:b9:04:cb:4d:32:f3:59:14:6b:39:0b:
e6:33:97:88:ba:1c:65:b4:a4:f7:6e:ec:9d:0b:84:ba:11:af:
8f:f5:ac:5d:a3:66:c5:7a:9d:ea:6b:96:3b:75:4b:81:9c:ab:
37:7e:12:70:8d:af:0e:2a:ca:12:80:35:c1:7b:78:47:a5:5c:
58:73:e1:1d:fd:de:cc:94:38:f4:d9:1f:6e:25:5f:c9:37:14:
bf:b5:69:db:f1:a8:3e:db:50:96:27:58:3f:f9:56:99:87:9a:
9e:b9:c8:01:64:91:57:2a:c5:af:e8:f6:ad:da:7b:53:50:09:
70:bf:75:6e:9f:38:be:1d:46:2c:ae:4f:54:5d:df:f8:c6:75:
71:1c:2e:66:7c:5f:b0:c9:62:21:05:ab:8e:26:a0:1b:23:dd:
18:dd:67:22:67:20:59:06:78:41:5c:a5:ec:a2:47:ae:cc:50:
8f:df:da:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:35 2025 by rpki-client