Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/TCNWGoHTEH_nJZJRq18Of5KDZeY.roa
File: TCNWGoHTEH_nJZJRq18Of5KDZeY.roa (raw, json)
Hash identifier: l1boPzoayVSt6onOEiCh27pvxnJO/7WljLXCbmq4uyo=
Subject key identifier: 4C:23:56:1A:81:D3:10:7F:E7:25:92:51:AB:5F:0E:7F:92:83:65:E6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TCNWGoHTEH_nJZJRq18Of5KDZeY.roa
Signing time: Thu 15 Sep 2022 02:43:26 +0000
ROA not before: Thu 15 Sep 2022 02:43:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 220.229.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4C23561A81D3107FE7259251AB5F0E7F928365E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:9a:aa:6b:e6:b1:3f:f8:be:62:2b:cc:9e:
6a:15:f5:a3:f4:58:70:a7:fd:3c:05:2f:12:7a:61:
98:26:8d:23:15:c8:61:f9:ca:b1:52:d5:7c:9c:94:
ba:af:7d:b9:4d:e3:2f:79:e7:e3:3c:d7:61:22:81:
ce:83:1e:56:93:1c:37:ed:de:30:7e:70:00:3b:b5:
51:57:55:1d:d8:93:49:51:14:36:44:24:e2:78:18:
fa:ac:ac:aa:a8:02:d9:37:3f:5f:e2:2f:24:1a:01:
8c:ba:1d:bf:b2:93:e7:53:73:20:ec:90:13:20:72:
ff:db:0b:d3:f2:7b:10:de:1a:af:12:94:e6:ad:9b:
02:dc:48:b4:41:c8:b9:d1:0c:07:04:19:76:af:93:
1e:96:25:8b:7c:d4:cf:e7:7b:64:63:fc:dc:58:bf:
64:22:68:1b:8d:16:d9:52:f1:20:1f:ae:08:8a:fd:
eb:6a:42:de:f6:44:79:f7:50:b5:75:a9:24:c0:28:
f3:c4:ad:c2:43:5f:20:54:be:f6:2e:7d:07:f1:1b:
94:62:a5:e6:b6:ab:1b:ae:b1:52:a0:46:b1:97:94:
67:be:22:5e:90:ef:ea:13:a7:90:99:15:73:35:6e:
12:6b:5a:5f:38:48:6b:6c:68:98:9f:ef:81:6a:cd:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:23:56:1A:81:D3:10:7F:E7:25:92:51:AB:5F:0E:7F:92:83:65:E6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TCNWGoHTEH_nJZJRq18Of5KDZeY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.80.0/20
Signature Algorithm: sha256WithRSAEncryption
50:68:a6:da:d5:96:30:b4:db:ec:b9:19:72:82:91:3a:9b:fe:
cf:97:5f:a1:cb:97:80:82:d1:7f:59:90:47:10:3e:69:41:09:
45:f6:14:ce:7c:35:8a:71:ca:6c:e2:28:ae:b9:66:4e:3b:fd:
b8:e8:43:4c:88:52:2c:02:7d:7e:a7:d3:43:30:9a:0a:ac:83:
0a:a5:33:5d:c7:20:be:12:a6:b6:28:8b:1a:6a:69:89:d8:5a:
63:1c:bd:55:c9:23:47:90:e1:f1:79:57:1b:d1:d3:46:95:30:
d6:d4:aa:f0:47:70:e3:f8:32:e1:de:97:a1:89:61:a8:01:2d:
f1:b4:09:9b:b0:c8:34:64:c0:be:4a:43:81:24:1c:a9:5c:ea:
74:07:d4:62:05:44:b8:8f:fb:32:bc:c8:9f:fe:9c:e5:dd:9a:
b5:98:34:39:98:99:31:91:ea:e5:62:78:d8:0e:8f:c0:60:bf:
b5:1c:05:8b:31:75:64:9c:d9:ad:e0:df:06:49:b2:47:a1:0f:
5a:2b:3c:c9:10:b7:25:3d:e5:f0:0b:45:55:ca:89:3d:fc:84:
58:48:86:f8:58:76:4c:4b:f7:c3:ba:f9:51:3a:21:21:12:d6:
fd:5a:95:e3:dd:36:2a:6a:d7:a5:4e:ac:f5:1b:52:ad:93:7a:
b0:1e:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:14:29 2025 by rpki-client