Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/hVrHnk1pTmvLx8AALeTsKFrhdo8.roa
File: hVrHnk1pTmvLx8AALeTsKFrhdo8.roa (raw, json)
Hash identifier: Aw8bAA9/EGhhX67brD05aEe7tRMApsI2SO3zgqvf5go=
Subject key identifier: 85:5A:C7:9E:4D:69:4E:6B:CB:C7:C0:00:2D:E4:EC:28:5A:E1:76:8F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E98
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hVrHnk1pTmvLx8AALeTsKFrhdo8.roa
Signing time: Wed 29 Sep 2021 02:43:47 +0000
ROA not before: Wed 29 Sep 2021 02:43:47 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 113.196.152.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3736 (0xe98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:47 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=855AC79E4D694E6BCBC7C0002DE4EC285AE1768F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:27:55:4e:70:92:67:b7:20:b3:26:79:68:
39:be:c4:ce:9b:87:6a:10:df:9f:d1:15:29:7a:45:
4a:31:b3:1c:7b:a6:1a:a2:ab:df:8d:4c:24:8f:d3:
8e:81:09:9b:b4:bb:44:3c:b6:21:d7:a3:df:e3:00:
2e:18:ba:b7:dd:8f:ea:1f:d8:66:cc:c4:4b:25:6f:
e8:b4:a2:7f:c5:a9:44:0a:f7:2f:62:2c:fe:b6:de:
0e:39:dc:93:e9:f5:9f:08:c9:ae:8b:e6:99:98:55:
7d:5e:6b:75:39:aa:e3:c7:a0:65:46:20:20:12:cd:
31:a8:eb:50:bb:7c:e7:40:09:4b:d4:dd:cd:09:0f:
c3:d3:1c:80:8b:d4:2d:9d:27:c8:bb:cc:1a:ba:37:
62:08:b6:12:da:f2:d5:77:52:7f:7d:55:a1:26:08:
81:8c:45:6c:94:f7:96:f7:b7:d4:01:70:c8:4b:aa:
26:ad:4b:7b:f5:65:89:60:53:16:de:d1:4f:0f:19:
be:78:29:20:72:a8:84:a7:7d:d9:6e:f8:74:42:d7:
47:5a:09:c3:a6:5f:19:2a:ff:83:d4:74:7b:c9:60:
22:b8:f3:4b:ae:19:07:35:78:65:58:73:cc:0a:60:
a0:2e:e0:af:4b:ee:50:e3:2c:7c:07:7c:18:43:cc:
98:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5A:C7:9E:4D:69:4E:6B:CB:C7:C0:00:2D:E4:EC:28:5A:E1:76:8F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hVrHnk1pTmvLx8AALeTsKFrhdo8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.152.0/21
Signature Algorithm: sha256WithRSAEncryption
02:81:89:19:c2:a0:37:e8:68:fd:a6:4b:20:d2:d5:42:ac:5c:
ad:9c:06:15:33:bb:65:04:90:06:f6:38:90:42:ec:df:bd:1b:
75:bb:a8:62:27:a4:62:36:8c:40:56:2a:82:6b:5a:8c:c5:fa:
37:e2:9c:89:e4:b1:35:c0:eb:49:f8:39:98:b3:30:66:a6:38:
f0:07:e8:7e:5f:47:ae:c5:fc:0a:3c:8c:aa:12:2f:d4:8a:ca:
c4:ed:77:67:39:c1:b4:59:a7:d6:6c:89:00:c4:a0:cc:2b:d8:
ea:8b:a6:42:0c:ab:77:2b:70:fd:ac:e6:ae:2f:fa:fe:7f:bd:
7a:a8:2c:07:bc:9a:e6:77:b3:7c:96:fa:f5:ed:ea:e7:0c:b0:
2a:f2:dd:5e:ff:8f:ea:3c:ae:77:ae:53:6d:90:3b:28:1d:e5:
21:71:69:f9:99:b7:3a:a6:c1:40:0b:63:42:04:ed:2a:57:7a:
9b:d2:e9:d5:75:72:66:a2:0f:62:d6:8c:a1:29:3b:55:4e:ec:
b3:c9:8f:8a:59:59:7b:d1:e2:63:ca:b1:46:0f:8f:64:b3:e7:
28:a9:ab:fd:39:fd:d5:83:21:d4:20:7c:12:85:34:ea:9b:d4:
31:67:f6:8f:03:87:65:c5:52:00:50:69:d3:50:ce:32:89:60:
03:61:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:33:24 2025 by rpki-client