Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/SwzJ9jBZTfcGLvCuWCw6T1PqwaI.roa
File: SwzJ9jBZTfcGLvCuWCw6T1PqwaI.roa (raw, json)
Hash identifier: /lcWFc0/ghcFSUTf2wBg+Ayr5EIgH5ChD/MRvqDhP24=
Subject key identifier: 4B:0C:C9:F6:30:59:4D:F7:06:2E:F0:AE:58:2C:3A:4F:53:EA:C1:A2
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0ED6
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SwzJ9jBZTfcGLvCuWCw6T1PqwaI.roa
Signing time: Wed 29 Sep 2021 02:44:03 +0000
ROA not before: Wed 29 Sep 2021 02:44:03 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18049
IP address blocks: 112.105.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3798 (0xed6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:44:03 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4B0CC9F630594DF7062EF0AE582C3A4F53EAC1A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:f4:b3:23:a7:0e:45:6c:e6:7d:3b:9e:7f:
8c:c2:f8:cd:64:b4:60:e4:08:81:d5:bb:eb:de:ef:
7a:26:fb:17:d1:a9:24:1e:8b:e5:33:40:26:8d:78:
ce:6f:6e:f7:41:77:65:d2:08:b0:23:19:f8:11:14:
c0:06:dd:b0:78:f4:05:76:ba:7f:45:d9:cc:82:cf:
02:6f:da:70:56:40:cf:d4:5f:32:51:f7:af:64:8b:
fb:58:4b:6e:49:20:17:e5:fe:d5:ed:37:30:03:da:
8f:1b:bf:29:3d:02:5d:61:b2:49:bb:e9:0f:fa:1d:
06:35:7b:a2:dc:94:21:d2:9f:a8:f4:fd:d4:12:03:
63:f9:d6:34:aa:52:04:c9:77:32:58:e6:ec:78:ef:
56:59:49:74:85:57:e2:8c:da:ac:c8:e9:43:7f:19:
dd:8f:1f:0d:ce:f2:19:c0:b0:cb:8d:dd:4f:15:08:
f7:6a:56:71:41:61:b7:84:66:dd:29:e1:ef:ca:00:
95:ba:af:f9:de:1a:38:5d:1e:59:94:22:54:e7:a2:
b8:87:d4:e4:18:08:95:a6:37:5a:17:a3:f2:21:e1:
d8:be:60:2d:31:b7:88:b6:73:6f:9b:f2:2a:ba:7b:
64:93:28:61:b3:00:d4:a8:96:d5:a8:b0:08:3a:ee:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0C:C9:F6:30:59:4D:F7:06:2E:F0:AE:58:2C:3A:4F:53:EA:C1:A2
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SwzJ9jBZTfcGLvCuWCw6T1PqwaI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.0.0/18
Signature Algorithm: sha256WithRSAEncryption
7f:3d:ad:39:5d:06:be:a2:3f:50:04:6b:74:f4:7a:70:c4:e8:
63:aa:7d:71:7f:81:38:fa:5c:0d:e6:75:c1:bb:29:85:12:63:
73:b4:e3:73:d3:a7:c6:40:87:66:2b:1a:4c:91:93:d8:3d:4a:
cd:76:4d:54:ea:ba:0d:bc:28:d7:a6:f8:db:91:07:97:1c:e2:
27:f1:70:04:b3:5d:b9:3c:d3:e6:de:ab:4d:a4:a2:94:8d:86:
aa:c1:3a:25:54:42:68:b4:e7:dd:11:18:44:e0:58:aa:3a:24:
cd:78:58:2c:3f:8a:05:23:fe:46:1f:4c:6d:6e:ae:5e:ea:0b:
c0:44:e0:69:18:e8:7b:df:dd:17:68:56:8f:d6:8f:8b:c6:b8:
ec:80:69:6c:f5:9f:ab:40:1e:fc:14:48:db:4f:10:e9:f5:2b:
9c:17:f0:46:c0:d2:6a:24:c3:72:61:c4:74:d6:12:10:79:07:
7a:a5:c8:c0:6b:46:e9:d3:40:46:27:db:15:67:b5:fa:fc:12:
92:0d:98:8e:36:8c:7c:9c:66:6a:9e:9f:c4:cc:6a:72:95:ed:
d3:11:6c:a5:e0:0c:c2:17:3d:f0:7f:1c:7f:7f:8d:5d:47:28:
32:16:4e:c9:e3:20:01:a9:f4:b9:4e:a1:df:cc:d2:7d:7b:6c:
8d:f1:9d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:32:22 2025 by rpki-client