Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ST7Uir_mSNRsRDxRX4S9UNJnswI.roa
File: ST7Uir_mSNRsRDxRX4S9UNJnswI.roa (raw, json)
Hash identifier: +adm9a+0YS1ZR95CJwDGbDfaZSlkvgeDZkSqgxjYVu4=
Subject key identifier: 49:3E:D4:8A:BF:E6:48:D4:6C:44:3C:51:5F:84:BD:50:D2:67:B3:02
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ST7Uir_mSNRsRDxRX4S9UNJnswI.roa
Signing time: Thu 15 Sep 2022 02:42:47 +0000
ROA not before: Thu 15 Sep 2022 02:42:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 220.228.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=493ED48ABFE648D46C443C515F84BD50D267B302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:61:f7:ec:73:6d:e8:99:b4:55:4d:cc:cb:fa:
99:d8:b0:8b:f8:7e:14:72:14:5a:8d:7d:ce:c0:08:
c4:f8:b5:09:dd:32:be:a2:18:3a:bb:f1:68:19:b1:
91:86:de:d3:89:6f:a0:93:b6:5a:07:88:45:d7:b2:
98:f8:0f:63:21:c6:99:b5:02:40:e6:1a:a4:a8:01:
1f:71:52:c7:cc:ef:81:2d:44:25:b9:83:f7:90:3b:
26:ed:6c:f6:49:bc:55:4c:fb:d0:1a:2e:79:77:c9:
eb:be:a7:d4:0c:7b:20:8b:73:97:4a:55:48:ca:93:
8e:c4:9c:fb:6d:33:4a:89:1f:7d:11:45:22:ff:2c:
fd:51:d0:21:10:7b:f9:f2:5f:9e:1e:88:70:b1:75:
61:30:05:b0:5a:c6:ab:27:12:08:f3:02:d5:19:8d:
7f:ad:a5:fc:44:bc:9e:df:ec:71:ac:a6:44:2d:83:
59:63:7e:eb:9b:21:5f:73:ca:e4:a4:b1:4f:4f:93:
e0:c3:83:d1:39:01:39:62:c9:a9:7c:8c:15:54:b7:
29:8e:cd:e0:44:a3:c1:68:e5:b0:8d:d7:b9:c9:01:
df:91:b7:bd:40:82:9f:da:89:87:14:a2:a5:c9:05:
4a:9e:ec:72:b7:4a:66:87:5e:3d:ab:0f:ec:f8:5e:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3E:D4:8A:BF:E6:48:D4:6C:44:3C:51:5F:84:BD:50:D2:67:B3:02
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ST7Uir_mSNRsRDxRX4S9UNJnswI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.228.0.0/15
Signature Algorithm: sha256WithRSAEncryption
01:1e:ff:dd:e1:4c:4f:38:a4:8c:bf:a2:fd:e8:3f:c8:af:b0:
4b:67:4b:7c:1b:b9:c0:34:27:07:12:66:93:ad:33:13:0c:96:
f6:13:ce:a8:81:20:78:93:04:85:86:3b:63:9f:b3:b5:bc:bc:
68:8c:d7:c1:97:bb:1b:08:cc:1c:17:ff:83:43:ec:ea:fa:94:
97:34:b9:8f:f4:61:a2:1b:73:dd:72:eb:2d:b9:43:c1:e2:6b:
8e:2d:37:db:13:49:30:5c:7b:c1:e4:b9:e3:84:d6:8f:e5:b0:
6a:50:d4:81:08:82:92:a0:7f:67:98:8a:92:5d:64:25:02:dc:
37:5b:bb:79:59:08:20:38:d8:26:9b:6a:6d:6e:2f:df:4a:d2:
32:6a:5f:7f:cc:97:38:63:66:fc:a2:2a:7c:ee:de:1b:da:43:
ed:82:cd:9b:aa:bb:48:be:29:b1:93:1c:b1:78:54:4c:95:aa:
3a:f5:ae:c1:9c:0e:ad:aa:9b:4b:3d:87:21:59:5b:93:13:c1:
24:6a:b1:2a:7e:a2:6c:07:3f:bf:a7:af:60:97:73:c5:ca:80:
68:ec:98:8f:6b:e0:97:8d:bd:b8:f6:2f:fa:3c:7f:56:11:5f:
ed:5e:f8:78:e0:e3:fc:26:57:ba:f8:e9:a8:c1:45:c1:6e:d8:
d0:e9:d1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:30:14 2025 by rpki-client