Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/V542fQU_6gadJ0v9AfPj-62O3t0.roa
File: V542fQU_6gadJ0v9AfPj-62O3t0.roa (raw, json)
Hash identifier: jorJEVKxKQ7paRlo2d9f5DS3w541TXABa4gtQO4wf64=
Subject key identifier: 57:9E:36:7D:05:3F:EA:06:9D:27:4B:FD:01:F3:E3:FB:AD:8E:DE:DD
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/V542fQU_6gadJ0v9AfPj-62O3t0.roa
Signing time: Thu 15 Sep 2022 02:43:46 +0000
ROA not before: Thu 15 Sep 2022 02:43:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 175.183.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=579E367D053FEA069D274BFD01F3E3FBAD8EDEDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:bd:2e:58:3f:4c:7f:b0:8a:0b:40:12:db:
01:40:09:c5:32:f2:09:10:f1:8a:25:3c:dc:c4:bd:
70:64:29:f0:8a:0e:50:41:fa:22:22:ab:7a:cf:57:
2b:1e:2b:50:65:11:7a:d1:23:1c:4c:cd:ce:a1:64:
0e:9b:90:69:58:9b:bb:e3:dc:51:c1:b2:53:79:e5:
d0:ee:f6:2c:5f:be:65:31:77:5e:eb:9e:03:95:23:
20:5f:e8:4a:de:7a:65:30:c0:fd:bf:3f:8d:e9:79:
25:4f:13:7e:6e:0c:a8:4f:b4:3f:d2:44:c4:73:dd:
ca:dd:ff:0e:75:0b:8e:70:d8:f7:bb:54:3d:f5:33:
2b:cc:e3:86:f4:9d:42:b2:04:0f:61:43:7a:cb:eb:
09:a8:d7:c1:8d:72:6d:3c:60:5a:1b:98:76:03:72:
4d:8f:22:18:86:fa:f6:af:6f:d2:b5:a6:07:c2:a1:
d2:98:32:87:f9:58:0d:de:2f:43:cc:95:e0:6c:ef:
87:5f:a5:4b:9e:e8:27:c2:db:43:3e:c9:f2:45:f4:
89:49:c9:0a:66:fb:a2:02:36:ba:ef:65:98:aa:45:
21:2e:e1:98:aa:f0:09:dd:30:59:af:6d:dd:78:f3:
c8:b4:80:96:88:c6:fc:be:86:81:b9:bf:38:bf:ee:
62:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9E:36:7D:05:3F:EA:06:9D:27:4B:FD:01:F3:E3:FB:AD:8E:DE:DD
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/V542fQU_6gadJ0v9AfPj-62O3t0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.0.0/19
Signature Algorithm: sha256WithRSAEncryption
71:7d:d6:e5:2b:a6:a6:29:96:71:6d:a5:23:2f:8b:2f:7e:62:
ae:20:8a:8e:29:4c:b6:2e:71:2d:a0:18:18:c8:f2:61:09:44:
ee:08:e9:5d:71:d7:3f:78:85:39:8c:b5:f3:14:a5:cc:cd:5f:
2e:7a:79:df:e8:87:23:4c:98:dd:ea:bd:64:fe:77:9a:26:24:
a9:54:64:9a:04:09:f9:8f:81:a6:f3:80:41:cf:f3:28:da:a6:
4a:0a:fa:19:02:19:97:c8:65:d3:09:a0:77:c3:41:ac:22:3a:
a1:00:7c:ab:10:3e:9f:e7:d1:a0:15:bc:65:ec:18:49:30:fe:
6b:81:10:9a:47:79:4f:f8:ee:76:b5:5a:9c:ce:21:74:8d:a6:
4b:53:6a:d1:23:8f:e6:2a:b0:17:33:d8:46:d9:bd:ab:2e:32:
eb:58:c1:78:df:9d:2a:27:a6:50:6c:a0:aa:bb:56:80:d2:10:
51:c8:2a:15:db:67:92:35:a7:84:e9:25:f1:65:cb:f4:45:c8:
ad:14:a0:96:66:22:8b:2d:4b:b4:36:7d:ba:eb:5a:5b:d9:13:
5e:c8:a3:e7:ac:b2:84:27:fb:19:94:dd:1d:35:01:88:9f:c9:
62:4e:86:05:51:27:1e:ff:ce:6e:cf:b4:c7:87:89:39:c1:13:
65:6f:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:37:44 2025 by rpki-client