Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ac-mAq_49JmyLEL_yfjWcxb9j2A.roa
File: Ac-mAq_49JmyLEL_yfjWcxb9j2A.roa (raw, json)
Hash identifier: +HN3kLPBqxyH+ijx5cH/2xdeTHVE5fQyztTTcKQ33Ho=
Subject key identifier: 01:CF:A6:02:AF:F8:F4:99:B2:2C:42:FF:C9:F8:D6:73:16:FD:8F:60
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08CE
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ac-mAq_49JmyLEL_yfjWcxb9j2A.roa
Signing time: Tue 29 Sep 2020 09:52:28 +0000
ROA not before: Tue 29 Sep 2020 09:52:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 220.229.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2254 (0x8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=01CFA602AFF8F499B22C42FFC9F8D67316FD8F60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4c:0d:f5:f7:11:11:ff:df:18:ab:32:6a:21:
b8:2f:a1:c1:b6:02:22:ea:d9:12:0e:dc:07:54:90:
0b:94:ea:5d:31:82:49:c5:65:74:15:21:89:76:94:
3e:80:97:53:35:97:f1:33:85:6a:04:89:a8:d9:3e:
65:e7:38:02:fc:99:4b:8e:f8:43:f3:d0:dc:bd:d3:
c4:54:f9:b6:2e:20:0f:02:8b:e4:81:74:f5:b1:5f:
2c:01:e4:32:06:5d:eb:62:fc:e3:ab:b4:a6:75:01:
68:83:59:ed:c8:f0:43:19:78:a1:09:b1:99:21:46:
71:25:fb:c2:80:1e:52:1f:3c:e4:4a:be:d7:cf:08:
24:84:09:46:4f:6b:fc:8c:33:34:b2:5b:c5:54:b3:
b0:7f:22:8b:6c:fc:92:70:0f:ce:a2:8b:a5:68:29:
d7:30:9d:a9:c6:e7:3d:f7:2d:d1:03:d4:dc:3f:16:
67:14:9b:cd:ac:69:ec:0d:30:ca:21:6c:4b:98:c8:
b6:b5:ec:06:c6:c5:61:ab:b8:dc:d1:23:20:bf:c1:
24:67:c3:c1:a1:0c:e7:b4:70:8c:3d:81:e6:b7:a8:
64:39:e8:e8:8f:ed:88:4f:aa:f8:d3:4f:8a:5c:89:
5c:1e:9d:10:b3:4f:49:9f:c2:23:cc:b0:6e:da:06:
47:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CF:A6:02:AF:F8:F4:99:B2:2C:42:FF:C9:F8:D6:73:16:FD:8F:60
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ac-mAq_49JmyLEL_yfjWcxb9j2A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.72.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:ec:fa:38:80:ca:5b:63:7e:51:05:78:d5:4c:b0:94:56:c8:
41:5f:a1:3a:87:83:c4:9c:6e:6d:03:bd:f4:65:a5:c3:21:96:
7f:13:e1:6f:c4:0e:90:d3:6b:bb:c8:83:59:37:0b:5b:6f:c8:
f2:1f:e9:14:9c:cc:9a:c2:b2:c0:a4:e8:87:ef:ad:22:c3:dc:
a5:03:2d:62:94:af:d3:e6:dd:37:6d:d8:50:1e:26:19:a0:b2:
bd:22:fb:5e:27:cb:aa:18:04:21:d1:17:cf:01:09:92:de:6d:
5d:58:4a:90:f4:b5:97:41:ef:3b:2b:7f:47:fd:3b:18:7b:5f:
d4:35:ce:b2:c4:ed:23:ab:ad:d8:bc:70:f3:63:06:8f:71:6f:
93:c0:b7:ee:55:37:21:9e:d9:0e:26:49:53:9a:9d:a2:ae:e5:
65:c2:69:fa:87:aa:b5:88:5e:86:ca:fa:6b:6b:20:ce:17:bd:
09:46:44:2e:62:61:94:21:64:bb:1c:8e:87:03:12:9a:2a:91:
51:74:8d:8d:c5:4f:00:58:12:1e:ef:7c:d1:a2:12:84:b9:09:
23:bd:e2:ed:f3:92:71:e2:3e:42:ec:e4:42:40:3f:9d:c2:81:
20:2f:2d:4c:f5:22:42:50:8a:90:79:6c:04:7f:34:a1:9d:5b:
c0:a0:ed:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:35:33 2025 by rpki-client