Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5c9n0KAkWjNti_ltEC9rE835nuc.roa
File: 5c9n0KAkWjNti_ltEC9rE835nuc.roa (raw, json)
Hash identifier: kyuCB3TMN/xhAV8K83B/N/m5bIS941XYMD7aOGb5uzo=
Subject key identifier: E5:CF:67:D0:A0:24:5A:33:6D:8B:F9:6D:10:2F:6B:13:CD:F9:9E:E7
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E7F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5c9n0KAkWjNti_ltEC9rE835nuc.roa
Signing time: Wed 29 Sep 2021 02:43:40 +0000
ROA not before: Wed 29 Sep 2021 02:43:40 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18049
IP address blocks: 106.107.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3711 (0xe7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:40 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E5CF67D0A0245A336D8BF96D102F6B13CDF99EE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:27:99:45:2a:cd:84:81:91:a3:dd:8c:b1:
6d:59:5a:02:01:fd:08:27:4f:6c:06:4b:16:4d:aa:
e5:93:3f:7b:ff:e4:8b:73:e8:1d:93:1f:8f:59:e8:
9f:63:e2:9e:7d:bb:ca:1a:11:87:43:93:67:f0:d3:
b6:70:c1:b6:5c:e1:f2:38:6c:1b:57:a2:c9:3c:5a:
ad:ce:b1:8a:ba:16:15:55:af:f6:79:43:09:ad:01:
17:c8:52:f7:d8:a4:49:be:39:6c:51:17:48:aa:e9:
cb:73:46:63:84:8d:ba:b9:48:1c:8f:d2:3a:9e:e8:
f0:d1:61:8a:4e:38:0f:db:49:ab:a3:fe:ab:3f:f6:
ac:55:99:5b:db:6c:40:c9:82:30:c9:45:97:54:73:
22:cb:b8:bb:b3:f1:89:c6:23:a2:90:d9:d3:12:ce:
cc:56:4a:6c:71:49:99:13:a0:5f:ce:de:bb:94:b9:
8f:c7:61:94:4f:58:86:92:62:5a:68:f8:94:f5:52:
39:16:fc:91:10:e3:10:46:7d:cf:ce:8d:00:59:c0:
6a:3d:09:f1:a8:ed:d7:bb:5d:03:9b:8a:c0:85:e9:
7b:f3:30:29:0e:69:26:38:73:2b:5b:41:d2:12:00:
b0:85:22:ab:45:12:51:84:22:d0:2f:1a:d6:c1:bf:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CF:67:D0:A0:24:5A:33:6D:8B:F9:6D:10:2F:6B:13:CD:F9:9E:E7
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5c9n0KAkWjNti_ltEC9rE835nuc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.208.0/20
Signature Algorithm: sha256WithRSAEncryption
25:58:cb:6e:35:e3:46:b2:a7:e6:05:dc:b7:0f:b7:20:4f:2f:
b6:4a:23:ac:e3:8c:78:9d:6c:c8:0d:ae:ff:83:a1:74:54:49:
54:dc:5d:78:5c:69:79:7e:64:52:59:4e:a9:85:72:7b:fd:2e:
9d:de:ed:bc:83:cb:3e:50:5f:b8:41:d6:9b:7a:18:d4:ab:23:
72:b8:1d:2e:ca:25:ef:11:fd:4a:e1:d7:97:c2:a0:9f:4b:42:
27:a1:77:12:9a:bd:e7:ff:0d:63:f8:b0:d9:61:36:7c:58:7b:
26:36:df:d5:cf:d5:6f:cd:ae:27:70:92:96:67:aa:fd:32:4c:
e3:13:8c:60:f7:b8:fa:8d:21:ac:ad:60:d4:69:b4:da:b2:6b:
a2:16:f4:30:bf:7c:6d:33:ba:a4:e2:d6:fb:60:35:ac:88:d0:
58:58:7c:a2:7d:ce:38:fa:d7:2f:2f:48:ad:4b:60:61:87:97:
9a:c9:47:2c:09:70:a9:3f:2f:c1:d0:de:70:55:bc:e1:13:51:
86:60:73:f3:e9:2b:4f:9f:58:87:bc:00:6e:ab:a8:86:4c:6c:
ce:3f:c5:62:a3:5e:b9:cc:47:4f:74:2a:85:65:84:90:a4:84:
15:ea:25:11:d7:7b:1c:f1:95:91:38:d3:92:58:10:b9:a4:5d:
51:d1:87:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:35:30 2025 by rpki-client