Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/M2RsS0rvaChgwB7KSX9GJBbUJI8.roa
File: M2RsS0rvaChgwB7KSX9GJBbUJI8.roa (raw, json)
Hash identifier: ILmcZatl6jfBptz2A/hMlza+wvfMUvLPB0hpyPzkfEI=
Subject key identifier: 33:64:6C:4B:4A:EF:68:28:60:C0:1E:CA:49:7F:46:24:16:D4:24:8F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0BEB
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/M2RsS0rvaChgwB7KSX9GJBbUJI8.roa
Signing time: Sun 07 Feb 2021 06:40:44 +0000
ROA not before: Sun 07 Feb 2021 06:40:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 218.210.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3051 (0xbeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:40:44 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=33646C4B4AEF682860C01ECA497F462416D4248F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:ae:13:e9:8d:3a:69:22:e6:7e:e9:93:cf:
46:39:00:f6:84:13:7b:32:9c:0e:b4:aa:36:ed:a4:
f6:ee:d9:0c:eb:a2:94:4f:5e:74:ca:9e:3f:aa:18:
29:a7:83:9f:02:5a:4a:db:9d:1f:7b:42:f5:c4:48:
8e:5f:c5:fc:ee:51:72:2d:ae:9e:80:bc:72:39:32:
a2:aa:8c:a8:33:33:23:5e:6d:78:e4:22:d5:28:ac:
94:30:34:77:d1:75:f0:21:bf:6f:99:3b:bd:0e:f9:
c3:14:30:05:36:49:43:a5:20:16:15:79:64:9f:12:
e3:e1:66:8a:d4:4e:93:2b:55:1b:be:e4:ab:39:da:
40:f2:9c:e7:99:4d:41:46:11:b4:56:1c:e0:2b:f4:
20:32:09:24:89:97:69:c7:e3:43:bb:a8:5d:df:bb:
39:cf:43:22:6f:2b:36:6c:f6:a8:d1:4f:34:b8:8d:
93:46:e1:3a:c1:6b:0f:8c:08:fe:2f:f8:35:70:52:
c8:5d:ca:c9:08:93:a8:7a:5e:7f:8c:ed:90:f9:b9:
21:bf:32:88:fa:1d:1d:bc:24:7d:84:1d:37:00:c1:
8a:96:01:aa:07:5e:8c:c5:05:0f:59:d0:6a:09:67:
51:7d:ff:fc:4f:02:2f:0f:27:57:d1:c7:76:1f:47:
57:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:64:6C:4B:4A:EF:68:28:60:C0:1E:CA:49:7F:46:24:16:D4:24:8F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/M2RsS0rvaChgwB7KSX9GJBbUJI8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:84:2c:24:7e:8c:a0:3f:82:ce:19:63:86:ef:84:5c:88:73:
c3:1b:79:36:e1:4e:03:fc:48:2d:f4:68:2c:43:8b:51:74:7e:
d2:85:ba:d4:3f:ae:10:8a:32:4d:d6:ea:3d:a6:46:8a:87:2a:
a8:0f:51:38:27:91:40:3f:0d:6b:9a:af:13:05:67:a1:da:37:
c1:6a:8d:76:bf:f6:1e:dd:b9:3a:6f:a1:cb:ed:85:88:5e:b5:
ff:d8:48:7f:d4:b9:22:94:c2:f2:85:83:df:43:aa:ea:15:77:
37:fd:ef:5a:b3:37:06:4d:56:e2:42:a0:90:d8:72:78:b8:21:
e4:f5:03:0f:5d:a9:52:c9:74:b4:a5:af:4f:b1:f2:a0:61:2e:
cb:98:cf:10:d4:08:e8:bd:6f:4c:0c:42:55:bb:66:d1:3c:3e:
4f:9d:8c:84:45:03:e9:a4:f1:59:35:45:ce:56:72:4e:68:3c:
f0:68:ae:6b:da:68:f8:40:7f:50:56:34:47:fd:fe:9f:ba:3e:
fd:e6:20:05:bb:cc:c2:26:58:cc:91:07:a2:93:46:5c:05:b5:
12:63:4a:d5:bb:a6:87:f9:23:48:e1:ef:c5:5a:23:17:be:d7:
a9:d2:18:9f:08:2d:44:9f:2b:7c:58:be:96:c4:b3:2f:7e:f3:
a6:51:18:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:21:27 2025 by rpki-client