Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mMSLv8f4LyfGt1GFIU-E5eL9xpw.roa
File: mMSLv8f4LyfGt1GFIU-E5eL9xpw.roa (raw, json)
Hash identifier: 0XCuQgASICNKiYk5PbxhEApVPzour6rWt9jIE4Pbwq0=
Subject key identifier: 98:C4:8B:BF:C7:F8:2F:27:C6:B7:51:85:21:4F:84:E5:E2:FD:C6:9C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E7D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mMSLv8f4LyfGt1GFIU-E5eL9xpw.roa
Signing time: Wed 29 Sep 2021 02:43:40 +0000
ROA not before: Wed 29 Sep 2021 02:43:40 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18049
IP address blocks: 106.107.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3709 (0xe7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:40 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=98C48BBFC7F82F27C6B75185214F84E5E2FDC69C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:73:b5:3c:ed:40:87:73:33:43:d1:49:a4:ed:
65:1e:a9:25:73:15:44:d6:29:bd:75:6e:90:b8:b0:
6c:42:e3:26:22:4e:32:9f:f2:f7:aa:35:02:a0:b3:
61:88:e1:e7:a8:f1:ea:fb:af:cc:00:9d:95:05:c8:
c2:64:70:55:0e:d2:5f:39:51:b9:cf:2f:21:ca:17:
08:6b:d1:f4:f8:88:e6:60:22:86:38:f2:85:89:ee:
b8:ad:eb:78:f4:dc:6a:45:6a:78:f5:b6:62:7e:9f:
74:9d:ba:0c:26:39:d6:68:3f:57:4d:e6:e7:0e:7f:
8d:de:41:d7:a0:2d:36:18:73:55:a2:49:c9:73:da:
53:c1:58:75:45:8a:e8:8e:22:bc:a1:a3:f2:a3:73:
ff:35:59:b0:2b:7a:11:5c:a0:59:dd:be:d1:68:5d:
57:30:61:c9:29:b2:af:64:fa:7c:ba:62:34:cd:d1:
44:0d:84:99:dc:26:8e:52:df:0e:77:2d:20:61:89:
61:c7:f4:a2:b9:20:a2:8b:79:83:7b:9e:d8:7f:95:
2b:27:5a:93:7e:8c:00:1a:e1:b7:52:2e:47:ef:67:
3c:a3:40:98:d1:b7:de:78:ac:e9:5c:40:ca:bb:23:
48:78:89:79:ec:b5:33:c0:a6:bd:6e:71:67:e4:28:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C4:8B:BF:C7:F8:2F:27:C6:B7:51:85:21:4F:84:E5:E2:FD:C6:9C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mMSLv8f4LyfGt1GFIU-E5eL9xpw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.175.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:da:61:bb:5b:61:99:f1:93:3d:86:26:3a:d8:49:97:1f:2a:
4b:22:01:8d:f0:31:b3:3d:56:9d:72:46:ca:b2:1f:b8:8a:28:
c3:4f:22:b6:9e:6d:6c:17:2a:23:ca:d4:10:74:c4:ee:e5:36:
9e:1b:00:84:d4:75:44:b3:74:d2:89:40:44:60:af:8c:fb:1d:
5a:af:6d:1d:d3:39:2b:69:ea:f0:38:23:57:3d:82:02:de:c0:
bf:31:5d:61:4c:d2:92:a7:0d:16:98:05:8b:2e:e2:48:4b:8f:
f5:48:31:02:b5:de:ab:42:99:ed:15:00:4f:b5:eb:80:9b:e7:
be:19:60:e7:a9:de:7f:91:34:ec:f8:13:ca:7a:ac:5a:df:9c:
4a:1b:2f:c8:14:37:de:0c:d4:3a:58:f4:50:19:a9:11:95:a8:
b7:91:f6:51:12:df:c4:77:86:5b:6f:1d:7c:ca:05:0a:30:99:
db:89:0d:af:24:2c:6e:02:8a:80:59:aa:6e:43:ad:c9:53:8d:
1b:8e:e5:e4:fa:de:c8:76:be:01:a0:16:f6:03:df:63:d0:65:
85:ca:27:0f:cd:6a:5e:08:f3:17:c3:dc:e4:b6:bd:7f:f6:fc:
93:e8:b3:55:a4:1b:cb:10:98:47:92:53:80:85:96:57:6b:69:
6f:cf:08:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:37:48 2025 by rpki-client