Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6OHGmwm95FYAt-DCCX2yL7AQ2WI.roa
File: 6OHGmwm95FYAt-DCCX2yL7AQ2WI.roa (raw, json)
Hash identifier: t9niwWGhC7Lv6xqpEs3eYbsxMBE4ChprWRnwWFhY8BA=
Subject key identifier: E8:E1:C6:9B:09:BD:E4:56:00:B7:E0:C2:09:7D:B2:2F:B0:10:D9:62
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6OHGmwm95FYAt-DCCX2yL7AQ2WI.roa
Signing time: Thu 15 Sep 2022 02:43:54 +0000
ROA not before: Thu 15 Sep 2022 02:43:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 175.180.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E8E1C69B09BDE45600B7E0C2097DB22FB010D962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:b0:6b:4f:a9:ca:73:38:26:11:9b:66:b4:
6d:6e:b9:c9:01:76:1b:45:56:24:f5:59:90:4a:b9:
fc:c0:5a:a6:5a:fd:05:77:4e:10:d8:67:79:69:1f:
5f:4f:04:83:f7:bf:04:4f:22:86:f9:8b:1b:f1:cf:
38:74:d4:54:3b:a5:4e:a7:e5:9a:66:41:72:72:b9:
cd:33:c3:5a:b3:fe:b8:75:11:14:af:79:c5:b4:b3:
fc:e6:a3:6a:b9:e6:34:e4:83:bf:4c:99:c6:f5:f3:
da:1a:cd:8c:6d:e2:d7:94:54:f8:40:e6:95:8f:0d:
ea:a8:2c:e0:07:36:6e:26:88:79:f9:9c:9a:47:92:
72:b9:84:d6:9a:8a:75:21:1f:61:a2:b1:e1:27:dc:
e9:ff:0d:a8:b6:33:00:27:2d:34:8e:3f:7b:12:3c:
19:5b:95:f1:8b:8c:ae:d3:a0:80:be:a2:5f:c7:db:
be:d4:77:6b:4b:5a:61:22:0b:58:9b:f4:21:42:c6:
f3:95:f5:ec:bc:ac:5e:b7:1e:0e:73:05:0a:35:b6:
7c:e7:e2:6f:e1:9b:ae:02:30:13:3d:b3:2e:7d:90:
f3:48:4d:9c:0b:ca:61:6c:e2:55:55:e2:df:e3:9c:
0e:4b:62:ba:26:73:71:8e:5a:09:13:35:05:31:8b:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E1:C6:9B:09:BD:E4:56:00:B7:E0:C2:09:7D:B2:2F:B0:10:D9:62
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6OHGmwm95FYAt-DCCX2yL7AQ2WI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.180.0.0/14
Signature Algorithm: sha256WithRSAEncryption
78:48:1a:6d:ef:90:41:39:aa:f7:15:f6:0e:8b:d9:4a:b8:43:
8a:91:95:be:92:ff:84:71:d6:9f:09:38:f0:0c:c9:e5:f4:ec:
52:34:c9:eb:46:1a:7a:06:4f:7a:22:06:9d:26:7d:1e:e2:b2:
41:5c:68:ce:12:d9:33:e3:07:90:08:66:8f:06:ab:c5:a1:64:
f9:42:fc:90:f2:cd:dc:c0:ba:26:06:3e:c5:16:06:f1:8d:03:
30:91:49:de:b7:a8:fb:4d:c4:bc:3a:c5:70:81:a1:c7:60:e5:
8a:98:55:82:ea:63:b0:d7:db:68:d9:5a:0a:57:e0:5d:5b:8f:
22:c5:50:49:8a:55:1f:27:be:9c:77:3f:7a:6a:56:0f:75:69:
f4:aa:4e:87:87:35:d8:b5:7f:da:32:15:1a:7a:b1:4c:15:2c:
35:bd:9c:66:f2:60:1b:71:ee:91:84:7a:4b:79:f1:e6:e8:69:
26:29:00:30:e9:fe:b1:56:f4:b3:f7:8e:92:fd:a0:76:aa:2a:
9e:d7:91:63:f2:aa:a7:ad:70:2a:fe:f2:ea:57:8b:53:4f:df:
4c:e1:78:53:ed:90:6f:d0:42:3f:c5:f2:84:64:72:da:93:62:
34:07:d8:67:41:45:be:0b:23:ea:b1:54:a7:ee:e2:99:ba:2a:
35:38:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:33:29 2025 by rpki-client