Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/aeVMrASUIfLJzGyJXInMQ1xaAkI.roa
File: aeVMrASUIfLJzGyJXInMQ1xaAkI.roa (raw, json)
Hash identifier: fwpRzcl3Szc+AYGFBTXUTIWUWCNY3+ObBlX+Y/e9lN4=
Subject key identifier: 69:E5:4C:AC:04:94:21:F2:C9:CC:6C:89:5C:89:CC:43:5C:5A:02:42
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0911
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aeVMrASUIfLJzGyJXInMQ1xaAkI.roa
Signing time: Tue 29 Sep 2020 09:52:45 +0000
ROA not before: Tue 29 Sep 2020 09:52:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 175.180.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2321 (0x911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=69E54CAC049421F2C9CC6C895C89CC435C5A0242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c8:21:a9:a3:0a:13:c8:37:b2:f0:94:a5:71:
ff:02:d1:06:56:73:14:73:4b:40:e7:93:c4:50:f2:
82:5f:a7:88:ea:fe:27:76:9a:32:dc:b9:4b:c9:c8:
46:3b:5c:03:68:57:cf:b5:ca:80:8b:65:c2:a7:e8:
5d:a4:ca:00:0e:eb:ca:14:a2:5a:72:27:87:95:95:
64:59:9e:54:0e:d7:27:4f:da:b8:ce:d5:ea:61:85:
98:51:1a:0b:27:f5:8d:66:17:2d:33:03:56:e2:55:
69:c9:66:a0:ad:77:0e:55:38:b1:e9:a5:9c:69:79:
ac:12:34:44:5b:3a:bd:e8:88:12:ec:79:2d:4f:07:
4b:96:64:87:83:23:4c:4d:70:d1:5d:1a:db:fe:cc:
a2:fd:f7:8f:39:0a:53:76:73:06:88:c9:10:d5:f4:
0b:ad:2c:c4:d8:1a:14:2d:2c:dc:bc:a4:6d:79:c8:
99:08:00:49:77:e5:61:1c:40:68:78:7b:b8:1b:dd:
a7:2e:c9:1e:17:91:5c:c2:2c:f6:03:3e:9b:a9:c9:
b8:e9:0a:f0:2e:d1:52:2e:00:d8:43:f9:1b:fb:57:
45:33:fd:3d:11:6c:9e:17:2f:2c:63:48:62:df:a9:
13:7f:aa:5c:fb:47:6b:2d:37:e8:78:e7:d6:9e:d1:
46:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E5:4C:AC:04:94:21:F2:C9:CC:6C:89:5C:89:CC:43:5C:5A:02:42
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aeVMrASUIfLJzGyJXInMQ1xaAkI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.180.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:16:04:e0:b5:1a:88:4d:47:85:cf:30:04:e0:f1:c4:62:5e:
75:b6:25:08:c1:7a:77:de:a8:c4:32:a8:c7:a0:f6:2d:87:20:
20:c8:5b:48:02:c6:68:41:55:43:16:a6:00:7b:61:52:08:66:
1e:ff:45:f7:2e:fc:d8:20:a1:ea:09:2b:ab:c2:2b:fa:76:18:
f3:f0:2d:c5:7f:21:2a:e1:d9:4b:e1:5d:14:5e:fb:43:4e:48:
64:7e:4f:b1:64:9a:82:c0:cf:a4:5f:55:62:05:a7:3f:6b:62:
1d:f3:38:ec:5c:07:6d:1b:dd:8a:f3:21:ac:5b:6c:c3:b1:d0:
da:1c:8d:d3:b5:c2:15:13:31:a7:d8:0a:b6:17:19:f0:94:b6:
6b:c6:f5:b8:36:9c:8b:64:b5:31:c8:8d:31:83:77:9d:45:64:
3d:fb:38:d2:d8:13:b9:96:f0:31:a4:8a:1c:e4:03:66:a0:c1:
02:3f:71:3a:9c:de:4e:37:08:21:9e:36:5c:43:59:7e:38:e3:
e5:f1:73:51:2b:5c:2a:34:69:8c:28:a5:bd:bf:3a:96:02:02:
94:b1:06:57:32:f2:05:60:51:09:84:14:dc:eb:15:c8:2c:4d:
9a:d2:0a:fd:1c:d7:a6:3b:eb:0d:5d:34:a3:b0:af:70:20:52:
8b:91:2d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:13:44 2025 by rpki-client