Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/XmdlmAOaIJNJGM9y8F51Qhbhmvs.roa
File: XmdlmAOaIJNJGM9y8F51Qhbhmvs.roa (raw, json)
Hash identifier: /1zmkVIuBwGCS1l7ekwghTrLvl5IqTZ50ef9lvbzxhM=
Subject key identifier: 5E:67:65:98:03:9A:20:93:49:18:CF:72:F0:5E:75:42:16:E1:9A:FB
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XmdlmAOaIJNJGM9y8F51Qhbhmvs.roa
Signing time: Thu 15 Sep 2022 02:43:37 +0000
ROA not before: Thu 15 Sep 2022 02:43:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 192.72.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3183 (0xc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 15 02:43:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5E676598039A20934918CF72F05E754216E19AFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:ca:69:fc:41:6c:e0:7c:3d:d1:14:04:66:
ad:80:0b:3e:69:44:63:5e:f6:76:84:9a:b9:26:03:
26:ac:00:11:04:c1:12:da:44:7b:12:19:bc:76:57:
f7:a3:cc:9b:62:f1:30:3d:b6:5f:6e:76:01:58:e7:
15:d2:d7:da:42:c8:06:6c:08:1c:7e:73:f2:2d:46:
b6:5f:8f:30:d6:a5:86:19:89:92:f0:48:8f:8f:24:
45:3c:2a:2d:d5:35:d5:20:49:cd:0f:31:f3:f9:65:
99:4b:56:54:6b:7e:ae:2a:c2:e0:48:82:28:d2:f9:
36:30:1e:09:58:49:7f:ee:47:67:ae:b5:99:94:0c:
f0:4d:03:e8:a5:8d:fa:be:15:32:e8:b7:b3:ad:45:
07:a3:86:e3:a9:2a:13:55:c9:27:54:3c:ea:90:d4:
54:5f:63:dd:fd:7a:e2:9f:fe:b5:0c:5b:5d:31:3b:
da:3b:3c:ab:ce:5d:b1:52:c6:d2:19:c2:ee:aa:2a:
a7:06:bf:27:3e:ca:f3:18:fe:73:60:15:61:4e:25:
83:0e:5d:37:08:c2:29:4e:05:6a:20:d2:d7:46:ac:
74:f5:45:ec:e6:c3:d4:fa:1f:13:2e:b7:40:57:36:
38:91:1c:07:80:3a:4d:d7:52:50:e5:15:4b:28:7f:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:67:65:98:03:9A:20:93:49:18:CF:72:F0:5E:75:42:16:E1:9A:FB
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XmdlmAOaIJNJGM9y8F51Qhbhmvs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.8.0/21
Signature Algorithm: sha256WithRSAEncryption
60:f0:d4:19:8d:b9:56:28:04:f1:68:6b:36:87:60:bd:d4:53:
98:a5:b3:5f:0a:41:18:a1:2b:ae:5d:55:85:70:04:60:06:ac:
3c:e6:44:f2:24:ae:59:89:f5:86:61:d0:98:b5:20:2f:cc:9a:
85:4a:ed:8f:47:a8:07:62:fd:86:27:38:6f:af:f7:44:ad:c5:
2b:5a:9a:c1:d2:5f:a8:45:7e:43:e6:61:8f:3f:ea:a0:46:e8:
9f:fa:e1:db:d3:e0:c9:0c:f1:a8:dc:6a:3a:fa:a7:99:58:2e:
8e:07:b9:d8:ef:c9:1b:ef:00:14:ce:12:16:35:30:5e:22:a8:
51:7a:2c:55:cb:a5:34:38:38:fa:b6:a8:61:90:49:38:ee:b8:
03:96:7e:ef:1d:fd:4c:b1:25:02:1d:23:2f:b2:76:0d:a0:77:
25:05:ab:2e:96:11:0c:54:47:86:fa:59:30:98:9d:92:18:9f:
0a:76:e4:5f:48:bf:eb:1b:96:47:7f:02:ed:33:cb:70:d1:dd:
a6:92:c7:17:53:31:58:a9:47:b4:f5:f3:37:e9:43:f5:b4:b4:
29:f1:f9:b6:3e:cc:ff:e5:96:01:64:a8:a0:14:55:00:de:09:
b1:b0:ca:44:cb:c1:d4:2f:45:b0:12:d3:e0:67:e1:40:f5:bf:
9b:a2:92:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:36:16 2025 by rpki-client