Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/NwRgCrWdGnlF_eHUby7ONx70NxE.roa
File: NwRgCrWdGnlF_eHUby7ONx70NxE.roa (raw, json)
Hash identifier: Jteyv5YgnIAr5unm0Q3PL8zDytYgeJxfDKcJI57kp60=
Subject key identifier: 37:04:60:0A:B5:9D:1A:79:45:FD:E1:D4:6F:2E:CE:37:1E:F4:37:11
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0DBF
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NwRgCrWdGnlF_eHUby7ONx70NxE.roa
Signing time: Fri 01 Sep 2023 09:25:29 +0000
ROA not before: Fri 01 Sep 2023 09:25:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 192.72.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3519 (0xdbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 1 09:25:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3704600AB59D1A7945FDE1D46F2ECE371EF43711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:f7:05:23:1c:8d:f1:6b:ae:2e:37:7c:f8:
f7:48:ae:f0:00:06:a1:62:cb:c3:3a:4d:01:b6:f9:
4e:c0:77:b6:0a:0e:5a:5c:93:bb:10:7f:8f:f7:17:
d0:17:40:83:66:d1:13:4d:da:1a:37:63:9f:ce:d3:
d2:ba:66:e1:d5:b9:e9:b8:38:15:fa:81:21:f8:b9:
a7:f6:5c:08:5a:41:22:45:d1:9b:40:aa:3e:c6:01:
18:d8:3d:b2:76:5b:dd:53:79:9c:b7:9d:fb:74:1f:
f1:55:ed:32:0c:3a:03:00:d2:27:aa:65:14:31:a6:
86:41:77:94:72:18:ae:47:da:4a:1f:d3:cb:4e:68:
c2:eb:4d:6c:4c:26:46:ec:36:53:b3:6d:0e:17:b9:
7c:96:af:34:ee:74:ec:3e:66:5d:52:e9:8c:47:36:
47:7d:76:ae:35:8e:25:9f:f1:fd:17:9d:9a:f7:c2:
ea:b4:f5:4f:28:b9:9d:b3:48:7e:cc:af:0d:d3:87:
13:8e:38:5e:29:d2:54:7f:95:83:6b:d1:65:b5:ac:
8b:55:35:b2:ae:49:50:6c:55:fb:11:47:aa:d6:5d:
85:8a:af:2d:66:f1:46:10:e9:c3:06:a5:87:c9:99:
a9:de:4a:1d:82:bb:ca:05:80:0a:24:ef:9f:53:45:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:04:60:0A:B5:9D:1A:79:45:FD:E1:D4:6F:2E:CE:37:1E:F4:37:11
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NwRgCrWdGnlF_eHUby7ONx70NxE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.4.0/22
Signature Algorithm: sha256WithRSAEncryption
49:33:9a:05:92:ca:d8:68:1f:18:71:f3:49:8f:09:4b:1b:20:
7c:92:91:6d:d0:45:df:a0:1a:89:e3:77:ce:b6:92:76:b2:c5:
a0:02:72:cf:a0:e8:1f:3c:6e:1f:77:48:33:35:e8:41:53:53:
8b:bc:0f:52:e8:18:ae:ba:d4:da:9c:d4:ea:53:05:26:23:dc:
70:8e:82:8b:87:41:02:f7:fb:c6:c8:fc:c1:c3:00:e4:6f:a2:
db:56:72:54:5e:eb:84:79:89:21:11:f5:91:8b:a1:45:49:8d:
b2:9f:1c:1a:e9:cb:d6:3a:eb:16:73:dc:89:f0:68:87:e1:ed:
fd:27:7a:3e:8c:60:d8:94:47:5e:9d:21:b7:f6:d3:c1:f5:1b:
37:07:6a:76:71:14:04:84:5a:f9:28:ac:39:31:bd:2d:ad:be:
b9:f0:88:1c:ed:4a:19:e9:02:da:60:1d:79:44:d1:ff:67:9c:
79:8f:61:ca:93:b7:da:5b:7c:5a:69:a1:08:96:3d:41:03:3e:
ba:a3:28:72:6b:c7:d0:40:fe:80:5b:0b:15:2c:49:e8:12:ec:
fc:33:03:54:e5:39:40:16:b4:28:68:d9:5b:eb:0f:f3:5d:47:
45:fc:a6:d4:06:57:f8:40:5b:88:1f:ff:49:e8:13:98:41:df:
96:d1:8b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:27:56 2025 by rpki-client