Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/RwnfXmcAaLiWMNW2_t4QXf3Ov3s.roa
File: RwnfXmcAaLiWMNW2_t4QXf3Ov3s.roa (raw, json)
Hash identifier: vBmvoguSSxv7a9feaLGYZ5NOVzLt1hH7UXqm6Yhk4Jg=
Subject key identifier: 47:09:DF:5E:67:00:68:B8:96:30:D5:B6:FE:DE:10:5D:FD:CE:BF:7B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RwnfXmcAaLiWMNW2_t4QXf3Ov3s.roa
Signing time: Thu 15 Sep 2022 02:42:44 +0000
ROA not before: Thu 15 Sep 2022 02:42:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131584
IP address blocks: 106.105.176.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4709DF5E670068B89630D5B6FEDE105DFDCEBF7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3b:aa:8d:ac:4a:ad:36:aa:34:b6:0f:2a:44:
dd:59:a9:19:21:6c:06:51:94:d8:23:8b:59:30:bc:
3d:3f:3e:35:bc:2a:a3:50:36:1a:d2:fa:54:0f:7f:
af:83:61:92:59:84:6e:7f:b9:43:79:f2:00:5e:19:
59:bd:c9:1d:f6:18:64:68:fb:46:70:04:5c:0e:5c:
d7:be:4d:42:1d:96:29:46:84:04:30:e1:79:f8:37:
23:f9:f6:34:f6:6e:16:32:5e:d2:ec:29:4e:5c:70:
f2:60:c3:ed:b9:49:96:1c:ee:59:25:48:21:3e:1b:
23:61:4d:54:55:7c:14:36:f6:d5:b2:00:fd:18:8a:
e7:da:8a:e7:54:2b:f5:5f:57:ea:80:ff:73:14:e0:
36:05:89:ae:c9:0c:d6:47:77:f5:64:6e:92:4f:38:
1f:89:f8:8a:8b:c8:b6:1d:31:27:30:8a:2f:4b:ce:
42:ab:ca:21:f7:8e:6e:6c:04:e5:8f:e9:d7:45:2c:
47:f5:81:a6:80:b1:b3:db:c6:a0:32:b6:90:96:e2:
1d:0c:5a:53:17:f2:00:b9:7e:ec:83:fd:02:0c:e5:
48:a9:a0:dd:82:a1:ce:62:dd:54:84:e8:d8:f0:b7:
13:a3:79:4a:85:c2:c3:04:52:6a:7f:69:47:60:21:
f7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:09:DF:5E:67:00:68:B8:96:30:D5:B6:FE:DE:10:5D:FD:CE:BF:7B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RwnfXmcAaLiWMNW2_t4QXf3Ov3s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.176.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:1e:5f:31:b1:13:57:59:21:23:07:af:63:23:57:cc:90:2a:
c7:19:10:fd:9e:8a:8f:d5:9a:9e:54:0a:7b:bb:7f:0d:a3:3e:
00:82:76:40:91:c8:7c:12:80:92:af:31:33:e7:59:10:02:3e:
79:ee:79:dc:d2:9e:39:61:08:08:9f:7a:62:28:75:78:ed:5b:
54:ca:e3:5c:87:c8:0f:69:58:77:db:d3:7c:39:c6:fc:37:65:
3a:0d:4c:13:ad:b4:c9:b5:e1:4f:0e:bb:67:50:13:ea:fe:50:
23:6b:74:14:e1:70:21:72:4b:9b:54:f9:ce:8b:94:a1:03:18:
34:16:8a:4d:2b:0b:c4:f0:9f:b9:fa:b2:7e:b3:e8:dc:2b:63:
e1:7c:f5:ed:59:ee:1f:36:64:e8:6f:4a:9e:ca:48:af:82:e2:
e1:0d:49:e2:ce:9f:1c:b8:3d:29:02:f6:5d:bf:48:19:ce:6e:
28:58:e6:44:ca:d7:64:fa:23:4d:cc:5a:94:5d:57:50:a4:e8:
9b:1f:ba:26:ac:14:27:26:bb:9c:7e:b9:70:60:69:a4:6b:69:
dd:24:1c:5d:99:a9:49:0f:73:69:e8:7b:bc:e6:07:bd:5b:36:
ae:4b:9b:2e:33:cb:c9:23:32:b7:7e:7d:4b:5d:f8:e0:d1:85:
4e:2e:af:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:21:27 2025 by rpki-client