Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_7Cj1DA0T4d4U2X-mbb6gjaocQY.roa
File: _7Cj1DA0T4d4U2X-mbb6gjaocQY.roa (raw, json)
Hash identifier: kbCdv3PZP4tcuuH2+erWmjmfZXtTszSyuc4ZiG3YrSs=
Subject key identifier: FF:B0:A3:D4:30:34:4F:87:78:53:65:FE:99:B6:FA:82:36:A8:71:06
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_7Cj1DA0T4d4U2X-mbb6gjaocQY.roa
Signing time: Thu 15 Sep 2022 02:43:12 +0000
ROA not before: Thu 15 Sep 2022 02:43:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 112.104.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FFB0A3D430344F87785365FE99B6FA8236A87106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:25:8b:cc:a4:17:17:78:e2:38:f4:7a:d1:
c1:d7:71:a8:1d:de:c8:9a:6a:d9:94:19:9a:c2:8e:
80:ed:d3:07:9c:57:a5:3c:24:e2:fb:10:98:be:fd:
4c:23:c9:f8:0c:9f:ea:a5:1d:90:dd:29:0d:05:2a:
f3:ec:14:3c:13:89:97:af:8d:98:f1:47:dc:10:e2:
9c:f5:e5:ee:72:f8:fe:62:13:9d:56:9e:cb:42:97:
ff:7f:f0:54:d0:17:d6:b5:3d:b0:6c:12:40:55:49:
23:ba:5c:10:33:8e:d5:c8:97:ed:cb:6e:85:17:c2:
ca:e7:2e:3c:3f:c8:54:a3:a5:82:bd:f4:4d:1c:56:
d1:8d:7b:b2:52:5d:df:3d:cd:5d:f0:ea:00:79:85:
c6:74:31:0a:db:49:37:1e:f5:86:47:9f:17:65:71:
7f:87:32:eb:b1:48:04:77:f5:b7:f7:fb:48:52:73:
b8:e4:8c:28:0e:72:0a:21:db:1e:ff:75:e8:38:94:
f9:4e:82:05:c8:22:f3:6f:de:1d:6a:c4:cc:7b:df:
52:cc:fe:09:b2:7e:98:a1:51:53:1b:60:6f:37:79:
f5:d8:cf:c9:c1:6f:63:69:95:f8:84:5c:07:29:e2:
17:ba:24:0f:18:af:a2:2b:47:59:d1:d8:7d:e2:b4:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B0:A3:D4:30:34:4F:87:78:53:65:FE:99:B6:FA:82:36:A8:71:06
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_7Cj1DA0T4d4U2X-mbb6gjaocQY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.104.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:f6:26:8e:2c:1f:20:78:a3:ad:dd:e8:5c:a5:97:ba:fc:43:
6a:cd:83:4b:d0:b8:49:1d:2c:12:bf:24:7c:84:3e:25:a2:ea:
ed:d7:43:07:e4:ea:82:87:99:b8:90:ae:66:3b:be:bb:94:14:
82:16:55:37:69:4d:a4:24:fe:55:a4:8e:80:12:d4:36:36:a7:
e3:12:55:ac:e1:19:e0:03:c1:5d:df:f4:a7:83:6e:d9:7e:a4:
f7:88:ab:22:db:5c:52:f7:19:26:c8:5f:2a:d2:a0:fe:f1:fd:
f7:e1:75:ff:61:0e:bd:ca:8c:cb:66:3b:a2:9f:03:90:87:ba:
21:27:f4:18:4e:71:cd:7c:05:f3:93:9c:a4:c7:a3:a0:93:28:
21:f6:d3:23:1d:bd:8b:35:86:82:b5:84:2f:69:fa:9b:2d:6d:
b3:a0:32:3d:b4:86:31:55:c5:fc:3f:44:4b:9f:ff:58:81:33:
e7:9a:33:2e:86:44:66:6b:b0:d2:54:de:3d:60:0c:a9:42:1f:
51:45:f9:da:33:e0:bc:42:c3:4b:b4:26:fd:c2:e0:2d:09:ce:
fc:46:de:9c:72:8b:8b:7e:39:dc:a6:2c:3f:af:75:c3:29:fb:
c0:7f:51:8f:f1:0e:ad:f5:46:cd:e0:9d:54:d4:a8:05:7b:c8:
08:56:19:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:25:25 2025 by rpki-client