Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/FnV_3mv4QO1747NO6pj2jy6mgMg.roa
File: FnV_3mv4QO1747NO6pj2jy6mgMg.roa (raw, json)
Hash identifier: tGvr437dZNlBjqpCEvQAsSnEpSwDQCN+ooLKc0nK1J4=
Subject key identifier: 16:75:7F:DE:6B:F8:40:ED:7B:E3:B3:4E:EA:98:F6:8F:2E:A6:80:C8
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0DFB
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FnV_3mv4QO1747NO6pj2jy6mgMg.roa
Signing time: Wed 29 Sep 2021 02:43:04 +0000
ROA not before: Wed 29 Sep 2021 02:43:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 203.67.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3579 (0xdfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=16757FDE6BF840ED7BE3B34EEA98F68F2EA680C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f7:e3:05:04:82:7a:8d:f5:7a:8d:55:66:78:
10:c9:50:f7:1d:0e:43:6f:e0:9d:13:60:a9:12:9a:
c0:a6:8e:65:00:d9:fe:f5:47:4b:56:01:7a:0e:dc:
8f:01:4a:d9:4e:88:ec:a2:fa:ad:a2:fa:b2:dd:33:
e6:95:14:79:84:10:ca:59:01:7d:ef:53:42:60:bd:
e3:e8:3b:6d:1d:92:5d:0d:7d:3a:d8:b3:3f:e1:0a:
84:f5:26:8c:df:88:62:6d:18:75:f7:21:7c:9b:5e:
92:b2:8a:ad:ec:c0:8b:17:71:cb:fe:a9:1a:04:55:
fd:fd:01:cf:6c:94:4e:61:c6:c0:eb:88:46:f5:aa:
91:15:ce:69:e7:ad:ba:af:ff:ca:6a:e4:1b:47:24:
22:fc:5c:4c:c8:d6:f8:ad:34:eb:1e:8c:71:0b:6c:
e5:68:f8:b3:0d:e3:e3:a8:e4:e9:e6:93:ad:35:58:
61:6e:43:14:9d:86:c9:80:a4:6a:dc:6c:a3:ec:39:
44:21:ed:28:0f:34:18:8b:d6:13:31:00:e3:ee:e8:
df:f9:22:ea:30:1c:0b:a4:08:b5:8d:51:8f:72:d4:
91:a4:c3:bd:82:86:57:62:cd:92:4e:39:f7:4d:ba:
78:bf:65:13:ba:bd:3e:37:1c:c1:03:76:cb:32:b0:
b4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:75:7F:DE:6B:F8:40:ED:7B:E3:B3:4E:EA:98:F6:8F:2E:A6:80:C8
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FnV_3mv4QO1747NO6pj2jy6mgMg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.67.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:a4:08:33:61:a4:a5:75:86:74:1e:fd:7e:f7:2d:82:a4:3b:
70:dc:ad:9f:39:b4:60:dc:19:14:53:37:5e:2b:15:73:b3:4a:
3d:95:2f:57:2d:bf:c9:95:c6:83:fe:45:48:6f:98:c5:1a:b3:
5d:54:64:6f:bb:0b:3b:e9:be:8e:9b:9d:06:da:f1:83:85:ba:
96:b1:ad:0f:48:d8:30:02:4b:c9:d2:c6:96:e9:8d:e1:bc:77:
e4:f4:0a:7e:06:88:03:fd:29:56:dc:c1:d5:0a:b5:84:d7:50:
13:33:fa:1d:a4:6e:03:00:ec:93:ce:9c:ec:4f:e2:14:fb:95:
54:47:e9:b1:07:82:09:ad:fb:33:22:21:6b:ec:7a:ba:ca:29:
bc:52:56:5f:db:25:74:24:de:03:62:db:07:ab:77:21:03:04:
1d:11:a3:66:56:2f:b5:0d:2d:76:d2:f0:36:05:b4:27:ca:0d:
bb:74:50:81:a5:84:38:ce:c9:2a:40:64:4e:2a:b9:93:5b:8c:
1d:de:45:98:0b:ad:7d:aa:05:79:58:a0:d1:89:a2:eb:81:ab:
88:8c:f8:6f:ad:dd:bd:b9:cd:21:6c:2c:b1:41:07:08:99:0f:
a8:e9:c4:d7:1d:55:5f:7e:7e:e5:1f:78:80:de:91:60:2b:e1:
e4:73:c4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:35:33 2025 by rpki-client