Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/azBgnOTUGeaTnEu2wSFiwbcaL90.roa
File: azBgnOTUGeaTnEu2wSFiwbcaL90.roa (raw, json)
Hash identifier: RuZUWNG11xE3Aa2o8G1TsH+kHxTDSXwvcU2wF7TJtT8=
Subject key identifier: 6B:30:60:9C:E4:D4:19:E6:93:9C:4B:B6:C1:21:62:C1:B7:1A:2F:DD
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/azBgnOTUGeaTnEu2wSFiwbcaL90.roa
Signing time: Thu 15 Sep 2022 02:43:44 +0000
ROA not before: Thu 15 Sep 2022 02:43:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.105.0.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6B30609CE4D419E6939C4BB6C12162C1B71A2FDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:57:69:28:21:3a:56:bb:6c:91:4c:cb:57:
da:1b:e3:3f:38:93:1a:6d:90:4e:84:af:8a:75:95:
cb:cc:4f:c4:16:3a:43:26:a6:03:eb:4a:7f:c7:f0:
5a:7c:72:11:0b:ef:b2:11:76:62:79:19:e6:51:8f:
3e:4a:c9:26:4b:85:48:fc:df:55:9c:95:bb:52:91:
49:73:ff:bc:69:1d:c7:6b:22:a3:6a:dc:ab:fd:fa:
3e:bc:a7:b6:3f:3c:3b:de:4e:c8:3d:1b:4d:34:ac:
a7:3e:6a:04:34:c8:3b:fb:9d:4c:8a:01:25:97:fe:
5c:e2:2b:73:2c:ab:02:17:5f:86:71:db:7a:18:cd:
82:b4:5d:17:9a:30:33:ab:4d:1d:da:7a:d1:c2:f0:
78:97:77:42:e1:56:9c:fc:b8:93:43:2a:0e:cb:15:
f3:71:7f:09:7a:64:4d:df:21:61:19:ea:9a:49:76:
f1:06:11:fe:1e:d1:06:ec:e8:12:9b:38:42:be:51:
2b:c2:ad:e1:02:e6:ea:3f:f7:64:a3:78:7a:99:2f:
bf:44:96:d7:06:62:c2:12:ca:67:7c:0c:91:97:95:
02:01:08:c4:4d:48:1c:e2:6f:66:b1:e1:f7:02:cb:
40:a8:c3:e2:e9:7f:6a:ef:de:12:d9:85:ab:36:e5:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:30:60:9C:E4:D4:19:E6:93:9C:4B:B6:C1:21:62:C1:B7:1A:2F:DD
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/azBgnOTUGeaTnEu2wSFiwbcaL90.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.0.0/21
Signature Algorithm: sha256WithRSAEncryption
86:37:bc:c1:49:02:21:a8:5b:2b:00:76:a5:e3:c3:fb:d5:9f:
7f:47:74:b4:90:2d:2b:01:9a:a3:70:93:06:8a:d1:82:5e:7b:
a4:76:5c:d7:45:b8:83:6f:fb:e9:6c:77:a0:ee:89:9b:af:26:
d0:cb:52:bb:21:34:c5:56:10:83:e2:99:79:2c:e0:5d:05:14:
77:10:14:49:1c:d6:50:29:2c:0b:47:1d:6a:ad:23:78:3f:d3:
41:28:3a:66:01:fc:68:47:9f:29:14:48:78:ef:73:bf:64:87:
c9:36:1a:a7:e1:19:f4:4e:ca:dd:fe:4d:15:e4:2e:e5:cb:24:
15:56:cf:c4:c7:cc:a7:31:f3:04:11:ed:8b:e6:41:99:3a:22:
7f:33:11:4a:de:45:14:2e:5c:60:47:44:de:8e:98:14:a1:d2:
dc:c1:3f:c4:2c:51:65:07:cb:01:20:4d:ee:26:c3:f2:a6:f9:
f9:14:b4:ab:bb:d5:86:fe:be:d8:01:fb:3f:6a:66:fe:69:23:
43:f2:7e:45:5d:4a:a9:08:33:bf:87:bd:31:66:2c:94:16:bf:
6b:fc:62:01:21:6b:e1:74:3b:f8:4f:b1:50:b2:27:f1:35:e4:
24:b7:bd:df:f7:52:e6:ef:63:72:3d:5a:2e:78:48:9a:30:a8:
0c:09:f0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:33:27 2025 by rpki-client