Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/hI1dfUqjBScQkuw044lnQbxtgoE.roa
File: hI1dfUqjBScQkuw044lnQbxtgoE.roa (raw, json)
Hash identifier: 7ts97CG+swVWgW+gPqKXoB67b2TC4JzWGjoBXk6k6o4=
Subject key identifier: 84:8D:5D:7D:4A:A3:05:27:10:92:EC:34:E3:89:67:41:BC:6D:82:81
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C11
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hI1dfUqjBScQkuw044lnQbxtgoE.roa
Signing time: Sun 07 Feb 2021 06:49:35 +0000
ROA not before: Sun 07 Feb 2021 06:49:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 220.228.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3089 (0xc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:49:35 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=848D5D7D4AA305271092EC34E3896741BC6D8281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:28:df:fc:3f:9d:2f:35:0d:66:39:d9:8c:
bd:43:f7:a2:46:da:fd:d9:6d:3e:d0:bf:0a:42:e7:
2f:56:f1:f6:e5:73:07:ec:07:88:e5:9f:7a:3f:54:
ff:ca:b3:98:15:39:f9:fa:ed:eb:4e:72:73:df:db:
80:a2:bd:4f:82:1e:6b:9f:ea:a2:ec:7b:ba:62:29:
05:b5:c2:2f:45:69:41:8e:f7:7c:d0:2b:28:29:bd:
e1:98:28:c2:5b:23:eb:45:ba:f6:ac:c7:5e:0c:01:
d0:a0:f3:69:fb:f1:8e:57:ee:33:e6:f3:b7:3b:a0:
c8:47:ae:19:8d:a5:5e:98:ec:80:a9:69:f4:27:84:
44:64:96:38:19:d8:c8:5c:30:fb:36:e6:0c:9e:28:
73:8b:e5:34:63:9d:f8:7c:27:04:e3:f1:f2:41:61:
35:80:e9:52:c5:5f:95:93:e1:51:b6:da:c2:b4:d8:
0e:b4:07:8a:da:ae:2d:4a:9c:d8:fe:c3:53:bb:9b:
25:c6:60:08:0d:f0:bf:cb:d1:4b:39:ce:9a:25:d5:
7e:40:db:86:4f:a1:96:6a:bb:33:f2:b7:da:c5:33:
e9:e6:23:f7:32:46:52:c6:de:49:8f:e5:f0:0d:30:
e8:ac:e1:cb:c4:82:44:19:6f:9f:58:a6:9a:e7:d9:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8D:5D:7D:4A:A3:05:27:10:92:EC:34:E3:89:67:41:BC:6D:82:81
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hI1dfUqjBScQkuw044lnQbxtgoE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.228.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:7d:dc:80:23:83:45:1d:9a:ca:2c:e0:77:34:a5:61:fd:cb:
1f:8d:80:a4:69:17:a7:ce:4b:dc:37:ab:88:08:e7:e3:7b:ab:
05:a5:e8:a8:d7:71:a1:95:08:a9:28:af:14:af:37:8d:8e:78:
e6:c6:02:2e:68:0b:f1:b9:98:38:b0:d7:7d:59:d0:73:53:82:
af:8f:f1:bd:8e:3b:b9:c7:fb:d0:60:f4:a0:e0:2a:a6:bb:ed:
6b:20:94:d4:ae:c2:22:02:c8:1d:c4:ff:91:10:08:e0:c8:e9:
ca:d7:c4:45:61:dd:6a:0e:62:bf:c8:49:03:db:e2:a0:ed:ce:
f1:ea:d1:e2:bd:e0:a8:50:83:ce:61:6e:0b:28:50:48:d4:a4:
fc:91:b1:a7:08:c6:a3:c6:bf:c8:57:4a:c0:0a:47:19:b6:a1:
4b:49:fc:aa:cc:39:f0:1d:d6:8c:57:06:7e:6d:2f:d1:39:63:
0a:00:58:2b:f2:94:11:19:53:86:02:e6:7d:73:01:e8:15:d5:
32:68:fc:e0:ec:e2:ae:52:4e:53:6a:67:28:82:7d:eb:d4:8e:
af:50:08:a2:1b:0f:a1:4c:56:1a:78:39:b0:56:13:7e:aa:d5:
58:8d:10:9d:e0:56:1c:b3:93:13:9c:1d:ee:c9:de:f0:9f:31:
63:2c:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:25:29 2025 by rpki-client