Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/UZIsdRSsyIskRqQgun2EurYkDrU.roa
File: UZIsdRSsyIskRqQgun2EurYkDrU.roa (raw, json)
Hash identifier: 4MWe36ZIgwPmY6s2jSgs/qzue9v99l2eEsy9byfysTU=
Subject key identifier: 51:92:2C:75:14:AC:C8:8B:24:46:A4:20:BA:7D:84:BA:B6:24:0E:B5
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0B73
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UZIsdRSsyIskRqQgun2EurYkDrU.roa
Signing time: Sun 07 Feb 2021 06:19:26 +0000
ROA not before: Sun 07 Feb 2021 06:19:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 61.56.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2931 (0xb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:19:26 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=51922C7514ACC88B2446A420BA7D84BAB6240EB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:d7:d0:02:8c:2b:cf:ec:6a:f9:4a:46:51:
c1:84:57:56:7f:15:45:2a:ad:7e:89:fd:70:08:eb:
23:2b:cb:33:1f:39:7d:95:fa:89:84:c1:df:20:40:
f6:5d:5e:0c:77:3c:02:4c:7d:f8:97:e0:d8:0b:13:
e0:88:ec:7a:70:a8:ab:da:d2:d9:69:5b:49:c8:56:
47:4a:b6:73:54:26:0e:4b:a3:89:ec:fa:35:2e:05:
f6:90:02:60:0b:d4:b4:aa:5a:69:5b:c9:4b:2b:e0:
83:21:ed:46:7d:cf:43:8f:73:29:5f:2f:5a:37:ca:
49:7a:9c:f5:68:cb:39:93:b4:da:03:40:31:b4:56:
4c:2f:ae:f1:e8:aa:a0:93:28:d0:c4:71:27:45:99:
a6:96:5d:a8:67:29:ee:88:40:25:f2:85:09:8b:62:
59:15:e1:b3:95:fd:15:b2:5c:5c:8e:12:67:2b:ae:
31:95:33:32:7e:f8:16:9c:52:e0:d8:c2:0d:9b:91:
b4:95:4e:25:57:8b:c7:5a:63:13:31:bc:bb:61:54:
a9:d6:49:9a:9b:d3:bf:cb:c1:4a:6b:2c:24:a5:ca:
83:ff:1f:a8:26:78:35:53:8d:7c:46:9e:03:78:b8:
94:42:ea:a3:64:f2:85:1f:d8:b4:47:11:90:c0:59:
a9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:92:2C:75:14:AC:C8:8B:24:46:A4:20:BA:7D:84:BA:B6:24:0E:B5
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UZIsdRSsyIskRqQgun2EurYkDrU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.192.0/19
Signature Algorithm: sha256WithRSAEncryption
07:f1:d2:e3:b6:b0:76:d5:6f:20:11:2a:d4:b8:71:6d:1e:c5:
ee:12:8e:e6:03:5b:10:83:92:25:b8:10:6f:85:88:4a:b3:61:
d7:08:5e:e3:9f:f2:2e:9b:bc:80:be:8b:62:d4:f8:da:7e:df:
b7:69:ab:4d:f6:f1:9a:f3:87:7a:17:0d:ce:56:38:e8:7b:90:
b3:d4:dd:ef:8f:8c:db:ca:8d:c5:79:96:15:42:92:05:d3:ec:
62:ca:d8:cb:21:fd:9e:82:2d:19:28:06:bd:47:20:22:d6:d2:
01:16:cc:15:3e:03:52:50:ce:a0:a0:5d:22:20:64:71:ca:60:
d3:31:18:bb:04:ed:39:e7:c9:54:7c:37:08:64:a2:98:23:a8:
81:d1:1a:7d:96:84:45:d4:4d:b3:c0:06:38:a1:2f:fa:77:6e:
c8:56:0b:57:f2:b4:4a:bf:60:f1:aa:c4:b1:e8:c0:8d:fb:f7:
36:ec:69:ea:97:4d:84:bf:6a:9f:f4:9e:1a:08:46:f8:14:27:
a1:12:fd:4c:06:93:4a:c3:42:31:69:5d:9b:b3:23:73:d8:2a:
c5:f8:51:1f:7f:9d:f7:9a:74:82:77:59:6a:fe:be:76:d5:08:
4c:c7:f5:9c:bd:0d:0d:2b:83:ed:53:c4:78:36:bd:35:3d:f7:
f6:97:2c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:30:12 2025 by rpki-client