Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8Iltx-NuYC7UdN7-RG5QzbVFgOk.roa
File: 8Iltx-NuYC7UdN7-RG5QzbVFgOk.roa (raw, json)
Hash identifier: sWoIC9TsfnSItpJ2lcsB0R+Nsxu/7lIsqNqqvl0Q9ao=
Subject key identifier: F0:89:6D:C7:E3:6E:60:2E:D4:74:DE:FE:44:6E:50:CD:B5:45:80:E9
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08E7
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8Iltx-NuYC7UdN7-RG5QzbVFgOk.roa
Signing time: Tue 29 Sep 2020 09:52:34 +0000
ROA not before: Tue 29 Sep 2020 09:52:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18419
IP address blocks: 210.244.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2279 (0x8e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F0896DC7E36E602ED474DEFE446E50CDB54580E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:11:2a:6d:da:41:23:6a:c2:9d:6c:57:b6:
4c:6d:44:0d:5b:25:65:a6:b2:5a:89:29:26:51:8f:
4a:ba:6a:44:09:f5:20:a7:d6:04:03:0d:13:97:ea:
8b:58:88:14:d6:9d:ac:f7:44:2d:61:d4:1e:82:97:
81:44:4b:59:be:c9:f8:75:fb:39:6b:e0:30:fe:76:
ab:3e:2b:ec:55:28:0a:12:90:4c:bc:1d:5e:d9:6b:
fb:62:46:21:1f:19:af:f8:58:7f:e7:c3:74:79:cc:
14:e7:17:b6:b5:84:74:c2:96:12:94:6b:7b:14:5b:
20:1e:37:ea:88:f4:3a:8b:65:6c:24:50:6d:86:79:
60:e2:8e:9b:f2:a1:8f:f4:b9:9f:31:c8:59:a8:00:
7b:35:73:fb:ac:5f:80:df:0e:95:34:c4:c1:6d:7a:
d8:25:70:b4:7c:77:69:c2:0e:e1:a6:66:a2:a1:16:
a6:36:cc:f0:be:47:5f:49:d3:ed:09:d4:60:39:e8:
34:6d:44:d7:0f:5f:c5:38:9a:12:c2:a0:c6:44:d2:
97:0d:40:46:56:a2:5e:de:37:8c:49:85:4e:59:97:
b9:88:9c:4a:49:7e:39:62:48:bc:64:96:60:09:2c:
86:b8:3f:e9:b0:aa:eb:a2:d6:bc:83:40:4d:82:a7:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:89:6D:C7:E3:6E:60:2E:D4:74:DE:FE:44:6E:50:CD:B5:45:80:E9
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8Iltx-NuYC7UdN7-RG5QzbVFgOk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.244.88.0/22
Signature Algorithm: sha256WithRSAEncryption
61:26:05:95:19:30:e6:7e:36:e6:7a:c8:72:a4:50:0c:05:26:
ed:8e:21:01:99:dd:6f:3a:a8:c6:8e:ba:54:9b:3e:10:7d:3e:
49:f1:29:b7:d7:1f:78:8e:ca:4f:04:47:98:44:45:d1:82:94:
25:a4:31:fc:0d:3a:0b:b3:ee:48:16:e7:b8:6b:60:b8:86:00:
be:db:0f:29:87:ab:52:6c:ef:8e:9c:e8:4e:c7:e2:a9:72:aa:
d9:9f:bc:05:e2:a2:32:fb:fd:61:40:d3:42:a1:bb:6c:74:44:
70:43:83:9c:3b:aa:2c:cc:6b:c9:35:ce:ca:e4:64:c0:e9:26:
17:04:91:50:7b:24:23:ba:2a:ca:1a:81:61:f9:7f:ef:7f:73:
cb:16:ae:51:80:ec:ad:3b:76:75:ea:dc:4e:15:19:92:63:58:
56:20:bc:d8:7c:4e:05:ef:07:89:f4:ea:a6:be:43:cb:20:c8:
eb:fb:97:01:f3:e9:fc:55:45:e2:f4:56:e3:6c:a3:33:52:7e:
65:34:f0:c4:ec:d7:bd:8a:2a:98:16:12:44:64:13:0b:92:83:
6d:3d:ff:f5:04:b4:9e:1d:98:26:cf:54:3b:1b:03:ca:e1:a0:
a5:48:e3:39:e6:b0:3a:f8:90:de:dc:e1:90:58:be:49:80:a4:
28:13:d0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:35:33 2025 by rpki-client