Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/L9IUwFqGcwBea8AUH-bWLt9qhhk.roa
File: L9IUwFqGcwBea8AUH-bWLt9qhhk.roa (raw, json)
Hash identifier: zz6kUzaDfezU/DM7aegy/FeKglZQz3r8txq9gkxMIqk=
Subject key identifier: 2F:D2:14:C0:5A:86:73:00:5E:6B:C0:14:1F:E6:D6:2E:DF:6A:86:19
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/L9IUwFqGcwBea8AUH-bWLt9qhhk.roa
Signing time: Thu 15 Sep 2022 02:43:12 +0000
ROA not before: Thu 15 Sep 2022 02:43:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 192.72.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3183 (0xc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 15 02:43:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2FD214C05A8673005E6BC0141FE6D62EDF6A8619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:3b:78:75:5e:0e:0d:78:95:36:43:89:d7:
7b:4d:79:bc:21:28:a7:1b:ee:50:c7:9a:60:e9:3a:
a7:91:c0:91:73:2e:db:e3:12:91:5a:1a:7a:e2:c6:
74:73:40:25:f3:56:b3:9b:7c:c8:2d:68:be:6d:38:
41:db:4f:06:60:ee:45:59:33:d8:82:7e:64:b4:6c:
16:c8:47:e0:02:db:23:74:09:13:33:06:50:ad:4c:
9f:10:c5:6d:8c:9d:bd:df:04:2d:43:cb:ea:3f:51:
f5:d8:b6:2c:88:15:ab:93:2c:d5:50:95:6f:66:a7:
cb:b6:1b:80:bc:b8:29:4b:23:7f:93:be:95:94:04:
59:a7:3c:0a:53:e3:72:f8:ea:fa:2d:00:8c:44:7f:
58:1e:06:36:f6:19:b1:d2:9a:52:68:91:15:b6:ad:
b1:4d:8b:49:b3:8e:51:5c:98:94:1d:6b:3f:82:e0:
7e:a1:3b:e7:99:25:95:5c:e8:63:05:00:e9:e5:6f:
5f:0c:d3:01:2e:2b:19:4d:1b:71:0f:68:06:56:fd:
82:3c:cf:74:23:3b:c8:00:17:a9:10:c5:22:53:5b:
8f:3d:e8:cf:74:a0:13:ce:09:57:66:04:39:9c:76:
f8:6a:70:9a:fe:81:4b:dd:a4:3f:4c:23:23:83:90:
a0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D2:14:C0:5A:86:73:00:5E:6B:C0:14:1F:E6:D6:2E:DF:6A:86:19
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/L9IUwFqGcwBea8AUH-bWLt9qhhk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.192.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:e2:9f:33:cb:4d:76:d6:1c:97:3b:55:ac:28:7d:dd:90:b4:
3e:76:8b:77:0d:11:9f:c8:45:d9:37:3e:23:62:6a:25:a9:02:
1b:a4:9c:ac:47:d6:87:c7:7c:e2:79:01:1e:2b:b9:54:e0:5a:
91:b3:37:86:0b:64:39:19:c3:bc:10:27:f8:ec:9f:e9:79:79:
7d:a5:8c:a9:98:a3:08:5d:4f:64:c2:fa:ef:25:23:c3:eb:8f:
50:c4:b4:d0:4d:09:f9:a8:1b:ba:48:37:a9:c5:56:f3:f4:9d:
82:55:30:06:45:dc:e3:39:db:7f:e5:24:f6:90:81:20:b1:25:
ef:e1:42:61:4b:31:79:69:f1:95:c3:25:09:f9:d3:9e:87:30:
c5:69:cb:86:c6:db:3f:38:ab:a0:9e:8b:d5:80:40:06:98:b2:
cd:53:26:f6:90:2e:b0:19:8a:84:3e:94:77:e7:4b:d7:36:a5:
36:3c:8e:f1:37:7e:fa:61:df:e4:f9:78:53:41:cf:8a:78:e0:
68:bf:38:de:84:7e:bc:3e:a3:7b:4c:24:0e:a4:c2:b5:7b:43:
5a:db:5c:0e:11:4e:6f:fe:b7:19:cc:61:c0:99:20:5d:03:9b:
e9:c0:53:96:be:ea:0e:0a:09:1e:7e:0c:4b:a7:dc:53:0b:25:
1d:b4:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:23:00 2025 by rpki-client