Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/X2zs30Pq2KHOobkvs69JcfUYQzI.roa
File: X2zs30Pq2KHOobkvs69JcfUYQzI.roa (raw, json)
Hash identifier: cenXuNXFIrBUNWGzElVqAw0tRfgNWfkIHxahUKJ11OM=
Subject key identifier: 5F:6C:EC:DF:43:EA:D8:A1:CE:A1:B9:2F:B3:AF:49:71:F5:18:43:32
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 11B1
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/X2zs30Pq2KHOobkvs69JcfUYQzI.roa
Signing time: Tue 18 Jul 2023 00:58:30 +0000
ROA not before: Tue 18 Jul 2023 00:58:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 211.78.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4529 (0x11b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Jul 18 00:58:30 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5F6CECDF43EAD8A1CEA1B92FB3AF4971F5184332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:1e:75:60:0d:6f:15:6d:37:e2:9d:57:b3:
ba:43:a6:77:52:5a:15:b8:fe:d7:5a:17:cd:5b:a7:
4f:a3:d5:ae:05:38:b7:a9:c7:29:08:f1:bd:9a:c4:
fe:06:ba:d7:46:2e:43:e4:12:33:36:d9:9e:d0:41:
13:76:0f:0d:74:8e:17:8f:31:8e:45:a2:fa:e9:48:
72:a9:02:f4:15:ee:6b:92:3f:77:75:f4:c7:77:f4:
fe:4d:16:9f:a8:86:31:4e:f3:7c:04:38:a3:c0:45:
f1:1a:48:63:95:03:68:1f:5a:9f:d2:5f:5a:e3:ec:
1d:63:a8:f1:fc:bd:c7:87:0c:49:73:a1:53:11:2c:
cf:d2:b0:8f:b4:78:e8:64:05:6a:09:aa:53:44:2c:
e2:80:ce:4b:d6:2d:fa:df:d1:e8:72:99:25:00:78:
7e:5f:e3:cc:b7:44:de:ec:a0:1a:87:72:95:cb:a7:
4e:d0:a3:97:13:ac:d1:5e:0c:ae:cf:fa:33:9a:11:
30:aa:52:73:fd:3f:31:99:86:c7:b2:96:11:92:63:
72:f1:a4:75:ac:aa:cd:7b:b4:dd:3c:c4:26:5a:90:
ec:a0:bf:80:b9:92:03:30:91:c4:14:21:56:2f:d1:
b9:ae:c0:29:68:40:ec:9d:78:ba:c0:c1:e6:3c:21:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6C:EC:DF:43:EA:D8:A1:CE:A1:B9:2F:B3:AF:49:71:F5:18:43:32
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/X2zs30Pq2KHOobkvs69JcfUYQzI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.96.0/19
Signature Algorithm: sha256WithRSAEncryption
30:33:5e:ee:8f:a4:ce:b7:6b:65:49:61:2b:11:b5:08:c9:ad:
7f:9a:e3:ec:d4:1f:4d:42:b3:89:df:95:1d:e9:96:22:ed:bf:
c0:67:fb:46:22:35:9f:14:da:cb:a0:4e:40:78:79:2c:f6:e8:
b7:47:55:0d:fe:f9:eb:dc:af:47:b0:8e:81:d3:bb:dc:10:77:
4d:e2:af:ff:c5:0f:45:ad:21:52:d5:67:9d:2a:2e:77:99:86:
2c:b0:67:94:04:bb:fd:f5:e0:ec:a9:3a:a1:3c:48:65:bd:ad:
98:36:1f:e3:f1:7d:8d:8b:d5:ad:b9:8d:17:1c:91:69:94:3e:
f3:40:73:ea:ab:f0:72:69:e9:b2:6a:83:89:a3:34:81:56:b1:
d2:5d:00:74:de:36:bb:e0:71:ef:b7:21:ed:c0:88:8b:98:e1:
24:ab:24:7d:53:e2:f5:0c:5f:3b:0f:34:12:12:db:54:22:94:
43:75:bf:22:29:d6:01:6c:22:83:1b:39:ba:d2:3f:b7:56:72:
6f:fd:f7:f1:56:e4:19:cd:9c:67:c5:a5:e1:b3:74:90:2b:2f:
b2:f1:69:16:65:64:9b:38:60:f3:ec:19:ab:20:11:e0:33:61:
78:10:67:84:51:e8:fd:57:28:f0:f4:c5:f0:35:97:a3:80:3c:
89:1c:20:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:17:08 2025 by rpki-client