Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/iraPCx63b-XB9O1sGO5GLD2lMqY.roa
File: iraPCx63b-XB9O1sGO5GLD2lMqY.roa (raw, json)
Hash identifier: v5K5IcRU+QLVdpT4bhC1c/isMfMkWBV2r+Pw1ZXiAhk=
Subject key identifier: 8A:B6:8F:0B:1E:B7:6F:E5:C1:F4:ED:6C:18:EE:46:2C:3D:A5:32:A6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1381
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iraPCx63b-XB9O1sGO5GLD2lMqY.roa
Signing time: Fri 01 Sep 2023 09:25:04 +0000
ROA not before: Fri 01 Sep 2023 09:25:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 203.67.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4993 (0x1381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8AB68F0B1EB76FE5C1F4ED6C18EE462C3DA532A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:c8:7e:06:d6:04:6b:cf:b4:aa:9c:69:2a:
a9:3d:90:9c:c7:3b:8a:7b:91:5f:d7:2e:47:0b:7f:
c4:7c:15:42:7e:90:00:73:f5:fe:56:b6:78:c2:cd:
10:c9:60:59:e6:9a:ca:9f:fa:a9:f9:3e:81:b7:91:
f8:41:f4:73:8e:e7:1a:8f:8a:ed:51:2f:08:8f:bc:
74:9f:72:6e:ad:53:24:ef:60:ac:df:61:8a:64:db:
ee:d7:c3:1a:06:b3:5e:fe:74:50:cf:dd:9b:04:fe:
ea:04:37:1f:07:f0:4f:c9:97:c1:1c:dd:8e:be:3a:
a2:0f:7d:d7:46:bf:0a:17:06:03:b9:5f:0a:e0:45:
71:62:b7:7c:5b:06:87:d6:5c:16:a8:aa:b2:2d:93:
da:08:e9:a1:9f:8a:e8:45:30:6b:ef:33:a5:c0:cd:
3c:98:db:d9:19:47:bd:69:31:c4:85:77:8e:e9:7e:
80:94:a8:04:bf:b9:9f:f0:24:63:8f:58:88:84:f5:
22:82:7d:43:ea:21:c2:f2:e4:96:d2:82:f8:24:1d:
50:55:cc:72:e4:ff:a8:66:b6:37:9d:a3:be:93:dc:
e6:e7:3b:6e:e5:17:62:80:f4:de:a4:9a:b3:c7:57:
5d:11:b6:9e:78:9d:22:be:fd:69:69:27:0e:53:7c:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B6:8F:0B:1E:B7:6F:E5:C1:F4:ED:6C:18:EE:46:2C:3D:A5:32:A6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iraPCx63b-XB9O1sGO5GLD2lMqY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.67.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:65:22:62:0d:b5:f4:53:e2:f8:ae:49:94:00:d6:04:0c:99:
56:b7:97:52:08:15:1b:51:83:04:31:52:f3:ac:bd:47:c0:91:
1c:6d:60:88:03:5a:7c:11:c4:a1:8f:01:72:3b:2a:d3:97:b1:
c4:52:2d:d4:77:f9:b4:b3:8c:fe:04:26:41:04:22:62:89:fc:
df:53:a6:a4:93:55:e9:e9:d6:5e:ef:47:b0:6d:62:b6:b7:a8:
93:1f:f1:c3:aa:c7:4a:11:89:21:26:72:35:59:f6:b6:56:ab:
b3:c7:a9:ce:9a:d3:ec:a6:f3:92:02:17:c7:2c:d3:52:27:4f:
0b:1f:e2:c9:75:df:82:f2:4e:83:ee:4e:b5:88:bd:1f:0b:23:
07:b0:92:4e:f3:d4:d6:dd:af:82:c4:fa:cc:59:04:ad:75:95:
8c:17:3b:dc:64:dc:33:92:5f:74:e2:8f:27:6e:d3:a8:3e:81:
a8:45:02:29:8a:cf:b4:64:6d:16:49:a3:ca:f1:dd:fe:2b:cc:
41:2e:56:e6:10:f2:72:46:28:97:68:05:e8:da:e7:25:61:7a:
c2:70:65:48:92:37:94:e0:73:38:93:d6:b8:45:28:18:4b:3a:
51:e5:26:7b:97:87:6f:2c:f0:9a:49:8e:61:c4:f0:6f:09:eb:
7b:85:3e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:33:23 2025 by rpki-client