Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/IYhl6lO0HIAZ1nfNo2eM0KnRiLw.roa
File: IYhl6lO0HIAZ1nfNo2eM0KnRiLw.roa (raw, json)
Hash identifier: S6uxSyY9qv565XYgrsXiG9kcSYvJiCpqLBUmD1oNKV0=
Subject key identifier: 21:88:65:EA:53:B4:1C:80:19:D6:77:CD:A3:67:8C:D0:A9:D1:88:BC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0ED5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IYhl6lO0HIAZ1nfNo2eM0KnRiLw.roa
Signing time: Wed 29 Sep 2021 02:44:02 +0000
ROA not before: Wed 29 Sep 2021 02:44:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 218.210.118.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3797 (0xed5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:44:02 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=218865EA53B41C8019D677CDA3678CD0A9D188BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:d1:96:2f:37:26:6a:9b:e6:85:1f:19:b1:
63:a2:c4:66:fe:60:eb:08:28:3d:44:cc:a9:5b:8c:
f6:02:75:91:bd:73:c3:68:cf:49:e7:4d:a8:f8:85:
bd:35:c5:53:b3:d5:ca:40:fe:e1:0d:4b:42:0b:b4:
97:61:d5:2b:68:97:b9:8d:fb:65:76:81:80:94:1e:
4f:3b:d3:9e:26:90:00:7c:70:f0:fa:fe:4d:e2:ca:
79:1d:fe:fb:db:0d:42:cf:df:6f:6b:22:79:43:7b:
b1:ae:3c:87:ab:74:ee:fd:13:d3:cf:11:41:df:59:
36:f6:56:08:78:d3:82:86:a4:27:67:18:a5:c4:34:
6e:ca:9f:f7:4f:aa:b7:9c:30:ac:bb:3b:fa:27:65:
6a:f4:6c:c8:66:08:37:0b:f6:3f:cf:e1:bf:df:73:
0c:0d:88:e4:57:96:8c:76:39:dd:b0:31:74:21:a5:
73:18:fd:74:73:8e:b4:62:70:c5:d4:bc:56:4b:e4:
37:7d:c7:06:21:3b:d5:87:90:b1:4d:59:73:b2:cd:
06:3f:b8:7d:8e:8a:5f:5e:05:2c:4f:cb:df:4d:09:
a4:62:53:d0:28:e2:cf:ba:df:20:0d:24:ad:e8:69:
57:52:c3:8f:87:74:73:68:f5:67:37:39:22:01:3a:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:88:65:EA:53:B4:1C:80:19:D6:77:CD:A3:67:8C:D0:A9:D1:88:BC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IYhl6lO0HIAZ1nfNo2eM0KnRiLw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.118.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:f7:e4:9a:54:5b:f9:69:00:11:20:b6:83:2f:96:1a:7c:30:
b9:ec:a0:ce:ce:4a:85:eb:f0:13:06:47:71:9f:fd:bd:69:73:
c4:02:fc:2c:64:79:78:29:16:8e:e6:42:f3:eb:a4:36:67:ad:
83:4e:e9:82:e5:91:b2:60:5e:78:16:e9:96:be:2e:9e:52:94:
f1:f9:00:6c:37:c4:21:3d:b5:02:fe:74:74:91:f8:fc:e9:bc:
40:e2:c3:7e:d6:84:b7:2b:26:67:24:b2:d2:54:4e:aa:c8:76:
bc:5f:01:71:c3:20:8b:b8:f9:20:46:ab:cb:62:a0:8a:22:f2:
d0:d7:41:82:9d:bf:d6:00:d2:97:6d:6a:35:cb:4d:98:a4:c0:
89:ca:d7:8b:1a:fd:26:80:d1:31:30:45:a5:23:fd:12:c5:ed:
0f:f0:73:11:a3:c3:0f:f9:63:cf:4e:e8:e8:71:96:a3:93:72:
ca:47:9f:bb:55:94:03:8f:a9:25:c7:8b:b3:88:6d:ab:98:53:
15:16:b2:0e:02:94:9c:57:2e:33:f5:de:d1:5c:c5:29:bf:b9:
e7:f4:b7:4c:93:97:1f:f5:a5:a0:31:dd:ed:9e:9a:1b:d7:8c:
8a:03:55:28:26:d4:8d:3b:11:cf:99:51:a3:e3:64:25:36:8d:
2a:19:89:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:16:06 2025 by rpki-client