Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fCscbbhBHUITxQFS0cdgSkITvYA.roa
File: fCscbbhBHUITxQFS0cdgSkITvYA.roa (raw, json)
Hash identifier: lJlLicoH+zVtefD5DiKIXT13Q8xvIsThob9ydrJsOrA=
Subject key identifier: 7C:2B:1C:6D:B8:41:1D:42:13:C5:01:52:D1:C7:60:4A:42:13:BD:80
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08D5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fCscbbhBHUITxQFS0cdgSkITvYA.roa
Signing time: Tue 29 Sep 2020 09:52:30 +0000
ROA not before: Tue 29 Sep 2020 09:52:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 220.229.66.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2261 (0x8d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:30 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7C2B1C6DB8411D4213C50152D1C7604A4213BD80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:26:47:5f:57:19:cb:13:54:52:35:dc:4f:54:
3c:2e:d4:cd:2e:17:6b:0c:3d:27:0f:03:ba:8e:88:
84:41:01:fa:fe:bd:1c:11:ba:62:9f:e5:0a:a3:c4:
07:a3:aa:70:42:e6:3e:52:79:5f:4f:66:99:bd:df:
c7:f9:00:df:4d:bc:b5:b2:76:1a:cc:b2:f1:42:17:
1b:63:d8:11:57:43:50:9c:ff:1d:14:2a:10:8d:c8:
52:fa:d8:4a:8b:3d:bb:1e:dd:b4:6b:ac:88:68:bd:
de:6d:5a:be:11:47:64:c9:d8:8f:fc:5f:c2:e7:ea:
ff:ed:ac:b4:c5:5d:5b:31:ab:e9:ce:34:7b:01:01:
b9:cc:59:ff:da:a2:6d:78:90:a2:7f:99:8d:05:9b:
67:ee:29:85:59:f7:13:bd:85:35:b1:57:88:cd:f7:
3c:89:36:6a:f7:1a:b8:a2:31:91:f3:ef:4f:f7:a2:
1a:a8:22:7a:ce:3b:cc:07:8d:5f:65:e9:3f:fc:22:
ec:b4:37:c4:98:25:f9:11:58:a8:b8:3c:ef:45:13:
14:ee:fc:12:aa:ff:c0:68:b3:54:15:a6:dc:ea:c0:
bd:4a:8c:39:ae:0a:9d:73:33:20:6a:20:80:e0:ac:
42:2e:df:fb:99:22:f5:74:cf:a9:ce:3d:30:a1:9c:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2B:1C:6D:B8:41:1D:42:13:C5:01:52:D1:C7:60:4A:42:13:BD:80
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fCscbbhBHUITxQFS0cdgSkITvYA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.66.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:8c:46:dd:ae:2c:fc:e7:e4:b8:79:bc:f1:f2:33:5b:57:88:
19:47:4c:76:3d:bc:bf:fd:8a:53:83:e3:8c:3d:12:49:d3:1e:
d4:ba:85:c0:b8:c6:25:3b:1a:a6:9d:c1:cf:79:93:95:b1:3a:
bc:67:ad:8e:36:92:a9:68:dd:71:56:6c:ed:76:75:42:d1:21:
77:13:b4:bd:ec:5f:0f:ff:6f:95:3c:3f:b6:2f:e3:05:1c:b8:
69:dd:09:73:ed:30:ab:b6:ba:f2:af:da:a8:6f:1b:99:05:fb:
e1:26:c9:6e:c4:d0:a9:88:91:6a:b4:49:ac:01:8a:ea:e3:7a:
df:cb:ea:70:f1:e6:aa:6e:a5:52:6d:4b:29:6e:a3:c3:77:8e:
71:6a:f6:33:c7:8c:a7:d7:08:30:ca:b0:90:9d:02:f6:32:49:
c2:ba:dd:76:88:88:35:dc:f4:f8:cb:0d:6c:d4:85:91:81:cd:
95:55:65:cb:05:97:e1:e9:d4:9f:43:1a:ca:45:77:18:f0:84:
84:38:6a:2f:02:ce:62:dc:d3:a2:b1:94:ae:a5:27:f8:db:fc:
5e:96:f5:73:de:53:00:a9:77:8a:ad:37:94:79:b5:2d:d0:53:
a8:2d:32:48:4e:d1:c7:9e:cb:17:78:83:25:50:67:2e:69:09:
6f:dd:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:06 2025 by rpki-client