Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/T1N-o2OGzULnyaQgo-t2TIy4BPA.roa
File: T1N-o2OGzULnyaQgo-t2TIy4BPA.roa (raw, json)
Hash identifier: KBmhhTfC8Jn9ewLOAVCbfoFG8gcMlOJ2lc8sKzN4IHE=
Subject key identifier: 4F:53:7E:A3:63:86:CD:42:E7:C9:A4:20:A3:EB:76:4C:8C:B8:04:F0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E97
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/T1N-o2OGzULnyaQgo-t2TIy4BPA.roa
Signing time: Wed 29 Sep 2021 02:43:46 +0000
ROA not before: Wed 29 Sep 2021 02:43:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 113.196.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3735 (0xe97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:46 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4F537EA36386CD42E7C9A420A3EB764C8CB804F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:18:9b:c7:96:0e:07:74:2a:c8:c0:49:ca:
1f:55:93:34:4d:8f:83:58:8f:bd:82:ec:c6:ac:9d:
8d:8b:87:cd:44:a5:ed:0a:aa:c7:0b:9f:65:e4:bf:
c8:34:06:ea:21:97:70:77:38:78:33:64:70:32:28:
29:9e:65:14:e1:35:38:f5:b1:cd:aa:36:d2:64:81:
d1:df:ec:f8:be:ae:ce:4b:0c:5f:5f:2b:b2:32:17:
5a:20:df:9c:85:31:7d:52:d4:76:eb:2c:ee:0b:8a:
47:a4:fc:e4:4a:20:81:f6:d1:42:13:87:e1:6f:72:
a4:1f:98:1e:10:28:91:f1:21:7a:12:2e:bb:e5:48:
80:00:74:f4:f9:7c:dd:99:b4:29:d3:12:de:23:44:
ff:67:36:31:5c:43:dd:ae:a8:6a:aa:cb:41:64:e3:
36:47:bc:c5:12:31:65:da:b2:13:3a:97:0f:d8:d9:
88:24:7d:ad:a4:98:ec:b7:a0:d2:7e:75:c7:5c:bd:
23:98:6b:f0:70:7c:6a:1a:48:ee:48:3d:ef:30:51:
49:8e:f1:2c:e6:2f:3b:81:38:1e:03:92:98:c3:90:
08:70:73:78:b5:33:fe:29:31:65:e2:75:25:5d:d0:
d6:56:63:8f:1d:af:b5:5e:0f:95:9b:c2:29:95:92:
d2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:53:7E:A3:63:86:CD:42:E7:C9:A4:20:A3:EB:76:4C:8C:B8:04:F0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/T1N-o2OGzULnyaQgo-t2TIy4BPA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.128.0/20
Signature Algorithm: sha256WithRSAEncryption
24:f5:76:8c:34:d5:2c:4f:ac:1b:a1:3d:4d:f0:7d:78:9d:39:
7a:58:e4:1f:a3:37:c8:23:de:35:12:31:a3:2d:2a:14:89:ec:
32:43:65:fa:ff:0a:4d:3d:3f:74:f6:25:ff:4e:0c:08:7b:59:
91:fe:f7:4f:3f:21:7a:fc:0a:5c:53:30:9c:5a:db:4c:c7:c5:
aa:96:4b:fc:69:0b:dc:49:4c:54:c3:76:5c:db:26:c0:4b:74:
2b:94:a5:82:43:93:87:85:48:f5:98:bb:72:55:36:d9:8c:de:
f0:66:10:af:9d:8e:a3:95:67:bb:9c:de:a6:63:a0:46:2d:d0:
db:aa:22:a6:15:c9:47:c5:8b:c9:5a:f7:37:e5:87:51:40:23:
3f:ba:79:9f:fe:4c:73:c4:3c:51:f0:6e:ed:6e:7c:ea:e3:f6:
21:4d:a8:de:8c:f2:a1:ba:7a:2b:df:d1:b1:8f:7e:c9:d2:14:
5f:1c:2a:cf:2d:2d:a0:64:b7:60:7d:96:70:9f:2a:e6:f6:a8:
54:98:93:84:d9:9f:09:47:21:25:21:db:16:a3:69:e4:96:bd:
6c:2f:84:cd:ef:4f:b1:d5:53:bb:e5:f3:ff:58:65:ca:bd:0a:
dd:86:85:e5:83:67:b7:78:8f:ce:2d:49:a2:5a:ac:d5:08:77:
26:46:ef:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:17:06 2025 by rpki-client