Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Zu7GgGZ6Q0OkpN9QoqJr0OLHFLo.roa
File: Zu7GgGZ6Q0OkpN9QoqJr0OLHFLo.roa (raw, json)
Hash identifier: hMhDig7++kLH8MlTFjPTb4h2F5ycCdfXbfO8pU4Mf+Y=
Subject key identifier: 66:EE:C6:80:66:7A:43:43:A4:A4:DF:50:A2:A2:6B:D0:E2:C7:14:BA
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E5D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Zu7GgGZ6Q0OkpN9QoqJr0OLHFLo.roa
Signing time: Wed 29 Sep 2021 02:43:30 +0000
ROA not before: Wed 29 Sep 2021 02:43:30 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131586
IP address blocks: 106.106.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3677 (0xe5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:30 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=66EEC680667A4343A4A4DF50A2A26BD0E2C714BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:9b:0d:8f:32:2d:96:fb:67:4c:6e:15:44:
e6:53:12:97:47:3b:f6:25:78:dc:a5:27:d3:8a:f4:
48:18:3b:02:b7:5f:c0:93:6a:d2:e9:e5:b9:3e:1b:
a6:e1:6e:28:39:7e:04:f7:3d:33:d0:0d:5d:8f:90:
fc:70:fd:a0:bf:28:41:94:90:08:d3:87:4d:7e:99:
ea:e3:ac:01:9b:e5:10:b8:ad:2d:8f:a4:63:c0:0d:
50:79:6e:4d:8e:7b:67:f0:dc:dc:ec:df:3a:cd:6c:
0b:49:ac:8a:1d:dc:67:66:86:6b:d2:3c:d8:29:63:
f5:65:3f:fa:61:3f:28:6c:62:15:8a:fb:0f:dc:61:
10:d3:c1:ed:e8:bc:7c:6f:6f:37:e4:27:c2:1d:7e:
08:97:ae:1e:3a:23:31:39:70:b3:c1:08:2e:d5:e8:
d2:73:36:eb:07:71:91:51:28:53:aa:2b:59:d0:f5:
41:81:10:0d:94:eb:94:70:4c:ba:18:14:5a:9f:b1:
c1:07:79:54:17:65:13:76:71:0c:a0:99:0d:b7:35:
85:76:71:d6:ff:63:e5:dd:c3:e0:c8:92:c8:c1:4c:
93:66:5a:46:29:00:44:90:42:f4:e8:d8:9f:59:1f:
dd:d0:c3:a2:69:07:43:68:83:b1:dd:79:05:79:33:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EE:C6:80:66:7A:43:43:A4:A4:DF:50:A2:A2:6B:D0:E2:C7:14:BA
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Zu7GgGZ6Q0OkpN9QoqJr0OLHFLo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.106.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:38:b3:aa:55:48:52:e5:4b:f2:75:65:8f:75:38:33:14:67:
16:e5:b9:84:7d:d3:74:bf:38:b1:d3:02:9e:5e:ac:ee:b8:1d:
0c:46:88:e8:f6:73:82:0e:ee:22:55:9a:2b:51:70:87:7e:de:
80:52:2f:24:2a:ad:1f:85:5c:df:c1:69:17:bc:94:9d:e4:96:
34:33:06:0e:50:db:1c:8c:c9:91:1c:36:eb:3f:2a:9b:fc:0d:
30:90:69:9e:2d:c0:a8:cf:dc:87:c8:52:34:bb:17:44:a3:34:
99:a8:2a:16:7b:d5:2e:7f:26:69:32:1e:b9:84:07:c3:8d:d5:
92:e6:d2:93:e2:ac:83:90:99:94:1d:06:6f:87:58:cd:0d:5f:
40:ab:4c:f3:8b:88:f9:26:de:81:89:84:9a:44:aa:3f:06:db:
5c:ec:f2:5f:ba:67:e0:46:0a:97:21:1b:24:70:d2:9c:9e:42:
c0:65:41:e8:09:66:c8:1c:8d:c9:a1:aa:92:5b:79:5c:1c:af:
ad:35:c3:ef:f2:a2:ac:6c:98:11:2c:22:46:c2:7e:f3:d2:e8:
31:44:b8:aa:a4:6b:5d:f8:21:0d:f6:f5:70:78:1b:2c:27:bf:
75:25:cb:a2:f2:0f:87:53:23:cb:41:7a:28:5a:ee:5e:5a:54:
bc:6b:c4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:57 2025 by rpki-client