Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/R5fZggEoAU3W1_D2UmIcwWa3Jd4.roa
File: R5fZggEoAU3W1_D2UmIcwWa3Jd4.roa (raw, json)
Hash identifier: rA/u6Cu8hF6wn+xNNqH8MCaUjhHFViK7+5nglOcrf8Y=
Subject key identifier: 47:97:D9:82:01:28:01:4D:D6:D7:F0:F6:52:62:1C:C1:66:B7:25:DE
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13D6
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/R5fZggEoAU3W1_D2UmIcwWa3Jd4.roa
Signing time: Fri 01 Sep 2023 09:25:30 +0000
ROA not before: Fri 01 Sep 2023 09:25:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131602
IP address blocks: 106.105.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5078 (0x13d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4797D9820128014DD6D7F0F652621CC166B725DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:42:da:83:6c:fb:fc:69:db:f9:fd:24:10:
6b:b4:b2:93:70:af:1d:85:df:5f:d4:b4:d4:a8:03:
2c:8b:74:4f:45:64:b5:56:74:7a:16:5b:72:85:9d:
b3:a0:ba:d0:6c:b0:b8:b4:08:44:64:f4:78:3d:67:
d7:6e:b6:c1:a0:bd:1f:51:49:f3:7d:f1:15:11:97:
79:89:91:02:05:29:1e:75:7d:35:f2:65:88:c1:f0:
86:a0:2d:15:9b:51:ae:8a:9c:8c:c7:a5:09:36:bb:
b5:16:c0:5f:70:d6:80:4b:10:4d:dd:8e:b5:63:3b:
9f:40:3f:d5:46:27:b3:71:cd:48:e1:20:38:da:33:
b2:39:c6:76:f7:d1:5f:6e:b5:25:02:75:93:ff:2d:
26:a6:4b:cd:07:57:88:52:a5:50:90:86:51:70:95:
01:13:13:d2:2b:c0:4a:f7:e9:e8:ca:8b:23:55:26:
c2:de:e6:ea:05:00:23:28:2a:07:4e:06:26:4d:4b:
07:8d:02:3d:f8:7c:46:4b:9b:38:0e:74:9c:9c:d2:
e5:f2:12:46:81:28:12:2d:4c:5f:0b:b7:d4:41:af:
37:79:22:21:6c:76:d9:44:a0:1c:fb:df:ea:aa:82:
b0:2e:27:6f:e4:a0:6c:30:6f:ce:50:cb:63:4c:6a:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:97:D9:82:01:28:01:4D:D6:D7:F0:F6:52:62:1C:C1:66:B7:25:DE
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/R5fZggEoAU3W1_D2UmIcwWa3Jd4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:9d:57:8d:2b:2e:e4:37:64:81:c1:e2:06:6c:21:57:5d:97:
70:d0:4b:8e:f0:3a:cd:1e:43:16:44:92:74:3b:f8:c9:ac:28:
50:07:86:ef:94:97:4e:9f:31:15:59:69:d7:7d:4a:a4:95:37:
40:be:73:66:1f:41:60:67:dc:8d:10:cb:b9:ec:a1:b3:18:cd:
52:ff:af:ad:a6:70:8b:7a:f2:93:42:e7:a4:51:ed:ad:18:df:
6b:e5:7e:2a:27:c4:f6:07:b6:d3:2e:a7:4a:4b:d4:3c:1e:8d:
63:3f:69:ae:01:fe:6c:00:fa:00:4c:e7:0a:fe:fe:ea:49:b7:
5e:5c:80:27:56:07:ea:8b:f8:b9:ab:29:18:fe:34:f3:6b:68:
73:39:61:3e:09:fc:59:be:b4:ef:8e:e1:74:47:a4:80:63:00:
1e:e3:04:9f:3f:c4:7d:93:7f:dc:01:9f:bc:66:f6:8e:de:3d:
e1:b3:d7:c3:44:ee:00:86:32:71:85:82:24:a5:7e:ce:f6:7f:
b2:a4:19:76:55:48:75:9c:92:40:4a:ce:db:85:b4:b5:6f:be:
a7:f6:2d:95:e3:40:b4:51:8b:5c:fb:18:ef:41:48:5f:ea:8f:
4b:0f:45:50:89:e2:75:51:a4:67:94:31:f3:7a:dd:87:ee:f8:
4a:25:86:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:30:13 2025 by rpki-client