Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/FFH3rOrSPmZyG2uanHTZbLTL4ik.roa
File: FFH3rOrSPmZyG2uanHTZbLTL4ik.roa (raw, json)
Hash identifier: ZLjUf3sZEWC/v1wKOBtwNLwZQtdNfV/hhD6sj62izIw=
Subject key identifier: 14:51:F7:AC:EA:D2:3E:66:72:1B:6B:9A:9C:74:D9:6C:B4:CB:E2:29
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E08
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FFH3rOrSPmZyG2uanHTZbLTL4ik.roa
Signing time: Wed 29 Sep 2021 02:43:08 +0000
ROA not before: Wed 29 Sep 2021 02:43:08 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 220.228.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3592 (0xe08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:08 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1451F7ACEAD23E66721B6B9A9C74D96CB4CBE229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:16:a4:ee:c9:c2:6f:40:bd:ad:1b:71:52:
1c:cf:a5:7d:45:3a:ec:cc:aa:2a:be:75:72:3e:c7:
13:36:3c:b7:a0:9b:76:ad:9c:c3:67:26:bb:08:53:
19:47:b9:7c:4f:a5:2c:54:d8:8a:ce:49:4f:b3:f1:
c2:17:58:c6:19:d4:81:75:df:86:ef:c0:48:cc:26:
19:fe:97:04:7f:23:fd:6a:9d:df:3c:4b:66:a5:43:
fa:bc:b5:f7:58:86:ee:11:9a:48:f8:76:18:19:9a:
35:74:54:c2:ff:4a:ac:d9:db:b8:f3:05:1a:d2:5f:
8f:f1:ee:2c:5a:5a:15:f7:df:8e:48:b6:69:2d:7b:
71:0d:4f:28:e6:66:2e:0c:54:0f:5d:85:5f:5e:96:
98:79:f9:3a:6a:03:a2:7e:34:f4:10:e1:f9:a0:2b:
47:1b:fd:f5:90:43:36:53:14:eb:5b:8a:00:11:8a:
9a:8a:a8:3e:2b:73:b7:92:77:03:c3:65:41:af:35:
f9:fd:26:c9:80:97:37:5b:7f:45:49:9a:0a:70:c5:
4d:8f:f3:5a:51:10:98:76:f0:80:cd:68:f5:9b:6b:
f9:ce:29:92:f9:b4:fb:df:0b:ae:9c:32:4f:15:40:
c4:09:b4:d7:17:c8:9f:dd:42:7b:7c:38:2b:aa:0c:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:51:F7:AC:EA:D2:3E:66:72:1B:6B:9A:9C:74:D9:6C:B4:CB:E2:29
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FFH3rOrSPmZyG2uanHTZbLTL4ik.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.228.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c8:42:c3:6b:2e:34:25:fb:bc:e0:b3:e2:42:51:b4:7f:1f:5f:
d7:d7:ce:ff:eb:4c:95:16:35:f1:a4:4b:4f:36:e2:f8:22:50:
c3:e2:1c:2f:72:af:58:f9:52:55:e6:50:bb:fc:1e:46:cf:e5:
4a:4d:62:9d:a5:75:6d:d4:2f:2d:12:d3:2f:de:bf:08:6f:af:
ee:c3:10:02:5f:11:f2:5e:09:6b:0f:2a:c4:7e:50:22:e6:01:
ce:23:91:e9:0d:4f:ad:2f:f7:db:2b:ad:d7:fb:b7:05:61:f0:
ec:71:c2:6d:42:6b:8b:f0:8f:92:31:a6:a4:0e:74:74:56:79:
3d:cf:73:73:99:6e:2b:ef:26:ac:33:62:1b:5d:01:3f:92:00:
98:65:f9:3e:f9:17:48:d8:4a:f3:a2:ea:c4:a0:c7:05:a9:b1:
2b:cf:e8:9e:50:99:f9:78:63:9a:27:b8:32:b0:d9:b2:b3:0e:
0b:ff:14:27:1a:73:c2:60:ab:d1:8b:21:3f:ef:68:58:3b:c0:
5c:12:c7:8b:5f:69:b4:b3:42:48:bd:c8:ba:cd:f4:78:be:68:
26:9b:3c:02:6f:ba:30:8f:63:69:d4:44:4c:6d:b7:e1:be:62:
51:80:47:38:9b:14:2a:ff:bf:c6:d0:95:f6:36:b3:84:32:4d:
cc:80:e3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:40 2025 by rpki-client