Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Gt5Eihvtn_UubABivWr6jU5JAlE.roa
File: Gt5Eihvtn_UubABivWr6jU5JAlE.roa (raw, json)
Hash identifier: 0f3xudtcgEtc2jPY0TKJFfEafXLhyoNiEVubY2y1WrI=
Subject key identifier: 1A:DE:44:8A:1B:ED:9F:F5:2E:6C:00:62:BD:6A:FA:8D:4E:49:02:51
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C9B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Gt5Eihvtn_UubABivWr6jU5JAlE.roa
Signing time: Sun 07 Feb 2021 11:44:11 +0000
ROA not before: Sun 07 Feb 2021 11:44:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 106.107.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3227 (0xc9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:44:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1ADE448A1BED9FF52E6C0062BD6AFA8D4E490251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:4e:fe:dc:88:90:9a:c1:95:a1:bb:bf:58:
5e:62:8b:70:dc:b5:cd:d7:9c:ae:60:4c:b2:e1:59:
53:f1:2f:21:d5:10:7e:85:19:b1:43:86:48:4c:e4:
6c:85:3c:93:0b:94:a3:44:84:72:88:18:1a:b1:71:
72:27:ba:87:47:47:62:77:79:94:2c:be:3d:e8:be:
b3:7f:06:1b:6c:db:2e:79:72:9e:22:87:2f:67:73:
70:3a:75:b3:4c:75:b2:8f:89:c1:5d:b7:e0:ff:05:
3e:1e:c5:8e:2a:44:72:13:76:f2:2c:78:4a:fb:a6:
ca:2a:68:97:70:10:65:01:de:40:c7:a6:1c:d2:d9:
01:1a:58:8e:f2:00:96:0a:ff:49:2f:88:e1:bf:a9:
19:6b:1d:aa:7b:d7:b0:2c:0c:75:c9:e0:7b:85:c2:
b8:80:ae:0b:df:1c:71:b5:b3:d8:a9:6f:15:97:15:
f6:82:20:7d:cd:c5:ce:56:1d:c2:dc:51:43:64:9b:
fe:6c:b9:81:a4:e2:76:49:61:b9:c6:4f:82:6b:f4:
66:a1:1e:0a:81:58:c9:49:0d:e0:aa:47:c4:d1:15:
a5:3a:82:21:86:48:f0:11:28:bf:5d:ff:19:1c:f4:
aa:fd:b4:ea:ed:c5:04:2b:73:e0:fb:80:c9:ee:a1:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DE:44:8A:1B:ED:9F:F5:2E:6C:00:62:BD:6A:FA:8D:4E:49:02:51
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Gt5Eihvtn_UubABivWr6jU5JAlE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.160.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:55:cd:4d:12:84:bb:71:f6:21:f9:1f:29:17:d0:7c:fe:8a:
20:e9:5a:ea:98:23:19:ae:49:c0:5f:bb:46:bf:a6:df:f6:f4:
0e:6e:77:96:24:d7:0e:a5:54:59:14:fb:28:7a:53:15:08:ce:
95:e9:2b:d0:c5:e4:79:7a:da:42:20:38:13:04:e5:d1:44:03:
d9:3f:0c:c3:6c:ad:03:1d:c2:48:14:2f:ad:4f:cf:a5:a9:a1:
52:a7:de:83:d5:ec:69:4a:22:65:ca:82:51:34:3e:4d:e6:33:
70:13:e8:b8:9e:83:11:63:48:98:6c:f4:f0:9c:bb:9a:0a:9f:
e2:d5:82:cf:1d:8e:40:56:c0:c9:d5:4a:fd:b6:00:b0:5c:56:
1c:21:d5:b5:69:de:bb:5d:18:d4:77:a7:15:74:e0:6f:c4:12:
28:f3:dc:c3:f9:1a:ef:d5:78:db:f6:0b:f6:bf:4a:15:21:0f:
2f:84:c8:06:ce:41:6a:35:f5:3c:1c:53:a2:05:fe:42:84:05:
98:fb:d4:16:e9:e2:1e:96:8b:5d:3a:08:31:ea:a8:9e:80:a8:
1e:59:b6:96:c6:61:2a:31:ff:89:c9:86:54:08:65:9d:79:eb:
cc:92:68:e1:ce:56:48:79:e5:b2:83:9b:2f:16:a0:56:94:ae:
56:db:60:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:13:49 2025 by rpki-client