Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BnqWvziUwhbRZ6tAOrYmpqfC1oo.roa
File: BnqWvziUwhbRZ6tAOrYmpqfC1oo.roa (raw, json)
Hash identifier: DplLZB3PPuw7RPtUvpNN4Eew9/x0ylopozRYMGFhrSw=
Subject key identifier: 06:7A:96:BF:38:94:C2:16:D1:67:AB:40:3A:B6:26:A6:A7:C2:D6:8A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E0C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BnqWvziUwhbRZ6tAOrYmpqfC1oo.roa
Signing time: Wed 29 Sep 2021 02:43:08 +0000
ROA not before: Wed 29 Sep 2021 02:43:08 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 175.180.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3596 (0xe0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:08 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=067A96BF3894C216D167AB403AB626A6A7C2D68A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:20:e1:57:bb:f5:14:d0:cd:8a:af:88:91:
80:cc:a8:b5:9d:af:58:87:30:fc:6a:ac:e5:b2:c7:
13:8b:80:76:3c:fb:31:6c:df:ab:76:31:12:3d:e0:
cd:f3:93:9b:c8:ef:9c:29:fe:1a:ed:b7:b5:98:3a:
0e:cd:84:1d:e8:aa:c1:f9:97:e3:df:f5:f6:3d:6f:
d8:10:b0:2f:ad:14:ff:0e:c1:da:d2:85:3d:50:30:
93:2a:b1:16:c0:7d:21:da:ed:48:82:2c:c4:2b:b4:
6f:2c:f7:a9:18:f1:1c:a0:46:79:1f:46:d7:67:90:
fd:8a:a6:b9:bd:c8:59:9f:ff:94:b0:63:f0:00:5b:
ba:d1:32:c5:da:b7:73:46:57:18:a3:88:ef:24:b5:
fc:ab:50:d8:7c:12:b9:11:0e:f1:6a:24:71:b4:21:
15:35:a9:ce:1c:c6:c9:89:e4:db:6e:14:53:6f:db:
3e:5b:dc:e5:04:56:31:c1:3f:51:91:b9:30:47:1d:
85:5a:7a:3b:a8:a9:a6:54:31:46:6c:8c:0e:00:fe:
d8:78:8e:a8:15:c9:e3:d5:95:51:6c:79:31:fa:a0:
52:4b:cd:cc:1c:44:a7:25:93:5f:1a:b4:df:f4:d5:
37:65:42:e3:8e:26:06:9d:ee:1e:68:44:f3:59:f9:
fd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7A:96:BF:38:94:C2:16:D1:67:AB:40:3A:B6:26:A6:A7:C2:D6:8A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BnqWvziUwhbRZ6tAOrYmpqfC1oo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.180.0.0/14
Signature Algorithm: sha256WithRSAEncryption
3c:2b:1f:0c:df:8c:ca:e7:ac:a0:21:09:e5:6e:18:0b:09:d4:
6c:93:96:0a:23:a2:29:14:9c:fd:28:6e:bc:bf:20:ac:22:4d:
f7:47:63:d7:0a:1c:1d:e4:c3:88:e2:24:6b:ea:9b:f5:a8:8c:
4e:df:1d:63:5a:9a:e1:dc:40:62:eb:92:b4:23:93:53:1a:38:
c9:d2:74:4b:48:90:8e:6c:d7:e1:60:90:58:85:3f:70:43:b9:
c0:a3:27:b8:bd:ca:df:fb:a3:39:fe:aa:b4:b4:64:d7:62:7b:
b1:c4:e9:3b:a6:85:15:6e:2c:bb:bf:bc:07:c8:e0:d2:84:c1:
9e:cf:34:a4:97:94:fe:47:35:5c:0f:15:51:c9:95:c6:41:6a:
9e:c4:14:09:99:24:24:1b:07:10:f5:52:ca:a5:1e:fc:9a:4d:
43:df:c1:e4:66:27:25:6a:71:69:a4:86:07:f7:c2:c2:b5:35:
26:e8:2b:c3:bd:89:b0:b9:7d:4e:5f:56:e3:01:6f:a3:84:19:
d6:70:60:22:0b:23:c5:96:d8:82:11:59:3c:46:94:ce:29:e7:
ef:2b:e2:e4:5e:8d:be:50:14:1d:4b:85:d4:c4:15:1b:6c:57:
ff:4e:60:a1:d3:cc:17:b0:65:9e:32:78:10:c5:ef:70:38:a9:
60:04:c6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:30:10 2025 by rpki-client