Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_hf6oNwHGQ10tEJcSn7X9O398_M.roa
File: _hf6oNwHGQ10tEJcSn7X9O398_M.roa (raw, json)
Hash identifier: SLfVmbon/5fp0LrKkFP3wZdEYwlMD1z5STetNEKOzyU=
Subject key identifier: FE:17:FA:A0:DC:07:19:0D:74:B4:42:5C:4A:7E:D7:F4:ED:FD:F3:F3
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_hf6oNwHGQ10tEJcSn7X9O398_M.roa
Signing time: Thu 15 Sep 2022 02:43:15 +0000
ROA not before: Thu 15 Sep 2022 02:43:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 192.72.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3183 (0xc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 15 02:43:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FE17FAA0DC07190D74B4425C4A7ED7F4EDFDF3F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:c5:84:a9:21:c4:29:e7:e6:64:94:a6:5c:
0b:60:0e:74:67:18:63:bd:df:46:94:77:01:10:eb:
df:9e:63:c3:15:fb:75:35:30:f7:2a:bf:5c:24:a9:
ec:e9:af:14:40:ee:c6:33:08:d3:90:e5:0c:69:6f:
88:7c:05:50:c9:9b:0a:73:86:41:04:5e:cb:1c:eb:
d1:84:3f:5b:ed:d2:46:21:ba:37:3e:24:ea:31:61:
cb:ac:f6:29:3d:f6:b8:60:fe:25:e9:a1:e1:19:31:
71:fd:7d:ab:4e:b4:e4:9e:19:19:11:96:09:c9:b2:
8f:f3:ff:e8:73:0e:7c:cd:a5:7a:82:ef:08:c7:23:
cf:19:d7:80:a3:50:f5:7c:7e:93:59:2e:7b:33:f2:
cb:c0:38:07:da:6c:62:2c:ae:02:88:45:d1:b0:80:
fb:a6:2e:9b:85:8d:b3:82:4c:e6:01:32:b9:bd:88:
55:23:a6:42:ba:da:0d:f6:4c:3f:67:71:ac:ee:f4:
0b:df:77:64:51:10:76:b3:1a:f3:8b:d4:ff:3a:4f:
d5:26:60:b5:68:9e:ad:84:6a:8c:20:76:ef:f1:ed:
c5:31:eb:ea:26:1e:b2:4a:ae:8d:ab:53:b1:66:66:
66:30:9c:98:31:85:46:7b:81:44:a6:48:b9:91:c5:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:17:FA:A0:DC:07:19:0D:74:B4:42:5C:4A:7E:D7:F4:ED:FD:F3:F3
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_hf6oNwHGQ10tEJcSn7X9O398_M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.8.0/21
Signature Algorithm: sha256WithRSAEncryption
26:c2:a8:af:91:ba:9b:fa:c7:85:ff:8e:e6:1f:f8:1a:4a:d1:
ed:ae:75:3f:e3:44:54:53:cc:af:24:0f:13:80:1f:a6:9e:fe:
c8:ad:4c:c5:61:e2:73:6b:d3:cb:04:ea:97:b5:37:da:d9:18:
89:37:d9:7f:39:ca:a2:8b:44:2d:74:03:0a:0f:3b:bf:0b:14:
16:82:41:63:02:91:9c:e8:8d:6e:ed:3f:04:12:fc:49:3a:9a:
c8:de:f6:d9:f5:5a:7f:59:35:26:00:9f:af:a1:cf:40:b3:6b:
54:6e:c4:8c:df:4b:97:41:19:d8:77:6e:67:ca:ff:97:51:4c:
90:30:cd:69:70:b9:68:64:23:0a:09:4d:53:29:56:02:a0:18:
06:cd:64:56:9f:7b:b7:2d:d9:8d:55:04:07:a9:fc:db:ef:68:
e6:1f:51:44:b8:d0:78:a4:b5:da:0e:38:f8:9a:42:3d:99:9b:
19:00:06:93:65:42:2f:67:e8:9b:1f:c7:44:51:6c:c9:c6:7b:
68:79:8d:bd:eb:1a:77:2f:dd:4d:b9:f4:55:47:98:12:fa:38:
aa:08:e9:06:90:35:b3:57:f2:5f:1a:6c:92:1e:35:96:c1:b1:
5a:1a:c2:b1:6e:e5:c0:43:98:0f:f4:c0:0c:94:44:b9:0a:4e:
13:e3:4d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:36:19 2025 by rpki-client