Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/2W4r3kLOoBFmKzV6jGcxcMJyqCU.roa
File: 2W4r3kLOoBFmKzV6jGcxcMJyqCU.roa (raw, json)
Hash identifier: a3N8VeHV42WHjtyGJ6jcEndJ4CFnp2K3t2e9OpihHjQ=
Subject key identifier: D9:6E:2B:DE:42:CE:A0:11:66:2B:35:7A:8C:67:31:70:C2:72:A8:25
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 085A
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2W4r3kLOoBFmKzV6jGcxcMJyqCU.roa
Signing time: Tue 29 Sep 2020 09:51:56 +0000
ROA not before: Tue 29 Sep 2020 09:51:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131584
IP address blocks: 106.105.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138 (0x85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:51:56 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D96E2BDE42CEA011662B357A8C673170C272A825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:23:66:bf:23:37:1a:1d:e7:76:6f:72:9e:
fa:35:30:0e:9c:35:bf:5c:19:8d:29:f6:56:8e:82:
d7:38:2c:ed:45:a9:10:0c:fb:aa:ad:27:c3:3c:60:
1b:b9:90:45:b5:10:5c:5b:bc:ec:63:03:aa:86:a9:
45:12:60:11:1b:6c:ec:aa:0b:5a:d4:f8:27:ac:81:
5b:f0:1d:09:d4:ab:88:dc:a9:a7:a0:1e:31:39:44:
e7:1b:bb:a1:f7:0c:d7:90:0b:1d:af:a3:9a:4e:c5:
cb:02:d5:f9:86:4f:f0:bf:47:03:b4:6d:48:35:01:
cf:07:2b:a6:ce:57:c6:34:b4:06:c0:28:ba:4b:21:
a9:df:6c:29:25:b3:e1:53:36:fa:5e:91:53:d6:6f:
5e:9f:19:11:c4:b8:78:34:fb:52:cd:3c:e2:29:5d:
bd:1b:dc:4f:10:85:d0:15:51:f2:88:58:4d:3e:39:
55:9c:dc:8b:7f:b6:99:94:af:9d:77:32:69:9e:5b:
94:d2:3e:4a:86:cd:ff:03:17:a9:c2:c6:72:ff:bd:
61:26:c1:ad:e7:d0:4c:e3:66:44:d4:be:14:a7:1e:
68:eb:d6:a3:31:1e:b5:7c:61:ab:7e:93:75:b5:f2:
fd:19:91:c2:36:a7:b6:14:25:0a:de:7f:0a:a5:12:
da:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6E:2B:DE:42:CE:A0:11:66:2B:35:7A:8C:67:31:70:C2:72:A8:25
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2W4r3kLOoBFmKzV6jGcxcMJyqCU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.179.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:58:61:8f:52:ef:d0:44:c1:07:fc:0f:3a:1e:a6:0d:69:d8:
e5:53:ac:4f:01:de:24:90:95:a2:15:4b:27:78:90:56:bc:61:
69:37:a1:99:e1:ca:09:08:a8:8f:45:9b:32:3c:a0:20:ce:0a:
f6:33:77:d2:ec:b0:01:0f:a8:e9:0f:04:79:c5:ea:ce:fe:2b:
8a:b6:b9:65:88:64:9c:8b:7c:7e:1d:81:5a:8e:d0:e7:59:89:
d9:b8:a3:1c:45:24:54:c5:77:1d:72:52:5e:a5:a5:79:c2:6e:
4c:6e:e0:25:a7:7d:4f:b5:b9:fe:5b:24:04:88:b7:d5:9f:a2:
d5:9f:d8:a3:87:8c:e9:bb:51:f9:49:58:6b:6c:83:75:79:c0:
e8:7f:26:71:da:08:b9:1e:44:fc:d1:d3:aa:7a:32:db:89:14:
9d:cc:f3:3e:dc:3f:1f:ec:f2:db:ab:0d:de:46:20:c0:3d:72:
01:48:29:11:dd:bc:dc:a1:19:69:ee:74:8d:ab:96:f8:cb:2d:
54:87:0d:b0:ac:39:0b:98:e9:ce:05:9f:d4:a8:ad:4b:62:0a:
3b:30:c1:99:df:53:f2:62:ea:03:da:06:f8:a6:f9:27:60:91:
5e:c6:70:be:6a:e0:b5:3f:86:8b:2f:14:8a:5a:2f:ae:93:59:
97:ef:51:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:06 2025 by rpki-client