Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Rm3mFGiMVgoB19yNay94haGJfxA.roa
File: Rm3mFGiMVgoB19yNay94haGJfxA.roa (raw, json)
Hash identifier: 1Sn7iFipXrt8PeCjOxxEG6OFLeIbIs42htmJMtx4SM4=
Subject key identifier: 46:6D:E6:14:68:8C:56:0A:01:D7:DC:8D:6B:2F:78:85:A1:89:7F:10
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10A7
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Rm3mFGiMVgoB19yNay94haGJfxA.roa
Signing time: Wed 01 Feb 2023 10:28:50 +0000
ROA not before: Wed 01 Feb 2023 10:28:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 106.104.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4263 (0x10a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:50 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=466DE614688C560A01D7DC8D6B2F7885A1897F10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:30:42:0d:2d:ca:c7:27:d3:59:7b:89:e2:
d9:8b:53:6d:98:7b:ec:3e:cf:99:a8:76:69:9b:43:
2d:76:25:d1:5b:8e:23:5d:95:bf:19:0d:43:d6:10:
6e:4d:cf:ed:6f:8b:cd:93:d2:b9:df:9a:4b:9d:8b:
7c:4f:1a:e0:99:a5:fa:0f:d0:14:9c:d5:80:3d:bb:
eb:04:ca:e6:d1:47:44:b3:6e:5c:c8:25:db:49:f6:
4a:d5:71:7e:2e:be:5b:7a:5e:99:d2:17:a3:a9:a1:
b8:57:d7:c1:c7:24:e5:e1:3e:8a:b3:c2:0d:88:10:
1a:02:74:69:46:d4:a9:75:38:59:1a:70:19:04:78:
85:20:f3:69:cc:06:8c:ac:f9:e9:12:0b:76:1e:a6:
f2:b2:01:a3:bc:c1:aa:ba:ea:dc:22:8a:3e:68:d7:
22:34:f9:e0:46:fd:04:2a:39:a6:90:9f:34:42:7d:
ce:a2:87:b2:9f:4f:58:33:59:fe:2c:07:cd:e4:d7:
d3:bb:2b:4d:15:f6:7f:8b:d3:05:60:32:32:03:4e:
7f:25:b0:58:a3:44:3a:d0:2a:56:8d:53:82:11:e0:
5b:cc:29:08:dc:88:c4:59:b8:06:2b:55:1a:56:f3:
e3:2a:e7:88:ff:76:e7:22:16:13:e1:50:43:e8:da:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6D:E6:14:68:8C:56:0A:01:D7:DC:8D:6B:2F:78:85:A1:89:7F:10
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Rm3mFGiMVgoB19yNay94haGJfxA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.104.0.0/14
Signature Algorithm: sha256WithRSAEncryption
a4:71:30:82:06:cb:77:67:73:90:ac:35:6f:4d:fb:80:bc:5c:
bb:8c:fa:47:a5:87:11:aa:b9:83:d0:e0:62:1f:e3:eb:79:65:
bc:a6:f3:1e:d8:ce:ec:dc:da:b6:4d:f1:86:b1:7d:3f:b7:6f:
5e:eb:87:ef:29:ca:31:e1:40:86:52:46:61:f2:3d:7d:78:f0:
ef:df:f2:fe:78:25:ee:bc:bf:d5:4a:11:3f:32:62:9e:13:60:
8f:2a:01:d0:64:9b:6c:f7:bd:b0:c3:2e:1a:ca:d0:34:3c:ae:
54:77:bb:84:63:1e:ba:84:55:c1:f7:88:fd:37:ee:73:d3:0b:
51:6d:ae:5a:5c:93:b0:3a:f4:3e:80:0a:e5:79:23:bf:a9:b5:
25:9e:35:24:72:27:24:8a:27:69:f8:b6:ef:09:84:d6:01:9c:
1f:da:e5:19:67:71:fa:eb:3b:5e:5d:7a:2e:2d:bb:a6:1e:b5:
b4:bd:0d:b5:1b:46:7f:68:3c:87:a5:79:4a:76:bf:90:ae:25:
fc:d6:7b:7a:83:8a:29:78:0e:16:89:fb:dc:da:9b:11:1c:9a:
3a:5b:d6:f8:1f:75:db:ab:9e:ad:a8:8b:a7:d9:20:a1:e3:da:
3a:aa:e3:9d:d8:e0:c0:88:c2:08:eb:39:a7:46:e9:90:9b:35:
36:7d:cc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:27:50 2025 by rpki-client