Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/dTNjgUT1SMCy-K5Fz7eipsu21iA.roa
File: dTNjgUT1SMCy-K5Fz7eipsu21iA.roa (raw, json)
Hash identifier: 7B5392Op+g6967s6GTfGJrx0r4V6tFcyc9alG5DUIrU=
Subject key identifier: 75:33:63:81:44:F5:48:C0:B2:F8:AE:45:CF:B7:A2:A6:CB:B6:D6:20
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dTNjgUT1SMCy-K5Fz7eipsu21iA.roa
Signing time: Thu 15 Sep 2022 02:42:57 +0000
ROA not before: Thu 15 Sep 2022 02:42:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 106.104.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7533638144F548C0B2F8AE45CFB7A2A6CBB6D620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:7e:46:f5:d9:f8:09:8a:5e:42:59:61:2d:
d8:e6:66:75:79:eb:1f:16:9b:be:15:2c:2b:59:28:
79:6f:73:69:e3:73:9a:27:07:2a:3f:f7:ec:2f:5f:
7d:e3:80:b8:32:b6:6a:69:e7:fb:1e:23:4d:35:7e:
7e:40:39:62:08:d2:31:11:16:bc:28:73:a5:0c:f6:
2b:b0:f2:5f:32:eb:0b:df:1d:8f:5b:10:a7:4a:ea:
cd:b4:45:90:41:a0:b3:de:f4:98:ad:7b:bf:14:42:
36:58:8e:ec:1c:ef:06:8a:af:8b:b0:9b:44:c2:59:
d4:0c:07:fb:d6:55:bd:68:89:8a:c3:c3:26:e4:db:
68:23:1b:27:99:3c:5c:f2:70:0d:a8:27:e4:ac:75:
59:2b:cb:7f:ab:36:94:7c:53:2d:bc:5e:8a:fe:3a:
f4:82:44:d7:e3:d3:f8:b1:5a:32:87:be:e2:46:23:
92:7e:4d:58:93:cf:ba:42:e5:64:f0:8a:07:4b:8d:
b1:9e:a6:da:14:2d:d5:e4:f7:45:c5:e0:90:2f:40:
06:de:a4:51:c4:7a:fb:9e:16:f2:5c:e3:34:01:a0:
26:4a:40:ef:f8:d5:89:9a:9e:cd:d9:ea:01:9d:84:
f9:38:1f:44:5f:50:87:ee:a2:1f:6b:f6:4c:6d:3a:
be:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:33:63:81:44:F5:48:C0:B2:F8:AE:45:CF:B7:A2:A6:CB:B6:D6:20
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dTNjgUT1SMCy-K5Fz7eipsu21iA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.104.0.0/14
Signature Algorithm: sha256WithRSAEncryption
24:e3:96:7e:1c:fe:09:f4:7d:db:5b:78:f1:57:09:3a:bc:02:
d1:9d:89:35:cc:5e:e0:76:93:a1:af:ad:92:48:e9:f0:b3:c0:
35:38:42:8a:a7:be:3f:e2:a8:51:b3:31:65:b0:6d:08:50:24:
e3:d4:4b:7c:47:00:49:de:e2:0b:d5:be:40:80:09:39:f8:fc:
f7:ed:4e:2b:cc:52:02:9c:14:00:c0:83:38:af:a2:b5:48:7b:
9e:8b:70:77:20:f2:a0:ea:3f:9d:e1:fb:92:f0:ce:96:4b:c8:
85:e1:4a:0e:09:13:45:ab:64:d9:7c:e5:07:b6:69:c5:75:b4:
62:26:dd:02:8c:45:cd:a1:6b:44:94:07:82:0b:86:47:9d:d0:
d4:00:91:ea:72:b8:87:37:89:b7:d0:4e:83:85:f3:cf:30:dc:
b9:be:18:a3:ea:75:14:28:d7:13:e3:8c:ea:82:f6:dc:71:9f:
04:f5:77:61:27:07:c4:94:2e:3a:89:77:df:41:d0:c4:03:93:
43:47:0f:a2:fd:c1:42:c3:23:70:96:37:36:16:24:da:63:1a:
67:72:ae:32:86:e1:61:da:b2:9c:8a:2b:91:5b:90:b7:34:bf:
e8:a6:03:d3:d7:52:a6:ed:ad:2d:1d:fc:58:cb:2d:f8:49:ee:
30:43:73:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:33:27 2025 by rpki-client