Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BF7fvHXF-Mr4JBwBF62_5jNSfZI.roa
File: BF7fvHXF-Mr4JBwBF62_5jNSfZI.roa (raw, json)
Hash identifier: CUs62P0/l8VSwUkqP01XnNR28TgDanf50fhiVFpPODg=
Subject key identifier: 04:5E:DF:BC:75:C5:F8:CA:F8:24:1C:01:17:AD:BF:E6:33:52:7D:92
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0BED
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BF7fvHXF-Mr4JBwBF62_5jNSfZI.roa
Signing time: Sun 07 Feb 2021 06:40:51 +0000
ROA not before: Sun 07 Feb 2021 06:40:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 203.73.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3053 (0xbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:40:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=045EDFBC75C5F8CAF8241C0117ADBFE633527D92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:51:bc:fa:4e:bc:e9:0b:60:9b:eb:52:f4:
d8:c8:83:1a:89:66:44:93:0c:9b:51:94:0a:90:d7:
74:94:b9:c8:b2:df:d3:ea:82:ce:0a:32:9b:a8:b2:
6a:da:d6:d9:e1:ff:7c:10:ad:f5:57:cb:22:ff:eb:
bf:1f:c0:7e:d2:f7:b1:8e:af:69:25:d3:cf:ca:ad:
a8:0c:f9:31:aa:72:f5:7b:79:13:8e:4a:51:c7:0d:
3f:5b:cc:b4:f4:b4:27:f5:fa:87:f6:20:4f:1c:a8:
f0:8e:a3:c6:61:40:20:09:76:ee:01:74:34:b6:fd:
0a:a0:98:6e:c6:51:ce:5a:5b:5e:e3:87:18:7c:d0:
51:9b:f3:f8:70:80:35:a0:b3:44:a5:99:38:c0:62:
0b:0c:12:f8:6f:ff:6b:1e:f2:3f:4b:04:7d:ca:80:
eb:3f:7e:40:69:69:c7:d3:c3:2e:3f:d6:5d:51:8f:
0a:21:7b:78:0d:11:a1:5b:dd:28:89:9c:00:09:18:
93:3a:7d:dd:96:a4:bc:29:41:0a:48:af:0a:c5:4b:
f7:c4:e3:02:49:8a:a6:77:5d:ec:a0:8f:1d:8c:f1:
02:51:47:21:02:9d:c8:42:c8:23:18:e6:01:11:c5:
5c:15:fb:fe:7c:18:ce:25:76:55:5f:3c:ea:f3:bd:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5E:DF:BC:75:C5:F8:CA:F8:24:1C:01:17:AD:BF:E6:33:52:7D:92
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BF7fvHXF-Mr4JBwBF62_5jNSfZI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
37:61:96:03:cd:50:7b:b5:0e:82:f8:9a:94:66:7c:d8:51:65:
1c:7d:c2:28:71:5c:60:46:2f:1b:8a:86:d7:ed:cc:59:b0:04:
bc:5f:e9:6d:da:41:1f:cd:e9:c1:cf:e7:08:fc:d5:96:6f:66:
f0:19:af:c9:7d:61:1d:8b:25:93:27:06:3d:3d:85:e0:7a:12:
25:c1:1a:50:54:84:67:e3:6d:bc:d6:22:4f:f2:33:ca:69:45:
84:96:17:6d:87:fc:0f:7a:75:e1:3b:92:a5:10:45:b8:72:28:
73:a4:55:08:d6:c0:57:ac:56:8d:8d:f3:8d:9e:94:f8:ed:86:
8d:87:b0:52:7b:38:29:95:b2:1b:80:8b:90:20:e2:ab:5b:e3:
c2:6d:2d:a0:2a:7e:e0:cd:6a:65:47:79:9f:b7:54:cd:a7:6a:
51:d4:26:6c:98:6e:6e:16:71:af:9c:5a:2a:cd:10:0b:2c:c2:
fe:0a:0c:43:92:f4:a6:91:d6:d4:3b:af:ab:07:34:f0:99:18:
76:e5:36:1d:47:4c:d8:53:8a:6b:ae:b6:29:2b:98:8b:99:3c:
cf:0d:b2:b0:46:c0:9b:de:8d:c5:a1:3e:b7:d1:d8:ff:61:ae:
56:06:0b:e6:05:91:23:96:4b:d5:36:ea:0f:f9:8c:1b:e0:bb:
43:53:92:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:21:28 2025 by rpki-client