Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/jquI9cCuANx09raz7irnHBQZOnE.roa
File: jquI9cCuANx09raz7irnHBQZOnE.roa (raw, json)
Hash identifier: REzo97oIfZHg3vDh0+Ach/kLyBAW6qjpvSglRrvEn6Q=
Subject key identifier: 8E:AB:88:F5:C0:AE:00:DC:74:F6:B6:B3:EE:2A:E7:1C:14:19:3A:71
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0DEB
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jquI9cCuANx09raz7irnHBQZOnE.roa
Signing time: Wed 29 Sep 2021 02:42:59 +0000
ROA not before: Wed 29 Sep 2021 02:42:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 61.59.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3563 (0xdeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:42:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8EAB88F5C0AE00DC74F6B6B3EE2AE71C14193A71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:1c:94:85:5b:8c:a5:46:6a:80:1d:e3:62:
fa:5f:e1:03:dd:f0:09:14:0c:78:43:b0:59:77:43:
de:c9:89:9d:75:13:59:32:9d:c2:f6:45:3a:a2:2e:
02:f4:69:e2:68:a1:5e:c1:ef:81:59:9a:30:56:f4:
a1:e0:12:22:32:61:26:95:5e:4b:aa:b2:21:b7:7d:
6d:b1:75:43:55:2e:73:e0:5d:92:aa:28:a5:fe:13:
88:9a:47:b0:8e:83:49:f3:97:0a:b2:68:9a:dc:86:
56:33:56:83:bb:19:82:87:75:42:9d:c7:aa:70:e8:
ac:17:47:f1:39:57:de:dd:f4:f9:7b:84:2e:ad:58:
bf:39:16:73:bc:66:6b:d5:f4:60:09:b2:78:f3:f5:
57:74:50:e6:a8:0c:ce:eb:c0:be:5a:92:60:a0:f8:
d4:a9:7b:f2:6f:2d:02:85:75:1a:d4:5f:f2:d0:8f:
8c:a4:55:13:4f:07:af:75:61:a4:4f:c5:11:39:a1:
3e:1e:eb:9f:6a:f8:2f:96:ca:50:d1:10:94:57:44:
a5:e5:6d:16:bd:55:46:e2:52:24:1e:3f:11:7c:c5:
11:09:04:3c:db:e2:98:f2:16:34:4e:4d:4d:de:96:
96:0a:5e:3f:fa:47:38:d0:1d:b6:5c:d0:d3:2e:cf:
9d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AB:88:F5:C0:AE:00:DC:74:F6:B6:B3:EE:2A:E7:1C:14:19:3A:71
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jquI9cCuANx09raz7irnHBQZOnE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.59.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:df:8d:d7:e0:c1:2e:c5:67:e7:14:cc:0f:75:ce:e1:b5:1b:
d9:40:6f:84:7a:7e:d1:0f:fd:80:01:a3:ed:8c:36:f0:0e:bf:
76:a7:fb:9c:80:c7:57:38:26:84:db:ba:85:ca:73:e2:84:47:
23:c0:66:32:3b:26:47:9a:4f:22:cf:85:d2:1e:b2:db:86:9f:
3d:16:49:aa:2d:6d:0c:ae:ec:a1:bc:b5:63:07:3a:b9:80:ef:
b8:54:9a:76:62:c6:b2:cd:57:dd:0c:c5:5e:bb:78:39:34:dc:
69:06:e7:f6:60:78:70:8c:b3:15:e5:36:0a:fc:c0:54:3d:a3:
4c:91:19:79:23:fd:f0:ea:c2:ba:15:5b:fc:57:9f:25:25:13:
de:cf:66:e0:03:b2:b1:26:72:64:f4:da:7c:28:6a:e9:c5:e0:
95:1c:6b:a8:65:d2:75:67:15:c7:5e:03:28:65:6b:34:95:a1:
b6:0d:9d:ad:4c:74:54:dc:d1:e8:5d:00:bd:b3:02:f3:5a:da:
e1:97:9f:fb:be:45:8f:d4:8b:84:a6:d3:c2:99:95:fa:c1:ed:
6d:fe:90:dd:a4:d4:9e:63:1a:2c:8b:24:f2:58:34:1a:30:b1:
01:00:5b:d9:95:4e:be:4f:db:e4:b5:c1:95:3f:b4:3c:09:1e:
80:23:54:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:59 2025 by rpki-client