Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/goTg-EIumrHgBtwlV4SnvoqMQoU.roa
File: goTg-EIumrHgBtwlV4SnvoqMQoU.roa (raw, json)
Hash identifier: MSU3twb2kiPtEqngPNjDw+A5SzpABC0suokOiQdYITE=
Subject key identifier: 82:84:E0:F8:42:2E:9A:B1:E0:06:DC:25:57:84:A7:BE:8A:8C:42:85
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1370
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/goTg-EIumrHgBtwlV4SnvoqMQoU.roa
Signing time: Fri 01 Sep 2023 09:24:56 +0000
ROA not before: Fri 01 Sep 2023 09:24:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 218.210.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4976 (0x1370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8284E0F8422E9AB1E006DC255784A7BE8A8C4285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f4:da:e8:65:59:fd:91:b0:47:b3:82:4f:f7:
e3:15:94:c0:c1:72:22:bb:78:d4:f3:c7:f4:b8:9f:
76:88:ab:a2:6c:e0:0d:ac:e4:43:a5:36:e9:dc:cc:
d2:b3:50:e6:0d:8d:aa:86:4b:15:f9:3c:f4:05:18:
5a:93:fb:87:ce:e8:b6:92:75:db:a1:cd:b5:4c:dc:
f1:8d:2c:33:ba:dd:f7:49:4c:5b:23:aa:44:ef:f2:
c3:62:3b:6b:1d:2e:c1:07:9d:ee:98:63:2f:e3:a9:
e8:ed:ab:50:ad:4b:ef:3a:8e:6c:5d:e5:4a:ea:86:
78:45:f7:0f:f0:18:75:53:de:71:c6:bf:3d:ef:2c:
88:57:27:31:fd:dd:02:b8:a5:44:1f:6c:4c:e1:9e:
5c:3a:5a:4e:f2:3c:f0:e2:b8:d7:53:c7:9d:d6:10:
c2:bd:dd:ab:3e:de:8b:96:29:3c:6f:f1:a6:45:9b:
87:6f:03:bc:df:23:d5:69:7b:9a:9c:29:c9:e8:b6:
6e:21:28:7d:51:54:dc:77:ba:e1:fa:f5:5d:bd:d4:
d2:5f:d9:b5:55:2d:a1:77:5a:1c:11:6f:46:21:ba:
e0:a1:90:91:f8:3e:87:ca:6d:bd:44:33:7c:3c:c4:
14:45:95:8d:aa:aa:f2:a8:c3:0f:47:e9:02:65:ed:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:84:E0:F8:42:2E:9A:B1:E0:06:DC:25:57:84:A7:BE:8A:8C:42:85
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/goTg-EIumrHgBtwlV4SnvoqMQoU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:bb:0a:53:72:6b:dc:e8:cf:1c:dc:94:71:ba:52:19:21:c7:
77:f8:f2:ec:a8:48:46:f9:16:51:2b:bc:2c:76:d8:88:8c:6f:
a6:36:9e:1b:e6:fd:49:5a:dc:1b:9a:e5:99:9b:2b:bb:a3:ee:
01:02:62:24:85:6f:a0:b6:17:8f:26:9e:ff:23:48:4d:c2:03:
10:32:9a:14:6f:52:1a:a4:60:01:16:e1:69:08:03:97:36:96:
b7:a7:83:52:36:f4:86:67:08:af:00:78:9a:d3:f4:33:1c:27:
f9:29:e0:f0:c0:17:b9:b7:65:e4:9a:49:19:fe:d9:99:70:bc:
5e:a3:66:b1:5b:20:34:13:dd:df:8a:36:b4:2f:0f:06:fc:35:
df:02:65:21:b8:e4:2d:f5:34:bc:a2:f9:e4:d6:6d:df:28:b0:
e9:7b:ae:bd:d4:c0:7d:ca:12:69:19:04:8a:45:68:f0:02:cd:
d9:26:f8:36:47:7a:08:e8:99:d3:10:1d:37:e7:f1:a3:ca:6b:
a7:24:bb:e0:4a:fd:35:3d:ed:c3:ef:d7:1b:f6:c7:05:0e:b1:
10:43:67:44:6f:24:41:f6:6b:83:fb:3b:56:05:77:da:3c:83:
0b:9b:2d:cd:c7:61:2f:c1:1f:67:1a:31:2d:30:3b:d4:56:69:
38:44:c5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:10 2025 by rpki-client