Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5daGkop4lv8hTenkHCUr-gGnBdU.roa
File: 5daGkop4lv8hTenkHCUr-gGnBdU.roa (raw, json)
Hash identifier: MCin8mDWiwm8YReeKKRV0jvJAx1LHfif4h/oca6JJDk=
Subject key identifier: E5:D6:86:92:8A:78:96:FF:21:4D:E9:E4:1C:25:2B:FA:01:A7:05:D5
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1146
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5daGkop4lv8hTenkHCUr-gGnBdU.roa
Signing time: Fri 31 Mar 2023 03:04:38 +0000
ROA not before: Fri 31 Mar 2023 03:04:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131602
IP address blocks: 115.30.72.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4422 (0x1146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Mar 31 03:04:38 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E5D686928A7896FF214DE9E41C252BFA01A705D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:cd:e3:04:76:fb:69:0a:9d:7f:df:36:97:
1e:78:42:31:63:f2:1b:5b:93:2e:2f:28:11:66:94:
dc:f4:0c:34:cb:19:93:f4:fd:07:3d:c8:43:9d:e3:
d7:7c:31:f0:88:aa:ce:4c:5b:68:3f:c6:f7:69:27:
94:88:1c:87:2f:a3:81:45:c5:bb:da:ee:f1:b6:65:
a9:b7:94:5f:86:12:5d:0c:58:69:ad:c4:92:89:57:
bf:f7:03:7b:95:2f:a8:92:37:c2:f1:14:b6:43:f9:
6e:10:91:9f:d6:97:86:0d:3b:c3:c0:e8:d2:54:41:
5c:86:e2:6b:40:7e:e1:fb:2e:b3:ed:6f:ec:a4:1a:
5b:19:2e:65:42:bb:c5:8a:2f:02:8a:6c:02:f1:cb:
f1:00:90:cd:19:74:13:6f:2a:39:58:67:47:c0:49:
cb:1b:4c:7b:59:ba:ca:4e:23:c8:48:9a:28:a8:81:
54:ee:0a:59:ed:6c:93:62:32:00:2a:71:91:b7:b2:
f0:1f:ee:d0:ca:70:f1:5a:34:0b:10:bb:00:77:70:
aa:20:b0:d7:df:c8:02:0f:fa:59:95:3c:7a:9c:87:
83:63:e0:ac:7f:24:15:2b:b1:94:bc:ad:c1:34:64:
4e:ee:41:38:d2:bf:b7:1e:1d:4f:8c:51:13:c5:cd:
58:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D6:86:92:8A:78:96:FF:21:4D:E9:E4:1C:25:2B:FA:01:A7:05:D5
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5daGkop4lv8hTenkHCUr-gGnBdU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.72.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:cd:ee:ad:c6:b0:b7:41:be:bb:5b:74:c2:a3:16:81:89:78:
fa:b3:10:fe:95:d9:7d:99:3c:c3:7d:0c:ad:74:de:17:4b:17:
32:0b:d7:20:8c:1f:3d:88:40:c1:0e:45:8a:f1:09:8f:94:f7:
c1:70:eb:92:c2:c9:5f:13:be:a9:b1:f6:18:c8:4d:c9:ba:65:
25:7b:ad:63:ec:75:90:5d:86:10:53:5b:b4:ad:20:c8:d2:b7:
a8:e1:1c:94:72:c8:b6:f5:ae:dd:2a:f5:31:6d:b8:d6:47:e4:
69:4f:70:60:30:b4:d0:fd:4d:a2:13:34:ea:dd:2f:71:55:6c:
b9:88:f3:da:d1:8b:f8:43:27:86:e7:00:9d:90:d2:1b:df:8e:
ae:7b:b6:69:c3:ee:f4:e6:c9:8c:12:88:b8:7f:62:97:7a:24:
99:ee:82:b8:3d:bc:9e:38:07:bd:a7:bf:5b:00:57:11:d6:7f:
12:11:3f:20:9c:de:68:6c:b3:0c:c4:86:17:35:ce:3e:d5:38:
55:ee:9d:03:8d:9f:57:d2:99:0a:34:14:c0:26:02:2f:6d:da:
3c:82:67:ec:c5:2b:ca:3a:80:93:b3:86:db:64:51:9d:85:48:
f5:d5:dc:dd:c6:bf:f7:26:db:5d:24:17:94:a5:29:d2:bb:0b:
52:a5:5f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:13:47 2025 by rpki-client