Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mfG-Bqj7fmfzEyc9ekt1LQRGpmo.roa
File: mfG-Bqj7fmfzEyc9ekt1LQRGpmo.roa (raw, json)
Hash identifier: sc57YWdVh0LdrFDYh9VtkXtKKOgcjTumXSMkv7UZ0y4=
Subject key identifier: 99:F1:BE:06:A8:FB:7E:67:F3:13:27:3D:7A:4B:75:2D:04:46:A6:6A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0879
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mfG-Bqj7fmfzEyc9ekt1LQRGpmo.roa
Signing time: Tue 29 Sep 2020 09:52:04 +0000
ROA not before: Tue 29 Sep 2020 09:52:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 210.64.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2169 (0x879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:04 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=99F1BE06A8FB7E67F313273D7A4B752D0446A66A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:a7:13:da:31:53:80:ee:6a:88:af:41:bc:
fb:54:cb:dc:98:05:03:ab:28:67:16:22:b4:2f:97:
84:da:a6:0b:f4:f9:0b:d6:71:10:9b:b0:40:6c:c0:
27:72:e8:b0:1f:26:cf:57:dc:63:76:7f:22:00:3b:
9b:3b:32:af:4d:21:bc:f6:ba:42:3b:5c:a7:74:91:
b9:ba:27:5b:3e:a5:2e:35:5e:84:28:9a:71:df:3e:
83:1e:7c:93:81:9e:bc:3e:a1:72:66:c0:c5:9e:1d:
99:d8:24:5b:a7:3c:96:32:ff:28:d9:4e:e2:10:cb:
2a:b0:90:98:84:8c:44:18:36:b1:09:14:f8:eb:14:
ad:05:78:e8:5c:64:e9:12:01:0a:06:b4:f1:95:c3:
09:00:85:04:de:3d:01:36:c0:dc:13:a5:bb:27:90:
19:04:b4:ff:6d:25:e0:7f:d4:f5:f4:20:3e:85:fb:
57:69:ff:05:c8:49:0f:83:3c:cd:80:00:85:b3:4e:
ec:77:86:b0:d0:17:50:83:8f:81:2e:b9:93:76:33:
4b:de:45:af:25:0c:c2:98:57:9c:06:01:f3:09:1a:
b4:7d:4a:64:d9:3e:86:1f:46:b7:ba:67:bc:5c:ef:
9e:dc:4a:c0:ee:ce:46:f6:90:43:0f:4a:2e:4f:19:
c9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F1:BE:06:A8:FB:7E:67:F3:13:27:3D:7A:4B:75:2D:04:46:A6:6A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mfG-Bqj7fmfzEyc9ekt1LQRGpmo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:d7:26:64:16:94:0b:c3:c6:ec:cd:b1:87:64:d6:da:fa:70:
bd:37:bf:d1:7e:2f:2a:90:1b:36:c0:bb:20:c2:34:54:94:bb:
b4:ca:26:1d:cc:cb:71:be:e5:0b:cc:80:6b:20:e7:3b:95:fa:
40:3f:a2:8b:d9:c5:74:3c:d6:17:5a:0d:31:c3:17:9f:18:9e:
14:87:51:15:3f:b0:0a:74:a5:25:67:13:0f:6c:e9:43:75:48:
94:10:3b:4d:02:6f:85:32:24:72:4e:90:c4:f4:4c:42:12:19:
6e:dd:4a:dc:4b:a0:5c:fb:be:df:8e:f4:3e:78:f9:66:76:83:
ef:8f:7f:be:26:04:20:6a:1b:e1:26:10:e5:b5:31:c7:47:6b:
ad:27:6c:3b:1f:aa:44:3a:40:84:b8:96:77:66:e4:db:97:6b:
68:a7:0c:45:aa:47:18:43:9c:7c:34:ca:44:5f:51:79:eb:eb:
d6:5b:65:17:24:85:c2:40:04:b9:91:d0:50:ac:b8:22:ce:bd:
36:7e:97:b1:dd:38:9f:71:25:9e:fe:fe:61:3c:32:e8:ed:a7:
7e:d3:18:cb:02:4e:03:5f:1c:a3:5e:1b:49:19:d9:01:14:34:
21:51:43:1f:63:dd:59:b8:78:5d:5d:af:5a:6e:94:8e:1b:01:
9e:06:bb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:38 2025 by rpki-client