Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/a5f4rkhZkKFGWWoeXQQDyi3zURs.roa
File: a5f4rkhZkKFGWWoeXQQDyi3zURs.roa (raw, json)
Hash identifier: jXYAhVt1gWY039ETcyHIZmNH/MF3cU1FXxDDksqUhdg=
Subject key identifier: 6B:97:F8:AE:48:59:90:A1:46:59:6A:1E:5D:04:03:CA:2D:F3:51:1B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E32
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/a5f4rkhZkKFGWWoeXQQDyi3zURs.roa
Signing time: Wed 29 Sep 2021 02:43:17 +0000
ROA not before: Wed 29 Sep 2021 02:43:17 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 218.210.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3634 (0xe32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:17 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6B97F8AE485990A146596A1E5D0403CA2DF3511B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:4b:ab:3f:26:f6:70:68:08:cb:87:0b:bb:
b0:70:d0:2d:68:71:fa:fa:3f:30:14:54:86:cf:f9:
d8:8e:cc:0a:f0:a0:89:e1:37:f0:4b:b1:a0:8d:9e:
b2:91:60:6c:39:67:81:c6:f0:a3:71:b7:36:7a:ac:
34:50:9b:8b:1f:b1:c7:06:01:87:b2:64:19:b6:20:
73:bf:50:e6:f2:14:7c:12:f1:49:30:f5:f7:97:dc:
36:4f:36:c7:eb:03:61:f7:2b:d8:a3:60:5e:17:e7:
3b:21:ef:49:3a:32:f4:b9:c0:d3:a2:fa:e0:3a:21:
f7:4d:d1:3d:fc:66:65:90:10:de:51:84:a9:6a:22:
c1:ef:8b:b6:f8:f7:f1:b0:b7:7a:4c:79:f5:1f:25:
73:ab:93:fe:97:7c:f9:22:d3:54:cc:92:2e:0c:e4:
35:6a:8a:f9:5e:25:70:4c:13:b8:8a:c3:fd:dd:bb:
64:01:f8:a5:ab:63:04:79:bc:f8:c6:7c:ae:fd:bd:
4a:c5:bd:8a:cc:26:65:dc:bd:e5:6d:42:93:e5:39:
dc:65:b0:fa:78:3a:5f:13:d7:15:8e:cb:a6:9f:75:
fb:b2:ee:ef:00:5f:d0:3a:ce:a7:9f:f5:2e:ce:ea:
48:e6:75:63:d7:7a:1e:29:84:72:7a:d9:8d:f1:d3:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:97:F8:AE:48:59:90:A1:46:59:6A:1E:5D:04:03:CA:2D:F3:51:1B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/a5f4rkhZkKFGWWoeXQQDyi3zURs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/15
Signature Algorithm: sha256WithRSAEncryption
90:c9:e5:04:90:6e:7d:a6:97:60:d0:f4:e8:7a:22:86:87:e5:
04:f6:fb:3e:fc:06:79:2e:c9:b9:cb:c3:92:a5:6c:1c:89:b6:
70:d8:e1:02:dd:b3:ac:eb:33:73:04:b1:2e:61:eb:36:5d:94:
c5:c0:1a:78:88:78:8c:ef:bc:a5:53:43:ab:1d:72:66:57:a8:
e1:f8:f2:47:11:ee:5a:e0:c6:82:d9:03:fb:f9:ae:3a:78:9b:
47:0a:fe:18:e9:b4:f2:da:38:1b:50:95:61:98:17:37:6b:b4:
55:ee:f7:60:e3:bb:d8:54:2e:a7:ad:e2:b0:54:3c:49:be:4c:
13:41:94:32:6f:1a:8d:2b:06:ea:cf:5f:45:f7:7c:c3:27:43:
87:58:58:0f:91:87:91:4e:56:c7:68:84:ab:9c:f1:ee:fa:44:
52:b7:a4:c1:56:e2:d0:37:89:1d:72:71:3f:d4:44:fe:ba:c1:
d6:ae:f8:c4:9d:0a:24:30:59:f8:03:a9:83:25:7b:7f:7f:0f:
2f:71:2c:0c:b9:46:d3:25:d0:4a:ef:2f:e7:4e:0b:b7:e5:8a:
76:15:31:e1:23:db:26:6d:24:f7:cc:67:fd:a7:da:2d:2e:62:
98:36:59:18:71:46:df:e1:19:a0:80:13:21:f1:ce:8f:c8:69:
9f:26:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:03:59 2025 by rpki-client