Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZWzvYXXGxSCtR6DgWKU38DtZj4c.roa
File: ZWzvYXXGxSCtR6DgWKU38DtZj4c.roa (raw, json)
Hash identifier: miDQduie8AEtC8Sw72P0ua2hoWLs3qjoFGcomyziH4k=
Subject key identifier: 65:6C:EF:61:75:C6:C5:20:AD:47:A0:E0:58:A5:37:F0:3B:59:8F:87
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1321
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZWzvYXXGxSCtR6DgWKU38DtZj4c.roa
Signing time: Fri 01 Sep 2023 09:24:31 +0000
ROA not before: Fri 01 Sep 2023 09:24:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 112.104.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4897 (0x1321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=656CEF6175C6C520AD47A0E058A537F03B598F87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:24:be:07:12:41:75:54:b3:33:08:da:31:
33:9b:81:c8:d9:eb:66:12:b9:7a:6b:8a:39:93:71:
3a:df:a0:ef:93:f9:ef:56:cd:ee:79:e3:df:5f:b1:
de:00:53:2b:49:65:12:0d:24:6d:1b:83:22:eb:b4:
2e:c6:c4:38:79:4c:5e:40:43:72:b6:2e:60:b5:1d:
42:f6:ea:bb:b3:11:ea:20:c6:1b:ba:00:62:8c:6d:
8e:e9:bd:f4:c2:c6:f2:bb:01:2c:d1:ab:5f:c8:97:
a9:39:4e:56:2c:79:ec:20:8f:78:7b:97:71:87:44:
97:25:bc:7a:41:68:43:df:1d:1c:79:e5:49:95:63:
c6:8f:d3:77:78:f8:2c:30:4d:d5:26:1a:63:2f:da:
c3:c5:27:3c:1d:1f:37:5d:bd:a9:d0:a1:f8:3d:1e:
2c:97:9b:a7:dd:eb:18:4b:c4:13:67:23:da:79:77:
91:2d:18:68:59:60:0e:45:73:74:84:ad:cf:1b:de:
af:b9:22:05:1b:77:69:0d:44:11:79:5b:7b:d8:6e:
86:b3:c1:f1:a7:b4:60:c0:20:10:6e:42:fc:54:8d:
17:74:69:8a:ad:e3:90:f6:71:5c:03:1a:2b:ef:f6:
26:ea:79:d0:85:0e:8c:6b:9c:5e:d0:ce:e2:66:09:
1e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6C:EF:61:75:C6:C5:20:AD:47:A0:E0:58:A5:37:F0:3B:59:8F:87
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZWzvYXXGxSCtR6DgWKU38DtZj4c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.104.0.0/15
Signature Algorithm: sha256WithRSAEncryption
00:83:e8:60:c6:fe:8b:d8:27:2d:54:bb:7a:b1:8e:c5:ed:62:
ff:80:83:bf:1b:23:18:e8:aa:27:8c:42:79:e2:1d:a0:ef:96:
4b:20:61:4e:44:cd:57:23:66:fc:a0:22:ba:88:c4:80:de:cb:
e3:a2:8d:0a:99:b5:af:b8:46:98:33:c5:74:a6:98:1a:01:fc:
05:c7:71:b8:11:8b:53:93:af:62:a5:d4:ed:97:eb:a8:65:69:
d8:da:58:e9:68:97:fe:8c:c6:af:70:93:a2:a6:fc:cc:41:19:
ae:fa:09:7e:35:b2:f6:77:71:50:5a:ec:47:72:0e:07:1c:0e:
3a:14:8b:db:42:22:cc:ac:4c:97:ca:b2:34:87:f1:60:72:73:
94:f5:64:9b:d1:96:14:3a:6c:a7:dc:30:10:31:85:d6:93:76:
2c:80:9a:13:02:c4:11:0b:dd:1a:fd:49:e0:f9:f3:c4:b4:dd:
44:f0:65:84:cc:f9:16:ad:55:74:1e:4b:0b:ef:fb:5d:d5:5e:
83:6d:a5:d4:a5:c3:b7:3a:eb:33:5f:33:82:c8:59:dd:85:56:
3e:f1:e1:c0:3a:44:f1:99:aa:74:ff:1e:c1:ad:7d:39:c1:34:
ea:8a:b8:32:aa:30:43:be:5e:c4:cc:d2:51:01:93:ce:69:02:
84:d5:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:14:24 2025 by rpki-client