Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Rltcf5_RzcOSRpQ7a_kb3V-MFsw.roa
File: Rltcf5_RzcOSRpQ7a_kb3V-MFsw.roa (raw, json)
Hash identifier: zaO2tiwJQBGvp8rDVimzTrQkR63Q7BCK/RpYo3LW8kQ=
Subject key identifier: 46:5B:5C:7F:9F:D1:CD:C3:92:46:94:3B:6B:F9:1B:DD:5F:8C:16:CC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E92
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Rltcf5_RzcOSRpQ7a_kb3V-MFsw.roa
Signing time: Wed 29 Sep 2021 02:43:45 +0000
ROA not before: Wed 29 Sep 2021 02:43:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 220.229.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3730 (0xe92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=465B5C7F9FD1CDC39246943B6BF91BDD5F8C16CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8d:6d:b5:e4:ae:cd:e5:44:61:17:ec:18:14:
5d:10:5c:cf:10:f9:2a:77:bd:33:21:b7:0e:1b:4c:
67:81:32:b1:fa:86:6d:54:ac:08:20:3c:bf:98:56:
68:04:b9:51:77:0f:57:be:08:cc:9c:94:99:a2:f9:
58:11:98:90:f7:17:a6:fc:b2:09:3a:fa:9b:fa:b9:
86:b1:b2:f3:31:e8:5d:50:14:40:26:f9:2e:fc:fa:
7c:f7:31:25:ce:13:50:9b:9d:22:a9:85:48:ae:c0:
33:f5:e3:98:93:08:73:3b:c5:82:99:1c:a8:9c:d6:
59:24:c7:8e:76:9d:ba:40:e9:6d:53:06:c1:c0:2b:
16:a8:38:a9:24:c9:58:65:be:75:21:81:7c:50:36:
5c:a1:5b:e7:4f:a5:1c:37:c0:b9:09:12:d2:f7:b9:
4c:f4:94:b1:24:ef:33:32:60:5b:0e:2d:9a:2b:ba:
ce:33:45:64:84:aa:77:e8:07:43:54:06:8d:bc:13:
59:91:a1:d4:9e:48:e7:c3:cf:a6:66:17:cb:9b:a3:
ca:d1:aa:a2:36:d9:95:17:e2:e1:c8:54:e8:80:ba:
cb:e0:4c:54:e4:7a:93:f4:1d:96:cc:59:75:4d:f3:
c5:07:c8:6b:66:a6:62:58:d2:af:75:54:f2:32:bb:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5B:5C:7F:9F:D1:CD:C3:92:46:94:3B:6B:F9:1B:DD:5F:8C:16:CC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Rltcf5_RzcOSRpQ7a_kb3V-MFsw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.80.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:6c:4e:0c:10:ac:c2:be:e5:0a:7f:52:aa:f2:7e:3a:40:33:
d4:e8:e9:43:27:11:75:a7:26:b6:02:f0:2e:39:d2:3b:7a:54:
dc:e8:7f:12:cc:5b:da:f1:9d:7a:71:7d:36:fc:c6:54:49:19:
ef:0d:f1:6f:a4:07:73:32:74:aa:ca:c8:5e:b5:24:43:71:e0:
2c:1e:41:84:82:9d:17:f4:c3:5d:05:72:5a:4e:bd:80:dc:aa:
ed:1d:76:16:6f:0b:4a:5b:9b:7f:cf:18:f4:51:88:4e:a2:b7:
e8:dc:09:0a:37:11:12:44:10:82:5c:38:31:a9:15:60:5c:95:
33:41:36:af:65:70:5c:5b:33:0f:bf:bc:96:0d:7c:0b:ac:ea:
64:72:24:9b:28:8d:fa:a4:10:77:de:a4:de:46:4e:a1:0d:c9:
1b:f7:e7:b6:17:1d:77:25:7c:7d:9e:0b:db:03:0d:9e:37:0d:
ea:bf:e9:3e:6a:97:7f:d5:00:84:50:86:3d:05:dd:da:ab:69:
fb:0a:06:12:f8:42:96:3c:35:82:08:b8:97:cd:72:68:ee:bf:
a4:bd:5b:08:e7:6d:81:39:38:e7:c2:92:3a:d0:15:86:a2:0b:
85:3e:8d:48:e2:2d:21:71:2d:f1:7d:e1:eb:aa:de:5f:78:67:
55:21:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:14:31 2025 by rpki-client