Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/hoWIfxBeu0x_m7vrJoCgpLsr7D4.roa
File: hoWIfxBeu0x_m7vrJoCgpLsr7D4.roa (raw, json)
Hash identifier: 3fHAHsyc2w+M+HO1/LNJ+6TQxXbfcNbLg9MujhkWRCM=
Subject key identifier: 86:85:88:7F:10:5E:BB:4C:7F:9B:BB:EB:26:80:A0:A4:BB:2B:EC:3E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1323
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hoWIfxBeu0x_m7vrJoCgpLsr7D4.roa
Signing time: Fri 01 Sep 2023 09:24:31 +0000
ROA not before: Fri 01 Sep 2023 09:24:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 106.105.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4899 (0x1323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8685887F105EBB4C7F9BBBEB2680A0A4BB2BEC3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:1e:28:16:a6:b3:04:6b:c9:bf:ca:af:be:
90:5a:22:93:56:d4:a0:8f:d7:9c:42:b5:32:48:c3:
e9:c6:fe:8b:45:c4:49:ba:f1:db:ad:95:e8:3d:54:
99:b2:01:70:97:84:37:3f:de:71:2e:17:21:c9:0a:
bf:11:08:08:20:99:a5:a6:72:e2:6e:13:c6:4e:6c:
66:33:0e:de:58:97:36:df:22:49:a2:38:70:1d:31:
2c:57:57:92:93:d2:a0:54:e6:b9:81:82:82:4f:fb:
2b:e2:21:46:16:23:46:e6:30:f7:a4:25:b5:0b:e1:
cd:70:b6:58:b6:c3:c1:66:a7:11:40:36:e7:0d:8a:
e3:35:4d:5f:b6:05:bb:1b:78:59:39:3e:4e:67:9d:
b0:a5:02:10:e7:e5:1d:0b:84:4d:dd:71:37:3c:53:
6b:ad:a8:fc:96:e1:71:a2:0b:4b:63:9f:dc:6a:59:
23:8d:01:58:9e:ee:34:f7:95:3a:61:55:2d:d4:c9:
44:bb:c4:14:bb:d5:b4:6a:fa:0e:2f:90:a5:7f:38:
b9:d7:09:20:dc:84:4e:a8:64:bb:30:ef:63:2f:04:
5b:c8:21:4e:32:f3:e0:af:be:4b:fb:cc:b5:d0:c0:
27:bb:bd:cd:d3:d0:01:c5:ee:51:ae:23:a9:71:10:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:85:88:7F:10:5E:BB:4C:7F:9B:BB:EB:26:80:A0:A4:BB:2B:EC:3E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hoWIfxBeu0x_m7vrJoCgpLsr7D4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.64.0/19
Signature Algorithm: sha256WithRSAEncryption
21:4f:4c:e9:c2:82:1c:32:f3:ca:62:b4:58:a9:6a:d7:3c:5a:
cb:cf:73:9d:fe:62:4b:a8:ac:79:57:5a:be:73:29:53:83:f2:
da:39:0f:93:73:5c:6b:45:2d:7f:e7:33:fb:d5:ce:54:5e:f7:
96:51:c4:d6:8e:6e:df:71:2b:b2:2f:db:7b:90:e5:ee:fb:1d:
ef:ba:c9:dd:cb:c9:94:7e:a4:12:d5:e2:e1:ce:97:34:a9:f1:
99:d7:43:70:62:7c:a1:6d:65:eb:cd:f4:62:54:82:0a:26:6c:
b0:9d:b8:82:5b:f6:ee:18:d1:c3:8e:b1:be:06:37:d0:fd:75:
45:1a:73:ab:35:cd:60:9e:53:6e:22:9c:9a:ad:de:b9:d6:68:
31:10:8a:47:95:98:8a:07:6c:59:28:69:26:51:40:13:46:cf:
a8:d9:d1:42:df:6e:44:b7:93:06:f4:73:30:7b:b9:17:3a:a3:
fa:78:a8:16:23:d3:6b:37:2a:bd:1a:cc:d6:e8:54:cd:e9:4c:
a9:fe:f1:72:d9:77:6a:39:7d:e3:2e:10:59:37:52:02:ce:ef:
5f:fe:2c:4e:b7:17:53:69:15:48:df:26:fe:8e:37:4a:7f:aa:
56:25:3d:b6:ac:d8:18:11:31:9d:74:c2:dd:23:3d:75:04:a0:
a4:dd:bc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:14:26 2025 by rpki-client