Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_PBUFXninJtWYG5fXOge3R9lhF8.roa
File: _PBUFXninJtWYG5fXOge3R9lhF8.roa (raw, json)
Hash identifier: z0UJTHnquj9TVjdqTQQCaMspuNGfdQ4XOsB1jHbMGRs=
Subject key identifier: FC:F0:54:15:79:E2:9C:9B:56:60:6E:5F:5C:E8:1E:DD:1F:65:84:5F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13C9
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_PBUFXninJtWYG5fXOge3R9lhF8.roa
Signing time: Fri 01 Sep 2023 09:25:26 +0000
ROA not before: Fri 01 Sep 2023 09:25:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 211.78.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5065 (0x13c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:26 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FCF0541579E29C9B56606E5F5CE81EDD1F65845F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:ec:46:1a:1e:a0:3e:e1:20:bd:ee:43:8b:
bb:3c:7e:57:43:33:24:1a:99:b3:b3:62:bd:a8:a9:
63:4e:45:3b:8b:77:23:e0:a1:0b:b0:ce:f8:73:b2:
5d:29:6c:59:69:43:5d:a4:08:59:c7:ec:68:3d:ec:
7c:83:fb:86:b4:7a:42:50:12:fd:be:81:8e:d9:d8:
d6:a6:46:46:cb:4d:46:f7:45:9e:ab:05:08:14:ba:
40:09:51:83:c3:48:1a:90:00:f4:8a:6d:d0:e5:53:
16:81:f6:1f:6e:98:93:a5:de:3f:8b:43:40:b7:22:
e2:35:58:b0:bb:05:a8:3c:47:22:e7:ee:b7:89:72:
ad:fa:f7:0f:17:ee:b0:19:c3:69:75:bf:57:d5:6a:
3b:27:2a:6c:c4:2d:53:ac:59:49:ee:df:6a:0d:69:
24:9b:81:e7:df:ab:ac:d1:b6:7f:78:4a:ae:bc:91:
e5:21:e0:2b:c9:d1:03:1b:b6:94:36:9f:a9:0c:be:
fe:f2:b9:a5:4e:76:9e:2a:dd:54:19:e9:4b:78:18:
94:c8:13:7d:fd:a0:f1:c3:12:e1:5c:0f:21:e8:68:
6d:ee:b8:59:4a:bd:20:b0:76:a8:59:bc:bb:ca:65:
cc:d2:eb:b2:2c:a4:f2:c2:ad:1e:9d:db:af:1d:80:
1b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F0:54:15:79:E2:9C:9B:56:60:6E:5F:5C:E8:1E:DD:1F:65:84:5F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_PBUFXninJtWYG5fXOge3R9lhF8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.128.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:be:77:e6:60:d3:a0:97:9b:c0:cd:58:ff:0a:81:74:ce:aa:
ed:7e:bb:04:97:a2:05:bf:05:03:c9:57:90:90:56:c9:ee:04:
f7:05:1b:5c:28:48:f4:94:4d:46:6e:46:50:eb:54:28:ab:4c:
95:51:b3:e2:d2:3f:01:f8:da:72:60:12:8b:43:01:15:87:69:
a8:aa:ff:9b:5e:95:9a:27:e5:e2:f1:1c:7f:54:17:4e:0a:66:
7c:0b:db:7c:16:2b:7e:32:e7:d7:1a:f3:54:f2:0c:76:21:9c:
94:96:e2:e4:de:aa:1b:8d:46:6f:b0:92:73:0a:b6:86:34:85:
4f:55:05:f8:74:d2:e4:65:1b:ed:e0:21:dd:3a:a5:fc:9f:9f:
c4:68:a0:4a:17:a6:e7:49:23:28:6e:89:57:e6:dd:39:ee:b1:
54:a7:17:75:96:92:10:25:7d:2f:f0:0b:ac:c5:68:af:1e:b8:
07:23:d9:6a:43:4a:80:35:08:00:63:e2:82:36:eb:ec:52:5e:
f1:4a:a9:9d:b6:df:00:b6:9d:7d:c6:b1:82:13:7d:39:c9:b6:
cf:cc:0f:aa:c3:da:eb:2a:c2:97:6b:5a:33:69:4a:54:35:fc:
d6:20:bd:5e:cb:4f:d2:b8:a2:12:ec:af:60:7a:55:89:a4:68:
3c:d2:5a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:57 2025 by rpki-client