Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/YyZ3Vvzxjw9QhLpPLeHLPu_J9Aw.roa
File: YyZ3Vvzxjw9QhLpPLeHLPu_J9Aw.roa (raw, json)
Hash identifier: lmisqVsRRCxgbvgG9u9nYoa4TdfcniQVs6Nc95PeYok=
Subject key identifier: 63:26:77:56:FC:F1:8F:0F:50:84:BA:4F:2D:E1:CB:3E:EF:C9:F4:0C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0847
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YyZ3Vvzxjw9QhLpPLeHLPu_J9Aw.roa
Signing time: Tue 29 Sep 2020 09:51:52 +0000
ROA not before: Tue 29 Sep 2020 09:51:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 133747
IP address blocks: 115.30.64.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2119 (0x847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:51:52 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=63267756FCF18F0F5084BA4F2DE1CB3EEFC9F40C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:96:fd:b5:51:48:f0:73:8d:97:03:df:da:
05:40:3c:b0:15:49:bd:f4:5f:d7:4e:60:70:b9:06:
dc:55:9d:3f:71:4e:c5:d6:0e:63:cd:1c:d1:6c:42:
c6:5b:e4:9a:9b:f5:0c:8b:c2:62:75:1c:e9:4e:1d:
9f:20:9b:1b:ba:79:9f:78:a5:f8:a4:ad:27:ee:26:
24:1d:0c:c3:fc:58:f5:17:ac:8e:65:ba:b0:b9:44:
7e:9b:83:24:99:3f:31:00:57:39:95:cb:0d:c7:77:
d6:a1:f3:1c:04:f9:d6:c8:ab:17:61:be:3d:79:a1:
22:c4:13:41:47:5c:8f:66:97:9a:c7:7c:57:56:39:
b5:12:c8:90:45:e3:03:b2:dd:10:5e:da:2c:a7:51:
46:12:2b:03:85:a2:8c:29:f9:64:2f:9c:39:af:65:
3d:d6:3d:45:f6:2d:85:87:1d:55:8a:10:bd:4a:17:
d8:82:fc:0d:7f:63:a1:a1:b7:0a:c3:2a:30:d8:ff:
fa:45:05:90:82:da:7d:aa:1b:75:5c:89:91:ee:6d:
c9:b9:ae:c6:27:29:95:74:88:89:1a:f9:4f:2e:b6:
d8:aa:24:4b:50:14:4e:ea:97:a1:bf:fb:db:56:dd:
57:a9:9c:3f:2a:86:0b:07:e4:07:86:c6:24:3b:4f:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:26:77:56:FC:F1:8F:0F:50:84:BA:4F:2D:E1:CB:3E:EF:C9:F4:0C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YyZ3Vvzxjw9QhLpPLeHLPu_J9Aw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.64.0/21
Signature Algorithm: sha256WithRSAEncryption
53:61:92:90:54:2c:31:f9:25:1e:e6:a1:ec:75:85:b1:cf:b4:
ff:7f:ca:5a:d5:fc:1a:88:b7:7a:89:5c:ab:b4:62:62:91:c4:
50:bb:30:fd:5b:d6:e5:e7:c0:af:37:33:48:da:9c:16:09:7d:
30:d3:25:f0:50:29:b3:e2:84:0c:42:fd:17:49:06:dc:1a:3e:
a1:13:e8:dc:4e:c7:aa:f2:30:70:7e:08:61:53:03:d0:d4:b0:
d4:77:e0:cd:64:4d:14:d4:84:e3:0f:94:eb:75:3c:9a:93:23:
59:a2:6e:03:87:11:9b:bd:b7:3e:38:59:63:5b:e3:8e:a9:87:
c3:e2:97:05:e2:d9:0b:52:f2:ab:e5:22:a3:0a:ab:99:87:9d:
c0:5c:6e:5c:83:d7:a4:8d:aa:24:af:2f:57:b8:21:a9:4c:f6:
1a:1c:d2:ec:a7:8f:21:2f:9a:b6:24:65:f4:af:dc:ef:ed:18:
74:82:77:1d:15:9b:89:df:67:13:82:2a:79:6c:c0:a4:f7:7d:
53:c7:1a:28:5f:e7:ca:cf:1c:e9:0b:aa:79:ef:17:9e:ab:ab:
9a:ef:f5:52:b5:25:3d:a5:b0:53:3d:f3:71:1b:76:a2:89:fe:
60:e8:2b:34:31:62:d9:29:81:6a:34:b2:60:0c:10:2d:c8:f9:
ba:36:53:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:23:01 2025 by rpki-client