Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/iJdHGstkG5ihQpj68PvWNG8JIX8.roa
File: iJdHGstkG5ihQpj68PvWNG8JIX8.roa (raw, json)
Hash identifier: TkeFH1NywSDgkiRNhlE/AowCzgTq9kOuHvhVNCiyMJ4=
Subject key identifier: 88:97:47:1A:CB:64:1B:98:A1:42:98:FA:F0:FB:D6:34:6F:09:21:7F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C57
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iJdHGstkG5ihQpj68PvWNG8JIX8.roa
Signing time: Sun 07 Feb 2021 11:42:58 +0000
ROA not before: Sun 07 Feb 2021 11:42:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 112.104.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3159 (0xc57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:42:58 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8897471ACB641B98A14298FAF0FBD6346F09217F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:66:f8:7e:b6:90:16:46:ef:1b:2f:4b:99:0c:
9e:96:3f:e9:23:45:94:9c:49:b4:17:83:a7:04:38:
f5:89:32:05:9d:b0:be:47:e2:70:ad:53:2b:8c:9f:
14:0b:91:8c:8d:42:a1:78:c9:3a:91:25:f4:6e:25:
b4:7b:a0:b7:c9:76:ef:ab:7e:d9:d1:f3:56:7a:48:
9e:43:30:4a:2d:7b:9d:17:79:96:25:e9:ac:50:74:
f2:b0:c1:43:f0:f2:de:0e:c1:59:ed:5f:74:09:21:
65:23:2e:a7:2f:91:92:81:37:8b:42:e2:75:8f:99:
4f:2d:9e:ff:46:ec:5f:c1:20:e7:60:7e:e6:c6:9f:
24:04:41:08:64:8b:ce:cf:c4:c8:e6:73:95:8f:03:
cb:2e:ff:ae:80:06:45:6f:66:7b:66:2e:d5:3c:c0:
dc:88:21:26:b2:77:09:e1:82:64:19:f0:b3:9c:8c:
be:1d:86:11:14:bd:ff:c7:54:7e:d6:06:1e:92:9e:
c0:6a:ac:8d:2d:de:b0:8d:1e:f9:14:91:86:7a:6c:
db:8c:c6:27:47:e0:17:ec:ab:1d:56:fc:2e:6c:40:
ab:1d:fa:d6:b4:c8:94:db:5b:80:6e:55:20:b3:a1:
34:f7:88:b0:5d:8b:6d:b9:31:e4:ea:e5:9a:64:1c:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:97:47:1A:CB:64:1B:98:A1:42:98:FA:F0:FB:D6:34:6F:09:21:7F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iJdHGstkG5ihQpj68PvWNG8JIX8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.104.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:7f:84:07:cd:be:20:14:b6:47:b8:e9:e4:1e:b9:27:da:0f:
db:5c:01:5e:ad:83:cf:82:aa:7f:25:07:85:11:82:b2:2b:c4:
e0:dd:4d:11:38:f3:9d:a3:7a:d0:11:58:69:2b:be:8b:95:9e:
1d:f2:9f:9d:c7:aa:65:e4:7c:de:c5:b1:62:05:5f:e6:d2:68:
f6:fe:58:32:49:9a:84:eb:f6:b2:67:f3:3b:e9:2d:22:64:a4:
0f:60:b8:23:41:e8:31:6a:03:a9:5f:09:eb:0b:48:9b:04:af:
de:5e:3f:00:72:06:57:3a:ec:ec:6a:48:6c:14:b2:47:ad:4b:
27:ea:7a:82:9b:da:bf:e8:9e:c2:69:1d:ae:15:68:a9:f7:c3:
5e:7b:35:03:74:18:32:f2:d6:41:73:15:9e:6e:d8:83:0d:8a:
c0:cc:55:59:68:39:63:9b:76:41:7a:37:a4:c0:04:6c:71:a1:
ea:42:a0:83:8a:b4:d0:1e:fc:c4:07:18:1a:30:d6:fb:4b:b8:
2f:96:e1:32:b1:a2:06:75:a2:62:d4:03:22:3c:34:fb:29:01:
b6:11:61:85:17:b9:19:c7:32:86:32:04:b3:38:d1:00:32:f7:
1f:04:dc:61:86:a9:c3:11:f3:22:ec:eb:be:0a:5d:81:23:78:
6f:87:83:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:32:20 2025 by rpki-client