Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Uke94e5Lf5p-BbDwiJGsY2nxr_w.roa
File: Uke94e5Lf5p-BbDwiJGsY2nxr_w.roa (raw, json)
Hash identifier: Ef65uLrhbWwSn0eXSQznKBoFDhm4KMgmh6B1cK5vOQs=
Subject key identifier: 52:47:BD:E1:EE:4B:7F:9A:7E:05:B0:F0:88:91:AC:63:69:F1:AF:FC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FE0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Uke94e5Lf5p-BbDwiJGsY2nxr_w.roa
Signing time: Tue 25 Oct 2022 01:03:04 +0000
ROA not before: Tue 25 Oct 2022 01:03:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 198949
IP address blocks: 113.196.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4064 (0xfe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Oct 25 01:03:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5247BDE1EE4B7F9A7E05B0F08891AC6369F1AFFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e4:b8:86:6a:97:56:06:03:ba:59:f2:c6:3e:
f6:3a:a8:55:d9:b8:d2:e4:2d:2e:28:78:bf:37:e3:
9f:af:84:f6:0c:f1:81:d3:e3:e9:98:19:06:0a:ba:
33:40:30:b4:fe:51:2c:63:ee:b4:53:30:35:28:da:
66:df:d0:de:99:2c:18:70:40:2c:bf:16:44:05:bf:
9a:97:d7:a3:92:65:cd:b8:2c:61:95:a0:4a:46:67:
95:a8:70:11:c2:3f:bb:05:20:60:0d:b0:36:92:e9:
61:9c:77:9b:50:75:ef:a9:27:38:88:b6:aa:46:dd:
58:54:91:6f:3d:0c:e5:94:1c:9b:59:de:51:ea:68:
fb:70:26:b9:cc:ed:1e:d3:03:b4:db:c4:6b:5b:64:
e3:34:1f:b9:19:8b:92:18:37:73:9e:e8:9b:a9:24:
fa:72:b2:13:03:7c:45:8d:d3:a7:11:de:f0:6b:93:
37:5a:8c:9d:60:b6:7f:f3:b9:da:3f:83:6c:f8:07:
29:85:51:ff:44:45:4e:48:16:6a:03:d5:14:0a:58:
7f:77:9c:06:eb:0e:01:57:5c:85:66:50:55:d4:3d:
42:01:1c:5d:86:38:6a:9a:c2:0f:87:9a:7d:f6:94:
e8:d2:7a:a1:e1:af:f1:53:87:ee:fa:9b:c0:af:60:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:47:BD:E1:EE:4B:7F:9A:7E:05:B0:F0:88:91:AC:63:69:F1:AF:FC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Uke94e5Lf5p-BbDwiJGsY2nxr_w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.39.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:54:17:d5:83:78:ff:ee:66:9e:b4:6e:1d:34:a7:99:9f:78:
10:e5:6b:f4:ad:e0:12:9a:03:be:b5:d5:b6:c9:d3:e2:a8:15:
80:e6:de:b9:46:85:bc:e6:4d:93:ab:5a:4c:12:f0:03:5a:a2:
26:88:0b:17:4f:22:56:87:7c:44:a5:1b:04:99:16:cb:dc:71:
4f:5a:ea:55:12:48:ef:ac:8e:14:fd:19:99:30:53:61:db:60:
56:88:61:3e:ec:7a:8c:6c:e1:ce:e8:44:a0:96:60:ec:4a:32:
b2:b4:1e:bd:fe:e7:18:8f:43:81:5f:ad:65:70:2c:70:ed:70:
e8:f6:e3:86:bb:f7:36:a7:c0:4a:8b:6f:02:2a:09:e5:85:0c:
03:47:2e:0c:5d:0c:41:58:06:60:91:a2:84:aa:86:e2:8e:e3:
66:f8:a9:7c:b3:cb:4e:69:a8:97:3d:2a:aa:04:f3:77:29:68:
4c:85:41:ed:51:16:db:5f:1f:80:c6:67:2c:6f:3b:83:2e:7e:
5d:eb:ca:cd:db:2e:2a:c6:94:d0:2a:88:1c:b5:ce:bd:ad:c1:
59:f1:43:64:b9:a0:a5:dc:c6:65:92:8b:7b:d4:24:95:92:0f:
9b:6b:f3:06:ab:be:d1:1a:0e:d3:54:52:5d:1b:a6:31:9c:e5:
bf:f6:11:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:12:22 2025 by rpki-client