Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/4WSAXU8V3hfg2x6VS5MRSRsnaMY.roa
File: 4WSAXU8V3hfg2x6VS5MRSRsnaMY.roa (raw, json)
Hash identifier: fG2PLeLD1UAUpd2vm0nP6zEMg6S1gapSCaB7eYRZl9Y=
Subject key identifier: E1:64:80:5D:4F:15:DE:17:E0:DB:1E:95:4B:93:11:49:1B:27:68:C6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08E8
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4WSAXU8V3hfg2x6VS5MRSRsnaMY.roa
Signing time: Tue 29 Sep 2020 09:52:34 +0000
ROA not before: Tue 29 Sep 2020 09:52:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 113.196.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2280 (0x8e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E164805D4F15DE17E0DB1E954B9311491B2768C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:ba:1c:29:0d:9e:00:56:0c:76:a9:86:8e:
2e:10:f7:24:fa:45:f2:ef:4d:ba:6a:ce:15:29:de:
59:b5:01:8a:4c:ef:ef:46:b3:b5:38:88:96:fd:c4:
f6:e0:05:09:8d:0b:f5:80:1e:83:69:b3:72:a6:d5:
e7:6f:19:fc:e0:c7:7f:37:c1:07:7d:30:95:2d:63:
06:59:5a:e7:a1:48:93:cb:b1:bf:7f:b5:11:f8:f7:
39:e5:2f:a0:c4:d4:50:7a:af:bb:c7:da:f8:49:3f:
2a:dc:ff:16:dc:87:36:35:a2:e7:ba:ba:03:98:81:
69:6e:5f:25:48:65:81:d4:6b:b8:4f:ab:75:42:d8:
18:90:ae:60:0e:b6:04:59:6c:e9:5f:60:26:e8:95:
56:d7:de:95:45:66:98:4e:9f:d5:1f:cf:2d:ec:86:
11:2b:ac:4f:3f:2a:e0:42:69:f8:cc:88:47:71:01:
ce:31:c7:34:37:a2:01:53:c7:3e:a3:7a:36:4e:2c:
9d:7f:65:f6:36:8e:19:4d:87:1f:c6:b5:df:bc:70:
0d:c1:9c:b2:72:d4:e1:75:e9:1f:39:7e:c6:c7:6b:
11:66:3a:0b:bc:a2:ce:cd:8e:87:83:78:25:e5:6d:
c5:18:ff:53:db:9a:f2:b3:ee:b0:f5:39:ef:ae:55:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:64:80:5D:4F:15:DE:17:E0:DB:1E:95:4B:93:11:49:1B:27:68:C6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4WSAXU8V3hfg2x6VS5MRSRsnaMY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a4:9a:40:3b:f0:85:35:57:77:21:52:b9:0a:45:32:ff:17:cf:
a6:a3:83:2b:dd:12:8c:56:10:29:11:8f:9d:6f:86:13:d4:a7:
8a:a2:dc:de:76:56:d4:52:36:22:df:48:1d:5f:16:c6:f3:30:
35:f3:a0:80:97:e5:dd:9d:b7:71:d9:2d:dd:93:b8:b3:87:a5:
1f:7e:37:d6:2e:bc:0c:3a:ce:5d:7f:80:f5:0b:44:db:6a:18:
88:06:95:0f:02:b9:2a:50:30:e2:e3:87:71:9e:e8:dd:56:17:
e5:44:cb:ee:46:bd:71:23:d7:0a:59:5f:39:cb:fa:ba:76:c8:
e0:70:9b:65:f9:a7:f5:02:73:9d:93:b6:b0:4f:25:86:34:fb:
51:6a:f9:c4:c3:9e:ec:17:a1:2d:69:25:a6:62:36:c6:38:78:
0d:f0:bc:f1:cb:7f:3c:c9:79:3e:78:a9:64:87:41:47:93:d8:
56:e0:8f:a0:25:ee:00:bb:a2:c6:60:ed:00:f0:cc:7d:1b:15:
13:48:bc:9c:54:8a:1f:05:1f:5d:e0:ef:b0:21:3a:c5:60:ff:
1f:aa:3c:ce:af:8e:4c:14:34:ce:a3:3b:1e:ff:be:23:8b:22:
d8:5f:16:81:a7:03:ac:86:ab:34:d2:e3:a3:d1:bb:15:0f:c7:
2b:d8:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:36:15 2025 by rpki-client