Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/UI3l7bODdirucLwQIhjqLnSbQT8.roa
File: UI3l7bODdirucLwQIhjqLnSbQT8.roa (raw, json)
Hash identifier: 0+prrkmcWzc1kMgB7/kDhmQ9XsmB4d/BFb8jia/BJZw=
Subject key identifier: 50:8D:E5:ED:B3:83:76:2A:EE:70:BC:10:22:18:EA:2E:74:9B:41:3F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UI3l7bODdirucLwQIhjqLnSbQT8.roa
Signing time: Thu 15 Sep 2022 02:42:43 +0000
ROA not before: Thu 15 Sep 2022 02:42:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.105.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=508DE5EDB383762AEE70BC102218EA2E749B413F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:3a:ae:3a:07:5f:8a:51:e8:15:3a:34:93:
52:3e:1e:bb:0e:e9:b6:2c:31:6a:55:26:d6:ef:93:
15:60:c6:3b:a0:50:5f:dc:68:f5:29:5c:ff:14:ba:
1e:5e:55:ae:dd:78:89:b2:12:23:cc:49:cc:a2:81:
ae:6d:5d:c5:b4:c6:25:6b:7c:8d:4a:82:f0:e2:38:
ca:3f:d4:02:e9:8d:6f:56:ff:ed:16:c2:97:bf:25:
9c:93:e8:f7:1d:f8:17:5d:e6:40:fc:43:ce:03:8c:
d6:83:32:3f:d2:c0:36:4e:27:44:94:92:d4:f7:81:
77:77:a8:d4:e1:ae:00:74:b6:48:7c:85:f6:6f:40:
8c:60:a5:a8:94:96:31:9a:f0:d0:12:92:f4:5f:d7:
7c:2d:46:e0:02:b5:0f:d4:ef:c9:64:92:a4:0d:c8:
f8:24:98:ae:23:42:8c:b1:64:fb:6e:06:3d:db:5a:
22:cf:3a:c1:d9:ed:40:93:77:91:40:d9:f2:a3:f5:
05:7f:65:6f:9b:17:a6:08:bf:84:82:ec:79:3a:02:
9e:8b:d0:43:a5:6b:e8:25:be:87:85:9e:e2:2e:e7:
66:3e:54:c4:d4:1d:50:14:78:e2:a1:10:df:1c:24:
33:f4:6f:3e:25:46:c3:f6:54:b2:cf:3d:21:28:b3:
18:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8D:E5:ED:B3:83:76:2A:EE:70:BC:10:22:18:EA:2E:74:9B:41:3F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UI3l7bODdirucLwQIhjqLnSbQT8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.80.0/21
Signature Algorithm: sha256WithRSAEncryption
59:fc:9d:5f:6d:e3:a9:e3:b0:d8:b3:3b:02:85:52:79:04:25:
dd:3e:a9:c8:29:d1:95:1a:17:06:70:8a:fb:3f:11:8e:6d:93:
fd:b8:28:4a:74:90:8d:8b:75:dd:97:e4:a3:df:08:f7:8e:65:
22:1d:c1:d3:54:36:aa:2b:6f:d6:48:ff:e0:ca:3f:28:50:71:
5b:49:21:b6:ae:6a:db:61:34:0b:3a:e9:54:a8:87:26:09:1b:
c8:a7:54:f5:6b:7a:59:5e:27:45:69:72:53:07:6c:1c:86:50:
fc:ed:23:0c:2d:3d:a6:0b:75:5d:f2:e3:66:85:b2:53:38:3c:
20:03:92:5f:0c:79:83:b2:40:6e:5c:95:db:13:d8:37:a9:bc:
bb:fd:db:88:4a:4c:9d:7f:03:af:03:99:a7:42:51:ab:96:95:
79:68:c8:d7:8a:b7:c2:0a:ee:dd:7e:af:8a:f5:ea:b2:9e:9c:
8c:6c:cb:c4:2e:09:3e:f0:70:eb:37:69:89:49:6d:3e:95:62:
3e:f6:d0:ef:50:f3:e9:82:d1:e1:b0:37:c5:83:86:1e:ac:25:
e4:e4:01:11:cc:a4:cf:bc:42:ee:a7:66:24:b2:64:d2:49:7c:
18:da:a5:78:3b:6d:91:34:91:ca:91:87:07:f3:bb:04:c0:de:
ee:a0:4a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:38 2025 by rpki-client