Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wqs65ha0MBVLsdnxMdKZildTuVo.roa
File: Wqs65ha0MBVLsdnxMdKZildTuVo.roa (raw, json)
Hash identifier: kh1N4kVj/39KA0zf3wVsk3t0EjkRqX+FcrnEXnvAFHc=
Subject key identifier: 5A:AB:3A:E6:16:B4:30:15:4B:B1:D9:F1:31:D2:99:8A:57:53:B9:5A
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 09C8
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wqs65ha0MBVLsdnxMdKZildTuVo.roa
Signing time: Sun 07 Feb 2021 06:24:09 +0000
ROA not before: Sun 07 Feb 2021 06:24:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 192.72.240.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2504 (0x9c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Feb 7 06:24:09 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5AAB3AE616B430154BB1D9F131D2998A5753B95A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:85:a9:aa:15:86:de:6f:bb:91:b4:5b:07:
ab:ad:b5:9c:ef:f1:9b:8c:d9:19:95:71:7a:a4:1d:
a6:fc:8e:aa:4d:b4:8a:96:f6:f8:e8:06:7a:9a:60:
2e:7e:0c:57:fb:54:59:ad:09:08:82:52:fd:78:7f:
d5:9b:b4:ac:64:cf:84:93:37:77:21:b3:a4:a2:a8:
40:24:12:35:ee:6b:cb:13:54:0e:90:c1:52:30:7d:
f5:20:f8:6d:06:a1:99:0e:54:99:50:ea:a6:fa:60:
80:14:25:26:87:d9:e6:48:e0:4f:19:16:14:e2:8b:
c4:03:43:35:1e:3a:a6:85:80:e2:ec:c1:71:f1:d6:
01:09:2e:35:5d:38:1b:4d:c6:8f:8d:75:e1:a2:01:
ee:69:de:69:93:de:65:7c:59:8e:52:69:49:18:d7:
cf:f3:37:18:f2:d4:bc:7a:74:39:cb:02:4b:f2:ca:
2a:0a:c3:4f:11:15:a5:db:bd:47:ee:18:2b:7c:d1:
37:e4:63:0d:95:81:3d:66:bc:30:f7:ff:8a:86:21:
07:a9:cf:fc:13:25:30:11:e6:7b:06:5a:8f:a0:ec:
de:23:d6:da:6c:38:64:e4:1a:56:e9:58:0c:69:d6:
98:d6:79:d8:47:87:27:f0:c2:a8:ec:0a:da:8c:6b:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AB:3A:E6:16:B4:30:15:4B:B1:D9:F1:31:D2:99:8A:57:53:B9:5A
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wqs65ha0MBVLsdnxMdKZildTuVo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.240.0/21
Signature Algorithm: sha256WithRSAEncryption
47:ae:64:cf:b1:e7:da:3f:5a:7b:f1:bf:b2:4e:5c:87:c1:b2:
6b:ed:fb:36:de:fd:20:6d:f0:c8:c2:58:44:0c:4d:64:0c:dc:
09:06:6f:c4:26:88:8d:18:53:4f:45:23:3b:19:58:01:8f:37:
d1:14:74:e3:b8:79:48:b9:64:25:93:08:e5:c1:0c:b2:4a:6e:
be:8a:bb:5b:00:95:c4:61:29:af:78:63:af:1a:04:5c:c3:e2:
0e:d9:86:3c:43:92:c6:db:2b:59:4b:64:36:90:0b:fa:96:35:
ad:0c:61:4c:84:4b:e8:f4:87:af:86:93:d8:d0:92:8a:46:10:
28:12:a4:56:cf:ca:f9:5b:fa:2b:77:87:fd:10:50:e1:61:ed:
93:cd:73:49:7b:ed:84:7e:16:db:12:ee:57:cf:66:af:e3:c8:
1e:69:d7:d8:1d:bb:28:d5:2f:1d:93:2a:ba:70:e7:fa:ac:58:
2d:34:28:2c:3c:68:d7:8a:a2:88:ee:92:87:e9:2d:62:43:ae:
5f:b4:0e:9f:e2:28:69:01:f7:13:06:f5:e8:03:69:bb:a3:6e:
66:2d:d0:9a:e4:06:68:53:78:51:c5:5e:e3:0e:33:5c:f0:34:
de:b5:a4:cc:58:33:cd:d0:5f:43:45:04:95:4c:ee:40:85:03:
f7:a2:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:25:31 2025 by rpki-client