Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/kuXDSF2Pa0XcUb0sykf2Gcqbitw.roa
File: kuXDSF2Pa0XcUb0sykf2Gcqbitw.roa (raw, json)
Hash identifier: /GAzENyKHZ8NSBVv4r/18CqigcyJZNOlr252vgxvFkA=
Subject key identifier: 92:E5:C3:48:5D:8F:6B:45:DC:51:BD:2C:CA:47:F6:19:CA:9B:8A:DC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kuXDSF2Pa0XcUb0sykf2Gcqbitw.roa
Signing time: Thu 15 Sep 2022 02:43:09 +0000
ROA not before: Thu 15 Sep 2022 02:43:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 210.64.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=92E5C3485D8F6B45DC51BD2CCA47F619CA9B8ADC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:96:3f:ab:02:30:a1:91:a9:3f:fd:38:60:
3c:cd:04:21:e6:8d:ab:44:a5:96:47:cc:c3:fa:8e:
e5:db:95:78:6b:df:e0:53:cc:8f:b8:ff:23:c0:2c:
b5:a0:b7:ae:9b:87:aa:1f:7c:22:21:d0:21:fc:46:
f6:75:15:b9:ff:52:c6:39:08:ac:55:bf:35:73:a4:
d7:b5:0e:d6:e0:2b:f7:b3:74:ec:05:e5:35:5d:56:
19:bd:8d:97:30:38:60:5e:5d:eb:2a:71:fb:3d:70:
a3:2f:4c:85:eb:ea:91:99:c0:0a:ba:86:56:2f:dd:
0c:a5:8b:ae:bd:7c:06:7b:c8:0c:6d:9f:9e:76:49:
78:03:bc:af:ba:eb:29:c1:d8:42:8f:0c:27:c9:fa:
06:3b:71:f6:2f:80:09:40:be:61:60:92:47:a9:6c:
96:a3:f9:97:29:6f:e4:02:31:3c:26:b1:d0:ab:f8:
99:fd:84:64:0e:69:aa:ba:10:7a:e2:11:39:a2:cc:
67:60:6a:f7:4e:d5:cb:ff:04:6d:df:37:4f:5b:6c:
87:03:2e:3a:be:1b:ce:0e:9f:a4:21:4b:92:99:63:
53:4c:e1:b2:c9:67:f1:39:33:2b:01:37:b7:f3:5c:
02:02:f2:88:cf:b9:cd:a9:8a:8b:18:3d:59:59:1e:
53:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E5:C3:48:5D:8F:6B:45:DC:51:BD:2C:CA:47:F6:19:CA:9B:8A:DC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kuXDSF2Pa0XcUb0sykf2Gcqbitw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:36:e8:aa:61:c8:e7:f7:d0:23:d3:af:43:fc:ae:1b:d5:10:
58:bb:f7:57:23:3b:d6:d3:5e:13:28:bc:d6:29:6e:3a:b2:41:
b9:e8:5b:3b:f2:0e:f5:03:f6:fd:9b:ab:92:d7:7f:8f:bc:ba:
8f:ee:54:a1:52:f1:b9:02:80:ad:32:a2:1e:4a:43:0c:d1:ee:
68:17:e8:28:0a:bb:29:63:03:e8:8f:fd:07:ae:7d:8c:c8:50:
7e:bd:a9:4c:24:fa:ae:06:e2:a2:30:60:f6:12:3c:b3:f5:3a:
b5:68:e6:6a:d5:37:bb:a2:86:4d:f5:01:74:41:6c:89:8d:e1:
fe:d2:4d:2a:6b:af:a2:84:88:93:c2:dd:c9:f6:02:f0:83:ed:
f2:15:57:6c:89:eb:d9:be:cc:55:21:63:b7:59:b6:4e:f2:d5:
f1:66:60:49:7b:a9:69:45:89:85:07:75:1b:00:20:ab:3d:4e:
0f:b2:cb:93:dd:32:c4:67:22:7c:d3:27:64:75:42:59:5c:92:
39:d0:11:e0:d3:b9:a0:5c:66:c5:aa:65:e4:57:cf:ea:ad:64:
99:68:bb:f0:02:70:4e:29:dc:09:15:0b:b8:4d:0e:c5:64:a5:
96:2d:0b:d4:f2:4c:aa:c3:54:67:f3:3b:c0:f1:57:a0:65:64:
5a:91:a0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:33:30 2025 by rpki-client