Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/74Cz8nCi0Mf0KcUj6BetGIkMVzU.roa
File: 74Cz8nCi0Mf0KcUj6BetGIkMVzU.roa (raw, json)
Hash identifier: djrITExzq3bnQlIEu5pZQvWZyIwqUySEPXWAqgib0wc=
Subject key identifier: EF:80:B3:F2:70:A2:D0:C7:F4:29:C5:23:E8:17:AD:18:89:0C:57:35
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0A0E
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/74Cz8nCi0Mf0KcUj6BetGIkMVzU.roa
Signing time: Sun 07 Feb 2021 06:38:03 +0000
ROA not before: Sun 07 Feb 2021 06:38:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 192.72.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2574 (0xa0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Feb 7 06:38:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EF80B3F270A2D0C7F429C523E817AD18890C5735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:1c:db:d1:44:bb:52:63:b6:9e:dd:32:1c:
2a:b6:8a:03:8a:76:53:84:d4:bf:69:61:4a:9d:15:
c3:8a:b7:cf:5f:4c:88:88:e1:35:4e:67:d8:12:b0:
65:f6:f1:29:72:ce:11:41:18:54:49:55:00:cf:64:
f2:03:22:e3:57:3d:60:bd:e7:65:4f:6c:bc:da:b3:
bf:dd:7a:b9:f6:b2:00:99:3f:52:05:f3:42:ff:0b:
c5:87:94:45:86:0b:f5:54:a8:c8:21:94:09:80:22:
1a:0c:6e:b1:e8:c2:91:fe:58:17:26:d9:f5:98:c5:
f8:51:1b:55:8f:9d:bb:c9:5d:d2:85:bf:6d:24:a7:
44:43:57:22:8e:e9:88:f1:52:cf:e3:db:f4:45:4a:
c9:bd:e0:8e:0f:bb:59:6a:1e:8c:c5:ee:ac:52:e2:
01:26:8d:28:e8:60:7b:cf:a9:d9:26:8c:58:41:e4:
8f:50:7e:75:d1:b2:63:22:a1:93:e9:5e:89:85:18:
cc:23:77:53:04:f8:0d:97:ae:fa:d3:b2:4f:69:ba:
b7:8a:a3:a8:fc:c7:3d:25:b8:02:1c:8b:05:bc:f6:
af:de:07:66:af:c3:7e:a1:98:97:b4:5b:99:1b:56:
60:87:e7:8f:e8:f6:bc:c7:f7:76:b7:16:3f:6c:6c:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:80:B3:F2:70:A2:D0:C7:F4:29:C5:23:E8:17:AD:18:89:0C:57:35
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/74Cz8nCi0Mf0KcUj6BetGIkMVzU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f1:6b:f4:1b:aa:fa:ae:57:46:af:57:86:df:6e:d6:07:d1:
b9:f7:f2:35:c3:ef:7a:9a:91:da:68:da:5a:6e:f2:64:a4:b6:
3e:28:b7:6e:bf:f5:1e:4b:83:a5:f6:b0:95:bc:33:e6:94:7d:
88:d8:e7:22:32:34:40:13:65:65:8b:a0:be:9b:ac:bf:d8:c8:
fd:64:aa:a9:0c:21:45:d9:30:77:5a:81:ad:48:1d:e3:be:39:
08:3d:8b:91:1d:b4:6a:f1:10:7d:de:fa:ab:57:aa:59:30:64:
a6:40:1b:de:2d:a2:1d:81:0c:62:f9:a2:b4:08:4f:46:35:91:
a3:08:5d:73:67:0a:6e:b5:f9:25:4a:78:3c:e4:36:8d:fb:94:
5b:fd:99:cf:a6:76:0f:b1:c6:9e:eb:58:9a:05:e2:3f:a4:99:
a7:2d:1a:c2:eb:ef:6b:1a:d2:67:f7:36:3a:df:d2:2f:d1:53:
f1:e6:88:b3:7d:25:40:d8:5f:af:09:23:99:a4:ff:cb:b1:6b:
c0:8c:d9:c3:92:e3:6a:d2:b1:6b:ff:1a:4c:cf:f8:76:02:91:
66:0e:6b:a0:c3:10:10:40:d1:bd:0d:bb:ef:ec:92:6e:f6:22:
97:67:3d:56:e0:e6:6a:31:93:23:08:ac:22:07:48:c8:4e:29:
2c:c8:84:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:32:15 2025 by rpki-client