Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/hN59uKD2R4LfoZkoD3gk3ytE-GY.roa
File: hN59uKD2R4LfoZkoD3gk3ytE-GY.roa (raw, json)
Hash identifier: /vKTF6WO0noI3w+K/KhlXGtZ+XPV37K0hkLu/qHixwY=
Subject key identifier: 84:DE:7D:B8:A0:F6:47:82:DF:A1:99:28:0F:78:24:DF:2B:44:F8:66
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0EAE
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hN59uKD2R4LfoZkoD3gk3ytE-GY.roa
Signing time: Wed 29 Sep 2021 02:43:51 +0000
ROA not before: Wed 29 Sep 2021 02:43:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 220.229.68.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3758 (0xeae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=84DE7DB8A0F64782DFA199280F7824DF2B44F866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:56:c1:f6:72:a5:e9:14:86:f4:23:6e:f5:
1b:9f:b1:69:c6:54:f3:d2:2a:c5:98:2c:82:30:fe:
ee:87:83:0a:71:e5:68:8e:42:a7:4f:26:52:3f:8a:
40:c0:4b:fa:ef:32:46:68:9c:a6:9c:d6:e7:70:b0:
92:ba:39:c2:27:47:e3:4c:d3:c7:ff:6b:06:47:a3:
af:8b:81:62:19:3c:79:06:a1:36:6a:43:9e:c7:67:
41:55:97:fa:68:33:4b:eb:98:51:f7:e5:c1:e9:b3:
71:97:ae:1e:19:7b:64:40:c5:6e:f6:e6:4c:03:e1:
54:cc:92:df:32:66:d3:41:c0:f6:0d:08:c1:e5:45:
90:60:a0:b8:f8:eb:1c:fa:37:d8:f1:b9:6d:e4:5c:
47:3b:a6:6a:b7:db:30:25:63:d1:ab:18:49:0f:6d:
ae:21:cd:62:e3:e2:d7:e9:5e:47:9f:ce:84:0e:67:
0d:8b:32:8b:41:90:8d:a2:34:de:72:d5:7e:ec:77:
e6:89:b5:0c:cc:a0:d5:46:43:86:2c:a4:b8:dc:3f:
82:2d:d6:74:9b:fb:f5:e7:5a:8e:31:fa:ad:c3:f9:
9c:c5:87:35:be:ae:23:7f:40:cf:7f:fc:06:b7:44:
37:33:8c:55:28:37:c4:e8:8d:32:c0:2f:d6:d9:6f:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DE:7D:B8:A0:F6:47:82:DF:A1:99:28:0F:78:24:DF:2B:44:F8:66
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hN59uKD2R4LfoZkoD3gk3ytE-GY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.68.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:17:10:c1:0f:cf:12:de:30:e1:3f:24:31:27:1c:9a:d6:6a:
cf:84:f1:68:8c:5b:f4:7a:6a:f9:ee:3f:c0:3e:12:45:31:13:
3c:3d:e0:d4:71:98:5f:14:7a:e1:58:75:ec:b8:21:3c:ec:01:
86:0b:54:78:e0:e7:72:08:0d:a4:89:51:a4:90:05:18:41:bf:
a2:2e:c1:ca:e0:a3:d6:0b:9c:84:93:69:ee:55:81:c1:23:55:
7b:cb:11:05:fb:d7:fa:6c:78:cc:ad:df:1f:ca:0f:b2:1b:90:
14:af:21:df:d2:79:fe:de:33:9d:c5:0b:51:65:1a:56:0e:14:
c6:9c:d0:58:ce:33:4b:7a:24:41:76:da:d9:a3:94:04:c0:1d:
e5:69:71:a9:b1:90:01:3c:0c:bf:31:87:e2:e3:8b:51:95:6e:
82:48:fa:17:cc:c3:c8:03:3f:ad:7f:b9:e1:63:40:1a:14:8a:
52:25:a8:9d:c7:66:d2:61:88:1b:69:1a:c0:3c:d7:57:d6:13:
f3:60:5f:fc:e8:fe:fc:f8:43:7d:fd:20:2d:9d:9b:4c:4e:ef:
ba:9e:9d:2c:66:f7:50:58:73:03:44:91:22:44:ac:0c:36:8f:
1f:da:10:29:ca:ad:44:2e:1e:37:2b:7c:66:b0:df:cb:62:24:
30:6c:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:35 2025 by rpki-client