Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mqBwqZnSj3UDpE34up9Wo7TJ5Bo.roa
File: mqBwqZnSj3UDpE34up9Wo7TJ5Bo.roa (raw, json)
Hash identifier: WnLCxgsVU+VVxef4Ge6lRnGEJq8P5s4GToX2a5D+i+g=
Subject key identifier: 9A:A0:70:A9:99:D2:8F:75:03:A4:4D:F8:BA:9F:56:A3:B4:C9:E4:1A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0882
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mqBwqZnSj3UDpE34up9Wo7TJ5Bo.roa
Signing time: Tue 29 Sep 2020 09:52:06 +0000
ROA not before: Tue 29 Sep 2020 09:52:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 113.196.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2178 (0x882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:06 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9AA070A999D28F7503A44DF8BA9F56A3B4C9E41A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:2a:cb:fa:64:da:40:88:f9:dd:6a:b5:36:
da:46:b3:87:fe:8e:37:f1:c5:e8:3e:38:25:b7:6a:
56:01:05:f3:02:77:2c:5b:ec:8a:7d:da:33:23:46:
8d:f4:bd:63:87:97:53:50:8d:fe:60:21:b3:a8:53:
a4:a8:95:6b:aa:23:4d:ba:e7:f2:02:a7:39:69:2b:
f6:86:d0:02:85:84:84:c8:f0:8a:d8:96:62:50:b6:
00:bd:9b:6e:9d:c7:1f:ee:7d:16:e5:04:35:fa:36:
93:41:df:bb:85:82:98:51:44:6e:6a:16:5c:ca:1b:
b3:db:d9:c0:b0:f4:c3:69:c7:4d:87:60:bb:fa:5a:
f5:80:c7:f7:ef:ce:d6:b1:7a:52:a4:c6:da:83:e0:
25:69:9d:7e:6b:fc:9b:cd:18:d1:47:2d:ce:84:d2:
d0:90:c4:3e:34:25:84:01:4c:0f:d4:f7:8e:01:24:
85:f4:9f:36:fe:86:f5:59:6c:cf:72:6c:0a:93:cb:
1a:8d:12:01:c1:fe:73:64:4e:f2:1a:52:3b:02:23:
87:aa:68:2e:57:14:f5:1c:48:b9:5c:eb:63:25:e2:
bc:b2:3a:d8:ab:89:a8:57:65:31:40:68:ce:27:d1:
38:67:ed:3b:f9:76:00:83:3e:e0:f4:08:03:da:ba:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A0:70:A9:99:D2:8F:75:03:A4:4D:F8:BA:9F:56:A3:B4:C9:E4:1A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mqBwqZnSj3UDpE34up9Wo7TJ5Bo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.192.0/18
Signature Algorithm: sha256WithRSAEncryption
2f:99:49:38:38:52:da:b9:c8:b4:31:91:23:b9:e7:8e:4a:28:
27:cd:a4:c2:52:5b:93:54:32:99:fd:40:b4:c4:d7:02:12:22:
72:f1:0a:a9:0c:81:13:c1:9e:50:13:f6:d7:e2:2c:ba:f5:99:
aa:18:53:8b:e3:f2:58:0d:87:bf:c5:10:42:53:50:dd:ed:e8:
2c:39:a4:67:31:77:80:93:97:57:d1:ef:9e:4b:95:b8:4c:8d:
89:5d:22:f6:c0:b3:46:73:b1:ef:76:bb:e4:8f:a1:e5:44:94:
61:32:03:b9:11:6f:b0:6e:87:c1:ab:f2:ff:ab:a3:25:ef:ec:
b0:46:c5:be:2f:ec:ae:41:56:a8:2e:b4:0d:4d:e2:de:ca:9f:
97:54:ae:75:aa:63:7b:0e:f1:ad:cb:d9:f9:e0:95:07:99:c7:
b8:e0:1d:63:3a:00:2a:b0:7d:a4:7f:fc:84:6b:55:c8:7b:7b:
6b:4b:e0:e4:05:45:8f:f8:78:1a:a4:0c:40:e4:a1:e6:b2:31:
ad:2b:17:d6:55:d0:98:c0:7b:ee:38:a6:4b:8f:b4:4a:4d:e7:
7e:ac:43:1e:18:7e:aa:51:0d:f7:e8:56:11:75:ea:d4:84:c4:
79:15:bc:79:6d:ca:b8:c7:46:a4:5c:b2:b0:f8:03:11:05:af:
f4:39:28:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:32:19 2025 by rpki-client