Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/SL5p6hgUzcQctn1jfL7Ltv6zSdE.roa
File: SL5p6hgUzcQctn1jfL7Ltv6zSdE.roa (raw, json)
Hash identifier: 5kLb2oduNSTW29/gQEJY1szS0eaQkh0WQ1Qyh08PShw=
Subject key identifier: 48:BE:69:EA:18:14:CD:C4:1C:B6:7D:63:7C:BE:CB:B6:FE:B3:49:D1
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1067
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SL5p6hgUzcQctn1jfL7Ltv6zSdE.roa
Signing time: Wed 01 Feb 2023 10:28:31 +0000
ROA not before: Wed 01 Feb 2023 10:28:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 112.105.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4199 (0x1067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:31 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=48BE69EA1814CDC41CB67D637CBECBB6FEB349D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5b:cc:e0:be:51:d3:42:bc:f0:ee:8e:73:70:
49:7f:db:c6:8d:0f:a1:e0:9d:e0:ef:ad:aa:d3:c0:
bd:a9:47:fe:71:45:42:01:20:57:2b:ed:49:bd:ef:
05:56:a5:ad:8a:b3:d1:97:65:1f:13:1b:01:27:87:
9d:d1:df:26:0e:09:d9:42:a0:c2:11:be:dd:d5:a1:
df:e6:c9:33:47:06:fc:c7:74:fa:1f:1c:87:73:0b:
21:79:96:f3:bc:16:06:53:81:c9:93:6f:44:72:8d:
50:8b:1d:d1:0a:01:78:7a:d1:62:79:df:0f:d4:f0:
f5:3a:e6:14:07:a5:b8:3b:80:b4:e4:d0:50:2e:e5:
68:53:f5:f3:de:fa:51:14:7a:13:19:43:d2:e7:fb:
7b:39:41:f9:76:cc:c0:1d:77:89:56:67:03:de:13:
5e:7f:10:b2:2c:d1:c6:25:55:56:2d:1d:0b:a1:f9:
dc:a8:77:39:7d:7f:9c:53:29:17:0e:0b:29:4f:bb:
eb:59:89:8e:1a:15:95:1e:aa:33:ca:49:f6:d1:e8:
bf:68:a1:2d:5f:10:c7:bc:2d:89:12:71:0c:16:51:
a9:b3:4c:39:fe:94:7a:f6:48:42:10:a8:e3:ec:84:
7a:21:c2:a2:18:38:fc:96:42:1e:f4:f2:86:ef:e1:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BE:69:EA:18:14:CD:C4:1C:B6:7D:63:7C:BE:CB:B6:FE:B3:49:D1
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SL5p6hgUzcQctn1jfL7Ltv6zSdE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.56.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:aa:55:c3:cb:e9:48:fa:2f:93:d0:b6:07:13:a9:87:ca:0d:
e5:d4:ca:fa:ba:b8:03:76:36:83:f2:8c:0b:7d:1b:54:e3:eb:
a0:d1:40:88:9f:3d:3d:89:ee:23:32:1d:29:a3:60:f2:54:cb:
22:49:3e:ee:01:10:0f:97:c7:3d:49:b2:05:38:d6:77:53:f8:
e1:4b:dd:54:ce:07:a5:fd:f4:67:2c:ef:7d:73:b7:1f:de:c7:
a0:88:b1:c0:92:fb:85:f3:8b:0b:74:dc:0a:0f:e9:96:c0:fd:
3c:81:40:6f:16:b7:71:3c:98:f4:87:a0:66:1f:51:c1:a1:20:
c1:1f:4a:e9:61:1b:f1:6d:17:c7:9a:0a:37:ca:2d:e0:a0:4c:
15:52:74:d3:26:28:18:c1:61:e8:fb:db:ff:14:c0:2d:d2:50:
76:63:f1:46:43:a8:5e:24:f3:75:3d:02:3b:86:b7:3d:04:f7:
31:f7:83:6e:ef:ba:3d:ae:89:3d:b5:bc:ca:29:bb:f0:9b:01:
ec:a1:e6:10:c2:9c:e3:24:db:c7:c4:3f:f8:dc:13:a2:8e:54:
e9:fb:88:b4:59:cf:30:7b:36:b1:34:86:cf:f1:44:c6:70:ec:
91:5c:f0:0d:03:37:18:e9:fa:f9:92:88:db:35:11:67:26:ea:
8c:2d:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:27:57 2025 by rpki-client