Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/c4inRpMaDKPKaRB6bkC7Ys_Z2t4.roa
File: c4inRpMaDKPKaRB6bkC7Ys_Z2t4.roa (raw, json)
Hash identifier: HzxeQ3kFI/PXQev4VHHQDU63DcgQ2/3MiJEi6h3ODYQ=
Subject key identifier: 73:88:A7:46:93:1A:0C:A3:CA:69:10:7A:6E:40:BB:62:CF:D9:DA:DE
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08C5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c4inRpMaDKPKaRB6bkC7Ys_Z2t4.roa
Signing time: Tue 29 Sep 2020 09:52:26 +0000
ROA not before: Tue 29 Sep 2020 09:52:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 106.104.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245 (0x8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:26 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7388A746931A0CA3CA69107A6E40BB62CFD9DADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:c5:13:ba:1e:20:d1:6d:37:6a:59:20:b9:
ef:9e:75:11:89:30:49:9a:7d:cf:c8:d9:44:ed:9d:
dd:60:bb:55:56:0c:16:ef:be:fe:3b:35:a7:e0:58:
4b:a7:8a:cf:d7:10:21:c9:28:39:3d:f1:58:56:25:
e6:20:6c:4b:36:ee:8c:18:4e:b6:52:0b:b4:c0:ac:
d3:fb:e6:e4:e7:ed:a9:14:8c:7e:21:7f:f6:f6:ab:
49:90:d8:21:8e:56:eb:3f:16:b8:b1:ad:c0:8a:17:
a6:60:eb:f5:1c:b0:d6:e0:c6:dc:17:61:10:09:4e:
6b:ef:c8:b4:ea:5f:43:76:29:95:ca:57:d1:7e:2e:
fe:4e:17:40:5f:fd:7f:28:a5:50:61:13:34:5a:67:
ee:02:e6:78:c3:dd:69:10:a4:be:90:cc:6f:35:3a:
82:7e:37:17:89:81:44:af:d0:c2:11:bb:d3:55:a2:
1a:8c:3b:b0:a8:ee:65:67:9b:f1:70:a2:d6:7a:43:
46:b5:d2:e3:dc:fc:52:ce:fd:59:75:ef:3e:f8:6c:
0e:ed:dd:47:1a:2e:3f:57:d1:5f:11:f0:7f:37:fa:
2b:e3:a4:7a:6b:d1:0c:09:b2:e6:ce:ab:5c:3c:bc:
41:07:28:5f:56:43:c8:7e:da:07:78:e9:b5:ab:63:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:88:A7:46:93:1A:0C:A3:CA:69:10:7A:6E:40:BB:62:CF:D9:DA:DE
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c4inRpMaDKPKaRB6bkC7Ys_Z2t4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.104.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:75:b7:74:0f:b5:74:42:56:f0:84:48:0e:2e:fe:b3:bd:0b:
62:45:c7:60:ae:fd:45:c6:ec:ed:22:be:e4:49:f7:1a:30:e3:
c6:6e:cc:c3:0f:2f:18:33:6d:e1:1d:8a:a4:4d:4c:ba:bd:f2:
3f:b4:0e:b4:df:95:1b:12:c5:e5:4d:3d:05:fb:e9:28:27:ef:
83:05:04:ba:5d:86:d7:48:7a:45:2e:a7:5b:12:1b:20:3f:ba:
04:a3:6f:38:d2:66:5b:8f:40:b8:49:d3:7a:fa:09:dd:30:5d:
dc:d7:88:16:94:f5:02:b1:a5:76:84:3b:ec:4d:8e:4c:9b:0d:
02:d0:60:0e:98:d0:38:81:04:62:7c:9e:bd:e3:74:fb:c2:3c:
a7:ce:20:44:d7:c9:1d:b3:18:73:82:4b:3e:eb:a2:84:d7:f3:
04:2c:0d:9e:af:3b:bd:3d:67:ce:a1:a0:9a:79:1b:09:37:4f:
50:b4:cf:d3:cf:be:90:5c:72:74:6f:c3:6a:70:50:7d:9d:7c:
41:bb:f0:22:2d:16:06:48:af:a3:33:a6:24:be:65:25:9f:c2:
f3:71:de:e1:aa:41:5e:71:7f:80:29:14:ea:9e:da:8e:2b:59:
c0:a0:c8:c8:0c:50:90:c4:08:c5:24:29:18:a9:a1:d8:3d:19:
d5:a6:45:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:16:06 2025 by rpki-client