Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/X6UlHJ1H4mZw-_3G5O1WnTwXpLw.roa
File: X6UlHJ1H4mZw-_3G5O1WnTwXpLw.roa (raw, json)
Hash identifier: 2PTC69Vaod8UvrF9+o5Hfc3igdiopyh81C1aW/nqKvk=
Subject key identifier: 5F:A5:25:1C:9D:47:E2:66:70:FB:FD:C6:E4:ED:56:9D:3C:17:A4:BC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E4D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/X6UlHJ1H4mZw-_3G5O1WnTwXpLw.roa
Signing time: Wed 29 Sep 2021 02:43:25 +0000
ROA not before: Wed 29 Sep 2021 02:43:25 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18419
IP address blocks: 106.105.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3661 (0xe4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:25 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5FA5251C9D47E26670FBFDC6E4ED569D3C17A4BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:71:2f:55:82:8d:09:e8:3c:54:6f:9d:10:
6f:95:a6:17:e9:c4:0a:c9:92:14:99:16:b8:17:6e:
3b:92:f1:71:78:d0:87:84:24:98:29:61:0f:c5:e4:
7e:44:65:36:9d:1c:48:f2:e2:99:7d:de:29:f9:15:
41:84:72:63:5a:72:6a:9c:e7:a4:d4:04:d2:6d:ff:
fd:ed:47:6b:2b:a6:73:18:92:3e:ba:46:b0:41:2d:
3f:20:ab:ac:6a:4a:ed:5e:34:43:71:f6:38:1f:47:
8e:04:d0:32:6f:36:1e:a0:52:05:bb:37:a7:03:b7:
60:7b:1e:2b:dc:0b:2b:8f:b7:ab:15:6d:92:5f:55:
ea:2a:a1:31:a6:66:12:73:11:21:5f:e5:0d:5f:c2:
c2:a7:62:fd:59:f2:94:63:29:5a:92:82:9a:7f:6e:
d2:e5:90:84:85:a8:5a:10:52:e7:c7:3a:9a:a1:01:
5c:50:a7:8d:74:82:67:70:31:e7:46:39:22:3f:fc:
dd:0b:c2:77:73:11:cb:f7:b9:1a:65:fb:31:b4:05:
a5:b1:03:2e:26:5b:6c:9a:e2:99:03:69:e7:fe:e4:
20:f4:a4:80:c2:5b:ca:19:cb:06:86:14:28:de:d0:
67:00:6c:6b:3d:c6:9e:2e:63:6d:a2:35:86:19:31:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A5:25:1C:9D:47:E2:66:70:FB:FD:C6:E4:ED:56:9D:3C:17:A4:BC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/X6UlHJ1H4mZw-_3G5O1WnTwXpLw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.24.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:66:39:83:99:a5:9e:9e:06:4d:52:91:8e:7d:5f:a9:5f:59:
10:89:32:54:2e:c0:60:7b:28:52:21:5d:a7:74:fb:ad:a7:d4:
52:89:af:64:80:de:94:c4:ed:bc:51:69:9d:67:e5:b7:d3:d8:
89:15:d4:ec:48:f8:e0:58:77:14:f3:1f:dd:fe:70:80:0e:2e:
23:bb:48:84:a6:33:df:31:58:bf:ae:83:20:70:3e:ca:5e:48:
49:1e:00:ec:50:06:d8:f2:4c:9a:e6:22:2c:e7:96:af:40:f5:
16:17:60:f4:c9:6d:cf:5e:43:7d:74:93:57:05:34:34:db:dc:
21:90:b5:b9:3a:d0:1c:c3:bb:6a:12:8f:83:54:7e:99:f7:c7:
7f:dc:21:2b:80:d8:fd:55:a6:ef:7b:31:94:04:67:1a:21:53:
ff:cc:36:aa:76:db:35:92:79:39:4c:70:93:d7:18:67:81:d9:
b0:2b:ee:fb:ab:c0:da:23:02:8a:5e:96:a5:43:22:4d:1e:21:
31:42:56:87:72:57:1c:4b:6a:b9:e4:ea:b1:73:67:48:bf:84:
60:a2:ce:f1:54:e4:ae:a8:4e:8c:89:6d:d6:46:15:f2:15:fa:
c2:40:f3:5c:79:c1:d7:a1:d7:bb:30:94:88:05:04:33:2f:9c:
ef:40:18:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:05 2025 by rpki-client