Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ag7UsdvAOpwETaZr2tvCsSAWsjw.roa
File: Ag7UsdvAOpwETaZr2tvCsSAWsjw.roa (raw, json)
Hash identifier: gcLI5/uSsGInP05SroHkHvb7wufsMyKbvZxmaMdlSuU=
Subject key identifier: 02:0E:D4:B1:DB:C0:3A:9C:04:4D:A6:6B:DA:DB:C2:B1:20:16:B2:3C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0D25
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ag7UsdvAOpwETaZr2tvCsSAWsjw.roa
Signing time: Sun 07 Feb 2021 11:48:36 +0000
ROA not before: Sun 07 Feb 2021 11:48:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 112.105.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3365 (0xd25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:48:36 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=020ED4B1DBC03A9C044DA66BDADBC2B12016B23C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:b7:06:19:7a:74:52:0e:65:23:b7:8d:8c:
01:2e:00:48:55:d7:20:a1:19:4a:91:53:19:d0:ba:
3c:b8:b5:36:67:56:ff:3c:9f:e1:76:00:44:1f:7b:
e1:8d:0b:41:50:da:ea:48:a6:52:2d:96:5f:bd:60:
94:0b:c6:bf:4b:ed:d0:a7:da:7e:57:ff:0e:bb:f5:
43:a6:97:75:16:04:6d:d6:64:79:6a:99:d0:3a:39:
7d:ef:81:82:8a:ce:0a:8e:d7:4e:5a:22:ef:d5:41:
63:4a:7e:15:5f:c4:c3:20:ce:4e:3e:de:70:c3:eb:
a6:1d:87:94:05:d7:d8:0f:6c:7c:c9:7d:97:1e:7a:
69:0a:3a:3e:0b:52:92:dc:19:ae:a5:64:5a:37:55:
e9:42:2f:af:60:fc:f8:7b:bb:db:09:2c:2d:55:74:
a4:47:8a:63:2b:be:f4:9a:d6:0e:cf:0e:c0:71:fa:
0c:82:6c:ad:37:f2:2c:64:59:77:4f:69:f0:90:68:
b5:92:45:15:d1:b5:e2:7e:49:f0:09:42:10:b4:38:
9b:7e:fb:01:ab:35:7c:97:6b:fd:fb:b2:42:76:9b:
22:77:e7:7b:65:40:dd:b9:90:74:36:62:e4:b3:ac:
d0:9a:d6:ed:66:15:48:e7:d4:96:e8:08:16:d7:9e:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:D4:B1:DB:C0:3A:9C:04:4D:A6:6B:DA:DB:C2:B1:20:16:B2:3C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ag7UsdvAOpwETaZr2tvCsSAWsjw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:a3:6e:19:10:6e:56:49:93:31:19:7e:50:76:0d:b7:5f:c9:
3c:17:09:c4:0f:44:74:c8:33:20:bb:4d:7a:9c:8b:89:6d:35:
61:98:83:ea:cb:aa:14:b3:11:47:4a:e4:27:1e:b1:e9:82:ce:
66:be:19:d0:23:b0:be:76:cf:09:a5:68:35:d2:e2:56:3b:be:
4b:30:f4:ab:62:31:0a:b6:33:b3:bb:23:42:5f:e1:07:25:9a:
7d:d2:6c:84:47:64:89:b0:a5:1b:36:89:c9:7e:dc:85:e3:c3:
90:0a:00:3e:57:ab:c4:df:74:e5:93:58:36:cd:15:5f:94:07:
54:80:9d:5b:db:1a:db:63:25:9c:3a:f1:b2:8c:04:e4:b2:36:
d1:ae:63:f1:c8:ff:aa:65:04:18:c9:8d:f1:b9:d0:ca:33:fa:
ac:c5:3a:f5:a3:39:86:e0:ac:e6:d6:5b:89:1a:52:7c:43:b1:
b9:98:31:10:86:10:38:75:5b:2e:e9:43:87:5b:96:e9:50:b5:
52:f0:e1:d4:cc:90:95:c2:1e:91:01:59:5c:7e:0a:d7:78:ea:
3e:d3:b5:7e:ff:da:7c:b4:79:05:8f:e0:7e:2b:5e:b5:c8:4a:
6d:3c:33:64:8f:6e:2c:bd:3d:29:01:72:6f:fa:0f:0d:d9:5f:
69:00:57:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:08 2025 by rpki-client