Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/c2E_TfgFIz-ii8Yn1xzQYYXrMcQ.roa
File: c2E_TfgFIz-ii8Yn1xzQYYXrMcQ.roa (raw, json)
Hash identifier: u/odVp1N+bd8U669z+MbtwXoVQ3hLAXFbxi8BjPekxY=
Subject key identifier: 73:61:3F:4D:F8:05:23:3F:A2:8B:C6:27:D7:1C:D0:61:85:EB:31:C4
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c2E_TfgFIz-ii8Yn1xzQYYXrMcQ.roa
Signing time: Thu 15 Sep 2022 02:43:17 +0000
ROA not before: Thu 15 Sep 2022 02:43:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 192.72.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3183 (0xc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 15 02:43:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=73613F4DF805233FA28BC627D71CD06185EB31C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:53:f1:93:79:96:ce:79:f4:4c:2d:3b:b4:5d:
ac:e6:1f:42:50:f0:a1:7e:36:72:23:29:f4:fc:f8:
a3:63:f4:a7:b8:4c:ee:a1:c0:8a:39:08:83:69:11:
3a:e3:ee:8e:77:3b:79:d5:86:16:72:4d:ba:c5:71:
ca:80:83:ee:7b:08:1f:d4:e7:38:a4:f0:a4:54:d7:
9e:16:7b:a8:b4:c2:d1:71:0f:b8:67:95:3d:0f:a0:
c5:76:ed:5b:89:3d:50:3b:f9:19:b6:63:10:42:96:
31:82:e0:57:ec:72:57:98:d8:0d:0b:87:11:a7:cd:
e5:6e:d8:7f:6c:e8:8a:76:08:7a:21:af:d1:97:d5:
e2:ca:60:7b:86:1d:ef:48:73:8b:ef:6a:67:2f:f9:
16:7b:aa:77:81:2c:2c:39:25:c9:4c:57:90:31:a2:
29:2b:d6:9e:86:55:02:0d:17:72:6d:c2:a2:1f:b4:
e7:a6:64:d8:74:ee:75:59:27:1a:b7:a4:c8:33:77:
13:dc:44:d9:9a:91:25:4d:df:04:63:22:64:a8:84:
3b:ef:79:48:d7:27:a6:27:1a:72:0a:34:a9:ba:9a:
47:54:82:b9:a1:0b:db:03:b4:be:73:35:3a:e7:db:
38:75:56:aa:3d:1c:e6:87:c1:01:70:73:c7:32:f8:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:61:3F:4D:F8:05:23:3F:A2:8B:C6:27:D7:1C:D0:61:85:EB:31:C4
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c2E_TfgFIz-ii8Yn1xzQYYXrMcQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:04:48:96:83:bc:72:72:20:9a:55:9a:1d:e9:f0:8f:21:f0:
bb:bf:08:a4:5b:be:b1:40:e5:e8:b3:ad:0f:d5:f5:a9:7e:56:
c4:3a:2b:1c:be:35:a8:df:50:b9:ef:43:38:af:2a:cf:9d:9b:
0a:8f:da:01:83:bc:30:b6:cf:0b:47:98:43:98:40:73:61:27:
43:5a:0f:1f:fb:aa:62:56:b1:2c:48:f0:87:b7:e2:80:cc:3f:
71:16:81:17:b4:0b:58:58:88:de:cf:b1:80:73:f5:b7:87:1d:
4c:3f:b4:66:e0:f6:03:7c:e2:95:dc:c4:64:21:cf:3e:44:63:
cd:60:33:34:f7:3d:41:4b:cf:2a:6e:ae:86:dd:79:a6:21:89:
b0:b3:97:e5:b5:bf:50:21:18:34:05:e8:b6:cf:b7:91:84:5f:
91:df:b6:8c:35:32:31:97:e0:95:25:36:20:b0:fc:ea:d6:e8:
04:48:c4:e6:d0:5e:70:65:df:a2:45:75:6e:1a:95:66:ba:6c:
c1:69:c9:c2:a7:12:32:7b:7e:3a:5b:df:1b:3e:c6:9f:32:fe:
12:25:16:95:c9:57:be:43:57:17:87:0a:56:ef:e0:98:8d:6e:
48:bd:7d:79:41:8c:9a:c9:02:28:28:4d:8d:05:fb:81:a3:08:
20:6f:67:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:34 2025 by rpki-client