Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/84ZL7Jz-T9yx5aIDtWjrVBQZqTg.roa
File: 84ZL7Jz-T9yx5aIDtWjrVBQZqTg.roa (raw, json)
Hash identifier: RaQ5+X1dXfqWkUubyZ8c5yfixwKy1RW9LDnnljKj6ak=
Subject key identifier: F3:86:4B:EC:9C:FE:4F:DC:B1:E5:A2:03:B5:68:EB:54:14:19:A9:38
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/84ZL7Jz-T9yx5aIDtWjrVBQZqTg.roa
Signing time: Thu 15 Sep 2022 02:43:05 +0000
ROA not before: Thu 15 Sep 2022 02:43:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 175.183.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F3864BEC9CFE4FDCB1E5A203B568EB541419A938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:d2:49:b8:f0:6b:a7:79:e4:0c:74:8a:4c:
25:19:03:45:84:1d:a4:54:e7:12:27:e2:e2:82:f4:
c4:52:3e:c8:44:27:f7:da:14:eb:73:46:0a:f4:e0:
44:5e:b9:e2:01:91:60:8f:9e:1e:cf:81:34:01:b8:
a0:73:b8:ae:43:a7:77:a0:ae:d6:38:ed:b7:58:d0:
33:88:7f:88:b4:83:1a:8b:15:70:d8:6e:80:c3:b8:
27:dc:d4:aa:8e:69:4e:67:b0:d3:66:9d:ce:d6:a0:
13:ed:92:4d:66:75:29:04:5f:1c:c2:23:20:69:8f:
83:e0:51:22:6f:35:c0:74:12:b4:32:9c:d9:13:57:
ce:ef:c9:c9:2f:6f:00:1e:9c:92:c9:c2:c5:f6:49:
79:16:bd:f6:36:1c:47:df:08:7c:88:da:d1:d0:48:
69:be:a6:c1:1d:6e:4c:98:74:d9:05:00:6f:8c:a0:
73:94:54:67:f2:89:cd:fb:22:b7:87:df:38:9a:6a:
c4:da:a0:86:3d:37:f6:03:4e:1b:82:1d:2e:93:54:
6c:fc:23:37:be:1f:7b:11:12:6b:07:af:76:e8:8d:
d1:d8:15:93:ba:40:e3:ad:44:fa:b9:45:00:22:a7:
6a:54:5f:05:10:ea:ab:c6:d8:3d:87:ff:23:1d:11:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:86:4B:EC:9C:FE:4F:DC:B1:E5:A2:03:B5:68:EB:54:14:19:A9:38
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/84ZL7Jz-T9yx5aIDtWjrVBQZqTg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.64.0/19
Signature Algorithm: sha256WithRSAEncryption
b9:ed:8f:a3:02:0b:cc:ba:cc:a1:58:e4:bc:f9:9a:51:9c:1a:
24:73:38:f6:96:d5:37:85:4e:5e:b6:8e:03:e0:68:df:c9:94:
36:15:81:17:46:87:a7:b9:71:c4:c3:75:7a:6b:21:db:aa:7d:
e5:77:0d:55:9e:22:b7:82:e4:d8:53:0b:bb:36:d9:93:61:51:
cc:ac:3d:6e:02:4c:42:80:08:d4:1f:05:0d:51:04:61:db:4b:
be:48:45:69:7d:70:48:26:17:3b:5a:38:6c:f7:2d:d2:31:03:
1e:27:91:c4:22:8d:29:3b:15:a7:ea:b3:0c:47:22:90:f8:1c:
2d:9f:da:a1:e2:cb:04:66:a7:5c:00:dc:04:d5:bc:05:f4:eb:
3b:91:e2:bc:48:41:bf:69:cd:26:95:fa:3a:82:b5:cd:82:82:
1e:9d:57:9e:af:c6:bd:12:2c:a4:ee:3b:6d:19:08:7c:ae:00:
cd:e1:2b:7d:09:08:04:32:ae:66:47:f3:70:a7:1c:6d:b8:ee:
e1:e3:d0:bd:00:b6:19:a2:fa:d3:32:1d:05:92:f7:9c:88:58:
db:8a:69:11:50:af:7d:c5:1e:54:d8:bc:20:4e:13:f7:79:97:
dd:6d:d9:e9:e3:1c:6d:99:07:8e:67:5b:4c:24:34:ac:95:02:
46:65:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:27:52 2025 by rpki-client