Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/IX1Manm8RgmIdWx3y57ig1FwjOs.roa
File: IX1Manm8RgmIdWx3y57ig1FwjOs.roa (raw, json)
Hash identifier: QuGSxPtjzrhIx3I1ii4EiW2ujRnv3S14pv90nzNx/VI=
Subject key identifier: 21:7D:4C:6A:79:BC:46:09:88:75:6C:77:CB:9E:E2:83:51:70:8C:EB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E4B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IX1Manm8RgmIdWx3y57ig1FwjOs.roa
Signing time: Wed 29 Sep 2021 02:43:25 +0000
ROA not before: Wed 29 Sep 2021 02:43:25 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18419
IP address blocks: 210.244.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3659 (0xe4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:25 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=217D4C6A79BC460988756C77CB9EE28351708CEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:1f:5b:e9:68:40:1e:7d:c1:f4:da:b1:64:
76:aa:11:5f:31:ee:ff:54:64:70:37:89:a3:48:fe:
60:b4:22:4f:cb:95:0e:15:08:18:56:14:9b:9f:52:
ec:8b:b3:bd:3d:e3:83:82:0d:f1:d6:a6:1f:cc:52:
79:9f:f5:85:a3:57:1c:47:10:fe:99:6d:eb:ae:83:
35:8d:be:22:9f:86:77:be:4b:63:ef:c0:fb:d3:07:
7d:e8:f9:be:20:fe:fc:a0:59:d1:9d:d5:8a:cb:0d:
59:ad:87:7f:d4:5b:7b:ce:24:98:be:49:41:5e:9f:
85:f7:73:64:78:29:15:d5:4e:8f:5f:0d:80:a0:df:
3e:a2:96:ea:b5:22:5e:b8:a7:b4:c2:2f:ec:1b:33:
bc:cc:6d:b4:7b:9d:8f:c8:3f:75:b7:ca:b1:c0:e0:
8f:d9:9c:84:07:2b:7c:46:49:3e:d0:81:fb:bd:7c:
c4:89:d1:0d:1a:2a:e3:8d:e1:1b:3f:2a:9f:24:1c:
74:cf:af:1e:9f:b1:32:a0:24:1b:06:bc:5c:b6:fa:
fc:b7:59:53:ec:1e:3c:8e:21:61:e4:3b:54:7b:4b:
9a:57:ce:32:ac:67:1d:1d:c5:18:33:f7:d0:95:95:
52:11:fa:5e:97:ac:75:85:6b:78:f2:94:3c:99:ba:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7D:4C:6A:79:BC:46:09:88:75:6C:77:CB:9E:E2:83:51:70:8C:EB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IX1Manm8RgmIdWx3y57ig1FwjOs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.244.97.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:37:a4:44:10:45:2f:40:08:88:c2:2e:2d:6f:48:d6:9f:5c:
c0:a8:6c:c1:28:75:cc:51:65:80:b7:61:dd:33:37:cc:8f:a8:
52:c6:8d:ed:d8:e1:87:99:06:a0:7a:03:9d:c9:46:b0:62:b4:
83:03:b9:19:c4:d3:02:27:22:0e:16:7a:7a:3c:93:3d:22:d2:
72:fc:6a:e3:eb:f5:10:58:0d:a7:f5:21:77:98:9a:57:b7:94:
8a:7b:f1:fa:86:b7:34:f8:13:4d:8f:e8:ff:d2:36:47:08:fd:
91:f1:9c:d7:42:f6:45:7f:4b:03:22:1f:42:bc:70:25:ab:a6:
a8:a7:91:d8:83:e6:7d:02:3a:d1:96:24:d5:c9:c8:c2:c3:fc:
a0:ab:e8:8c:c9:2b:ab:43:5f:bb:d7:14:d9:de:d1:a8:43:50:
cd:6e:9d:ed:3c:a1:aa:c0:4e:df:91:45:16:31:3c:be:c9:7b:
88:03:b8:82:8e:82:f4:70:8f:5f:c6:72:82:09:f0:b3:3f:2c:
4c:ac:3a:38:b2:f0:4e:18:c8:6e:bc:4c:8a:80:55:c3:3d:1f:
69:77:d0:a6:47:9e:3e:42:f6:6e:ee:4e:87:56:b0:53:52:87:
16:e0:c5:88:10:8e:f5:09:be:85:64:42:20:9d:2d:2b:fb:54:
cc:75:8e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:25:30 2025 by rpki-client