Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8ZpVx_C2xaH1rRbLTXOOabu_O_s.roa
File: 8ZpVx_C2xaH1rRbLTXOOabu_O_s.roa (raw, json)
Hash identifier: H5H/a4YRjFk+8qbs/ft/NYY0kj5QXf8qT4RVH1H0et4=
Subject key identifier: F1:9A:55:C7:F0:B6:C5:A1:F5:AD:16:CB:4D:73:8E:69:BB:BF:3B:FB
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0CD4
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8ZpVx_C2xaH1rRbLTXOOabu_O_s.roa
Signing time: Wed 01 Feb 2023 10:28:28 +0000
ROA not before: Wed 01 Feb 2023 10:28:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 192.72.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3284 (0xcd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Feb 1 10:28:28 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F19A55C7F0B6C5A1F5AD16CB4D738E69BBBF3BFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:d2:0a:51:49:35:ef:c8:19:73:8a:3c:d1:
c0:e2:73:22:84:d7:15:5a:fb:5c:b2:d6:31:08:78:
92:77:0d:8e:1a:c7:e9:2f:3f:d9:e6:c8:84:0c:87:
7b:54:6e:4e:7e:fa:4b:20:c2:e1:b7:2f:fe:76:af:
5e:00:36:05:ec:47:28:e4:31:f1:f4:49:35:03:ae:
3f:a0:94:53:b2:c8:5e:76:19:bd:b7:43:27:ab:5e:
05:5e:d0:86:31:bd:40:11:2f:6d:a8:45:5e:69:ca:
ef:7c:a6:08:04:d7:6c:5f:1d:bb:7d:4f:8c:89:48:
da:9f:07:8d:86:37:84:8e:3a:4d:14:a4:70:fa:8e:
fa:9e:76:ab:62:93:49:89:db:97:a5:35:3c:80:3b:
c9:13:84:75:f4:e9:78:a2:6f:79:ee:f5:8d:86:ae:
c8:a2:53:c7:7e:bd:1f:28:23:99:ab:d7:e3:63:77:
f2:fd:22:ff:2d:b2:f2:c5:73:ab:88:04:11:25:1d:
74:c6:ba:be:d4:45:8f:b4:12:33:e2:33:39:4d:b9:
8f:0c:fe:d6:9b:bd:91:1c:0c:09:9a:0b:f5:82:c8:
88:7b:84:d5:d3:a0:47:13:3f:c7:4f:6e:fe:ea:62:
2f:c3:0b:b6:e5:be:8c:ab:40:35:45:2d:db:fb:b7:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9A:55:C7:F0:B6:C5:A1:F5:AD:16:CB:4D:73:8E:69:BB:BF:3B:FB
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8ZpVx_C2xaH1rRbLTXOOabu_O_s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.64.0/18
Signature Algorithm: sha256WithRSAEncryption
10:fd:0b:c0:98:df:79:a1:80:a0:5e:f8:3b:e2:24:32:2a:22:
f7:08:ae:d1:8c:a5:74:1c:da:0f:81:aa:ed:01:bc:19:a3:4e:
9a:20:be:a6:08:c9:8c:e0:0b:25:43:55:61:7f:a8:ba:97:68:
bb:2e:31:2c:92:4b:5b:30:86:e7:62:56:8f:87:25:ca:1b:2d:
fa:da:62:aa:9a:6d:73:93:b4:9e:c4:cb:fd:ea:ef:0d:ac:15:
b4:dc:cb:e5:36:87:e2:d6:7f:cf:fe:db:e8:1f:27:79:ff:ab:
b2:ed:53:42:ae:70:5d:ac:64:b0:d5:13:51:40:9b:fe:cd:fc:
cc:6b:e7:25:39:e1:10:0c:ed:f4:8c:d5:4d:ba:1e:5b:b3:d0:
9c:00:b5:c9:b6:cf:09:d6:d6:3b:07:30:5c:8a:de:ff:12:d2:
30:72:bf:b8:f4:55:eb:7a:7c:c0:e1:43:2b:8a:c0:e9:76:6b:
5b:6f:f7:ca:32:e2:df:d1:a2:ae:5b:2b:3d:60:62:d2:37:66:
36:e3:c4:04:d7:20:ef:e4:59:5f:ee:c2:ff:dc:c9:c6:f5:a9:
45:1f:30:a3:db:b1:af:09:05:cc:13:72:13:c6:5e:b8:36:33:
0b:e9:92:e2:fb:a2:25:2c:4b:fd:77:2b:53:97:d6:26:0a:17:
9b:84:59:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:33:33 2025 by rpki-client