Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/lUzTfNzWyxcwaX3zRJUjw4_n2Ng.roa
File: lUzTfNzWyxcwaX3zRJUjw4_n2Ng.roa (raw, json)
Hash identifier: nN/9S9UVqjimV2fmSTkM6vueV1/YyNB6FHPpdqPRvLI=
Subject key identifier: 95:4C:D3:7C:DC:D6:CB:17:30:69:7D:F3:44:95:23:C3:8F:E7:D8:D8
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E00
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lUzTfNzWyxcwaX3zRJUjw4_n2Ng.roa
Signing time: Wed 29 Sep 2021 02:43:05 +0000
ROA not before: Wed 29 Sep 2021 02:43:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 45.64.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3584 (0xe00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:05 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=954CD37CDCD6CB1730697DF3449523C38FE7D8D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:dc:48:fa:7b:88:aa:c1:74:ad:54:34:3f:
47:ec:97:6e:c5:28:bf:77:e5:6f:c3:b9:0b:0a:6c:
5e:97:cb:c5:6d:c7:76:89:ae:39:a8:d5:63:a8:fe:
c9:85:da:00:49:45:a5:bf:82:b0:74:8a:d3:eb:fc:
d0:31:08:7c:f5:43:bf:f7:9e:f0:7b:2f:9e:e9:60:
13:b4:7d:56:7f:5b:58:89:c0:02:af:c0:02:f3:a6:
08:60:d9:f6:28:4c:82:80:18:aa:f8:92:a8:52:6a:
1b:6b:0c:52:13:90:fb:5d:45:b8:18:6a:29:70:fc:
61:59:2c:ef:25:52:79:69:75:58:ce:e1:13:5e:3a:
f7:6c:35:d8:b8:4e:92:fc:26:be:b8:f5:18:06:a8:
a1:82:c6:d1:05:2e:ac:ee:71:d5:bf:09:14:e8:5c:
3d:25:bb:54:a3:ff:d8:95:90:c0:39:54:e0:62:e2:
54:01:b5:41:97:b8:74:40:e2:23:b1:2f:e5:a5:8c:
ae:cd:f6:c9:0a:4b:4b:9b:ab:35:e7:17:bf:9d:5d:
54:95:6b:69:31:70:bf:45:bf:b5:d0:a2:b4:2c:8d:
6c:4b:4e:79:bb:8e:f2:5c:33:d7:49:d2:b5:3f:06:
ae:3d:d0:d1:9a:37:e3:8e:9e:f6:ec:53:c8:db:69:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4C:D3:7C:DC:D6:CB:17:30:69:7D:F3:44:95:23:C3:8F:E7:D8:D8
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lUzTfNzWyxcwaX3zRJUjw4_n2Ng.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.228.0/22
Signature Algorithm: sha256WithRSAEncryption
46:7c:f2:6e:05:64:c5:0c:a5:a7:c8:ad:78:f1:4b:c1:58:be:
74:7a:7f:3b:25:fe:4a:de:45:e8:7b:87:1f:e8:91:dd:6e:0a:
a8:aa:f6:8f:95:04:81:aa:67:85:9f:b0:87:30:a2:77:2a:69:
10:46:7a:bb:cb:12:5a:57:64:aa:74:34:0a:0e:5a:d9:53:f7:
23:2b:eb:0a:71:09:f7:4f:b5:4b:9f:00:85:0c:6a:53:d8:08:
d2:01:61:a7:79:9a:4a:2a:7a:b3:53:9e:f4:5d:32:86:5a:1a:
c8:27:cd:9d:06:21:02:fe:b8:97:f3:ad:26:66:a9:80:8f:b8:
00:89:ea:47:37:4b:6c:31:0d:27:da:6f:03:ae:a6:bb:77:f2:
28:ea:0e:fe:9a:5e:cf:7e:27:a0:42:b9:fb:80:a5:7d:c3:64:
5d:f8:99:00:ef:bd:6d:92:3b:88:be:57:09:25:8a:d6:db:fe:
98:2d:dc:ec:5d:26:36:f8:d4:82:aa:ea:39:82:63:3b:0a:96:
c7:7f:17:7b:0a:a0:91:2d:12:c2:18:60:ef:4f:f1:74:71:44:
48:2c:00:26:66:8a:ee:b6:1b:d3:5d:e5:25:75:d6:69:1d:18:
df:e1:fe:71:73:7e:79:62:fe:ae:f1:d3:63:d0:ec:45:f4:88:
3a:55:75:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:17:07 2025 by rpki-client