Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5cxm0qqfMiwa6iOnuuDHuSDLBGk.roa
File: 5cxm0qqfMiwa6iOnuuDHuSDLBGk.roa (raw, json)
Hash identifier: TLPbgBRbOHFqVwhrThTktRufB9IKFFTwyr0rk6+ozEg=
Subject key identifier: E5:CC:66:D2:AA:9F:32:2C:1A:EA:23:A7:BA:E0:C7:B9:20:CB:04:69
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E6D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5cxm0qqfMiwa6iOnuuDHuSDLBGk.roa
Signing time: Wed 29 Sep 2021 02:43:35 +0000
ROA not before: Wed 29 Sep 2021 02:43:35 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131584
IP address blocks: 106.105.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3693 (0xe6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:35 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E5CC66D2AA9F322C1AEA23A7BAE0C7B920CB0469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:21:38:b4:0d:33:67:41:a8:e2:e9:e3:65:
3a:5c:58:29:6d:cc:d3:e2:df:2c:6d:c1:3b:3f:5e:
d2:8a:7f:16:db:03:a1:3d:07:43:8c:3a:2c:7f:8a:
b2:6b:bf:91:bb:9f:fa:45:97:6a:a6:88:1a:73:00:
a8:e2:ac:cb:4a:2d:e1:d5:8d:2e:d4:12:a2:1b:28:
5b:b3:97:f6:f9:76:9c:69:6e:8c:d6:a6:02:be:a9:
25:d4:8f:51:e9:5a:2e:8d:db:21:5c:a9:20:00:b0:
68:0d:63:e8:0b:de:1e:da:80:c6:2e:02:ab:51:c5:
4a:8d:d3:39:9a:e9:b2:3c:42:9d:77:c0:b9:f7:30:
04:32:2f:27:cd:95:27:89:84:2f:0c:9f:5e:3b:3a:
6a:ba:c8:80:d4:f9:18:62:36:e8:6a:51:2b:92:fd:
92:3f:9d:59:7b:41:bf:44:e2:86:7c:e8:6d:fd:bc:
f9:38:a6:1e:02:cc:d1:f8:1c:cf:11:55:17:c6:63:
7f:0b:d8:88:02:31:0a:81:ec:83:e3:0f:11:03:16:
ad:f0:ec:d3:0d:9e:12:1e:13:11:7f:3a:06:44:99:
f8:02:82:87:82:5b:52:6a:e0:b4:7e:53:ce:89:6a:
64:50:e8:6b:bd:a1:58:d6:dd:47:5f:ce:16:4e:23:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CC:66:D2:AA:9F:32:2C:1A:EA:23:A7:BA:E0:C7:B9:20:CB:04:69
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5cxm0qqfMiwa6iOnuuDHuSDLBGk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.181.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:73:a0:b6:d1:98:79:e4:c4:66:c0:8b:84:e6:62:73:7b:8d:
74:9c:1c:86:bf:0f:0f:f9:3d:0f:67:31:64:7e:c3:f8:e9:7f:
08:bf:6b:b3:c3:d7:1d:0e:c2:3f:d0:b8:a8:3d:39:f1:94:66:
dd:ef:5e:7f:40:d1:43:db:7f:86:53:af:44:2f:d0:79:60:78:
e1:1b:81:98:9f:9e:19:90:2d:1a:0e:3b:e2:e1:b1:44:ff:22:
86:27:f1:c3:25:cc:b4:ec:b2:38:b7:69:7c:7b:32:31:8b:63:
78:58:ed:d2:25:a0:e7:15:a5:57:ca:3f:cc:cf:07:3c:0e:f9:
3e:9e:8d:d8:cd:6f:b8:bf:25:87:d2:ab:87:81:88:51:51:d7:
28:9a:e0:bb:26:62:7f:9e:b3:b0:39:e3:c0:ef:ff:6f:70:02:
40:73:1d:08:be:3c:b1:9c:65:61:36:1d:e1:ca:ca:fe:e7:8e:
ed:da:5e:d3:03:9d:2a:a1:6e:d5:e1:1f:05:00:d3:5d:6a:fb:
71:54:76:f6:88:92:94:79:73:c3:94:4a:ba:17:1f:86:9b:c9:
0d:97:7f:d0:23:ba:c1:9d:44:f9:65:18:67:8d:16:29:88:57:
ee:96:6f:75:e5:0b:3c:97:5b:97:6d:71:fc:44:b9:54:3c:7e:
fe:29:85:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:25:28 2025 by rpki-client