Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/MZehDINajFACH5sKEYmNJvZIn2o.roa
File: MZehDINajFACH5sKEYmNJvZIn2o.roa (raw, json)
Hash identifier: vVYRyrckx2+oH13/rzJ3b3p/mwpYisxfR8FJkfv2MV0=
Subject key identifier: 31:97:A1:0C:83:5A:8C:50:02:1F:9B:0A:11:89:8D:26:F6:48:9F:6A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0ECF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MZehDINajFACH5sKEYmNJvZIn2o.roa
Signing time: Wed 29 Sep 2021 02:44:01 +0000
ROA not before: Wed 29 Sep 2021 02:44:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 175.182.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3791 (0xecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:44:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3197A10C835A8C50021F9B0A11898D26F6489F6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:8c:45:1e:4a:82:0a:f1:38:78:84:db:64:
f3:53:a8:b9:6c:bc:4c:d1:d0:fd:56:c2:3c:d3:1c:
d0:54:de:eb:b4:4b:8e:aa:c0:72:c2:6b:2e:ea:c0:
1d:df:80:1f:85:b8:df:18:57:59:3d:b4:43:b8:8c:
9f:f9:11:ca:40:ac:42:bc:60:d2:e8:4b:ec:51:3c:
d3:c6:a9:d9:b6:f4:2d:d2:25:60:20:7b:70:49:98:
4c:3d:e0:c3:b6:f4:fa:e1:de:f3:8a:e6:d2:b7:1e:
0e:5b:94:3c:e6:b9:1f:fb:22:ac:aa:b2:8a:c0:f7:
cb:13:7a:a1:c9:48:84:9a:a7:79:95:2d:9d:c8:39:
14:12:cc:6a:a8:89:9f:87:8e:10:9d:d2:38:92:aa:
87:41:22:4e:33:df:67:71:ee:38:88:1f:55:d0:77:
35:fe:db:e4:ac:25:63:20:10:d3:b9:3e:67:35:5f:
37:49:2e:9c:c8:99:1d:3d:1c:28:14:fa:08:dc:04:
14:06:0d:91:97:10:c0:1a:06:ea:5e:6f:fd:46:3c:
5f:b8:01:f4:8f:a4:9f:14:3f:37:38:26:70:0f:39:
83:1f:15:f3:84:e2:0d:0d:85:2a:c0:f0:00:cb:30:
4f:46:df:a7:54:4b:81:02:a0:07:c9:7c:27:92:3b:
bc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:97:A1:0C:83:5A:8C:50:02:1F:9B:0A:11:89:8D:26:F6:48:9F:6A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MZehDINajFACH5sKEYmNJvZIn2o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.182.77.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a2:18:b2:34:42:d8:aa:81:a1:f7:bb:a5:09:e0:74:ae:7a:
3a:08:99:1a:d0:3d:13:47:52:9a:15:b6:bf:f4:80:5c:89:39:
90:56:61:82:aa:4e:cc:9d:4e:fa:30:14:c6:65:08:95:be:83:
bd:cd:62:3c:af:59:15:88:64:23:e4:0f:fb:4d:d9:8b:20:bd:
73:c5:46:96:08:6c:c7:e3:78:55:d3:48:89:e8:1f:41:ba:de:
7a:eb:6b:af:17:44:c7:71:63:b4:c1:b9:43:49:28:2b:69:39:
4d:1f:26:e1:19:d8:e3:d5:9b:3f:81:f5:11:bc:dc:05:75:d1:
1a:e0:ae:73:dd:e8:f9:e7:9d:1e:64:33:a8:d0:ee:ee:56:c3:
36:8e:4a:8a:f0:2c:60:1e:9f:a9:19:f4:99:63:31:62:c8:c1:
d4:dc:24:5d:33:e4:64:cb:77:c2:20:f9:97:ae:cc:db:67:bd:
17:19:d4:0d:2b:d1:12:39:1a:a7:72:7b:b6:e1:44:dc:7e:f5:
11:e1:c8:d3:09:3e:80:8c:32:c0:e8:66:4d:2e:b7:c0:71:a9:
a6:d2:64:50:16:56:14:af:19:08:63:48:1a:4b:8c:18:8c:a8:
05:cd:e7:3a:99:6d:e1:c3:cd:b3:3a:1b:bb:7c:e5:cd:56:0a:
84:3e:38:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:16:14 2025 by rpki-client