Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/MlsmwY7T35a2tqFWgMspdVKVNXQ.roa
File: MlsmwY7T35a2tqFWgMspdVKVNXQ.roa (raw, json)
Hash identifier: tnNDyo0AReT5ZtbKvg3hoEX25dGD58thqKQk+dEzV/8=
Subject key identifier: 32:5B:26:C1:8E:D3:DF:96:B6:B6:A1:56:80:CB:29:75:52:95:35:74
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0DAF
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MlsmwY7T35a2tqFWgMspdVKVNXQ.roa
Signing time: Fri 01 Sep 2023 09:24:51 +0000
ROA not before: Fri 01 Sep 2023 09:24:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 192.72.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3503 (0xdaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 1 09:24:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=325B26C18ED3DF96B6B6A15680CB297552953574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:65:e1:42:b0:c7:01:49:99:22:14:ec:48:
23:72:c4:b3:d0:84:e4:26:0f:80:b5:10:c3:9c:e1:
67:7a:45:2c:9e:e7:5b:fd:73:b3:31:16:f5:fc:44:
9a:9f:dc:94:d3:8e:4c:08:5f:ed:6a:e5:32:25:a1:
06:b2:8c:32:ae:8a:02:98:ea:08:85:5c:75:3d:33:
bf:4a:f4:7b:69:88:9f:a3:4b:eb:06:2c:46:40:b7:
98:40:95:e7:79:d4:39:17:ad:eb:88:65:38:77:e1:
64:dc:e9:85:f0:e7:4d:a6:78:55:e4:73:69:8f:6e:
81:c5:44:8a:2a:31:cb:54:e2:58:b6:be:9f:98:cc:
9f:4f:35:fa:c0:7e:d1:9f:52:44:b5:de:9f:a5:45:
81:f1:cf:39:08:58:37:1d:f3:ad:5c:79:94:f5:43:
64:da:9b:e4:91:78:43:fd:a2:11:ac:cc:b0:c0:d2:
d5:65:cc:f3:e0:23:65:57:15:31:4b:91:c5:50:f6:
f3:f6:79:78:4f:15:b0:6b:d3:d1:69:b6:53:c5:5f:
d4:d0:c6:d9:bd:f2:49:2b:e8:a8:fb:83:90:74:6a:
96:df:3a:6b:96:49:40:8d:53:28:27:0d:17:6e:cd:
75:ba:09:a7:78:5c:75:ff:dd:cc:c7:67:d4:d3:4d:
cc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5B:26:C1:8E:D3:DF:96:B6:B6:A1:56:80:CB:29:75:52:95:35:74
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MlsmwY7T35a2tqFWgMspdVKVNXQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.8.0/21
Signature Algorithm: sha256WithRSAEncryption
55:cf:98:d8:5e:20:19:a8:68:79:c6:52:7c:9d:65:09:6a:07:
09:4d:10:c7:a0:cc:04:f4:73:18:6d:96:5e:ee:bd:ee:a5:42:
70:ad:8b:8a:a0:98:7e:d8:e7:4e:cb:31:25:7b:35:75:a4:34:
05:ca:3c:3d:fa:00:f1:64:a4:61:09:29:1f:dc:ee:e1:0b:7b:
af:87:03:22:6d:66:12:eb:c5:dc:36:72:7a:7a:c9:a6:e3:f8:
2b:2f:70:a5:ef:92:cf:4e:99:05:4f:69:06:1a:75:ea:f7:4a:
cf:f8:1b:27:80:39:21:d9:5e:f8:9f:50:73:b3:da:fb:be:ee:
ea:67:cd:5e:f2:d2:db:fd:a0:84:65:1a:27:c5:96:62:51:d3:
d6:a3:88:16:72:45:c4:60:31:c5:47:81:20:b4:2e:84:67:d0:
2d:4c:94:7a:7c:10:1d:ce:0e:b6:96:57:6e:70:ae:c5:4f:46:
8a:b1:ca:e2:20:7b:16:61:db:f7:a8:ba:53:7d:ba:64:60:df:
7c:82:f3:97:e7:1f:15:9c:e2:c9:b5:99:eb:58:06:1d:ab:78:
44:32:84:06:1e:ae:e1:de:e5:d1:82:d8:59:02:7b:12:b7:60:
62:f7:4b:7d:d5:14:24:d8:8a:44:15:b6:63:7d:69:e4:3c:9f:
ec:8e:35:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:33 2025 by rpki-client