Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/oNjD4e7fp4NLid70IK4oydFOm_8.roa
File: oNjD4e7fp4NLid70IK4oydFOm_8.roa (raw, json)
Hash identifier: 1eU8x/Z3tkAVJHTe3D0LsgLlJMUa8HGIseztTJ85Nns=
Subject key identifier: A0:D8:C3:E1:EE:DF:A7:83:4B:89:DE:F4:20:AE:28:C9:D1:4E:9B:FF
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0B6C
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oNjD4e7fp4NLid70IK4oydFOm_8.roa
Signing time: Wed 29 Sep 2021 02:44:11 +0000
ROA not before: Wed 29 Sep 2021 02:44:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 192.72.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2924 (0xb6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 29 02:44:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A0D8C3E1EEDFA7834B89DEF420AE28C9D14E9BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ce:4e:39:34:ef:0e:b5:4a:26:6f:c9:4d:a4:
8a:e9:a7:5f:9f:28:81:b7:d2:59:65:21:0a:2d:ef:
b4:4f:b1:6d:95:05:a0:8f:90:5d:4e:a4:65:c3:fd:
2b:89:78:b4:a9:83:55:e6:fc:03:02:93:3e:2a:84:
0a:7d:75:31:8c:58:af:7b:c3:d2:c7:c4:b7:63:27:
e6:6e:91:a8:29:10:66:ce:d0:57:ac:57:79:ea:ea:
2e:91:09:58:a0:96:a6:b8:ce:82:1f:00:d2:a6:2f:
9b:96:d4:49:36:4d:38:89:08:98:af:ba:97:1e:8f:
4f:ed:82:f8:9a:44:94:d5:08:91:a6:8f:6c:71:70:
99:35:0c:69:37:97:bb:7f:e0:b9:a8:36:e3:82:03:
13:60:34:62:fb:d4:3e:b0:64:57:63:a5:15:43:c3:
07:e9:2e:95:7c:c2:f1:6a:85:e8:e6:c4:3c:c5:5e:
51:31:16:3e:ef:21:d8:49:6d:32:0e:93:bd:28:c5:
8a:e5:b8:dc:96:d7:e5:b8:58:60:4e:0c:df:88:ae:
be:fb:77:cb:dc:ac:e0:27:38:e1:16:4e:3e:1d:a8:
31:f6:4a:47:7e:f8:15:3a:a5:fc:e8:39:28:e9:25:
55:a7:41:6f:86:f7:6e:f0:b6:70:10:41:c0:5a:d6:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D8:C3:E1:EE:DF:A7:83:4B:89:DE:F4:20:AE:28:C9:D1:4E:9B:FF
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oNjD4e7fp4NLid70IK4oydFOm_8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.8.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:bc:c1:fa:37:69:ed:92:6b:72:2f:2f:b5:a0:f0:18:c6:cb:
69:20:ed:e0:4f:49:ac:1b:e6:d5:95:16:12:71:b8:e1:7a:48:
35:9a:e5:96:30:7e:70:c2:60:7f:1f:eb:11:dd:de:2f:53:d7:
8b:cb:c6:d6:b7:ba:bb:ad:b7:b0:a7:44:1f:f5:77:dc:f1:0c:
e9:52:96:6e:e0:ce:7c:09:6a:ad:f5:74:cb:a3:a2:1b:4d:da:
32:2c:8c:9a:d0:64:22:be:03:74:84:8b:69:31:b5:b9:c5:e0:
51:46:ad:5d:36:bb:3d:e0:09:ef:b5:eb:50:b1:9a:3a:97:1d:
42:54:d7:77:2b:45:16:74:5c:e9:0b:6a:df:77:23:3d:f0:59:
35:c1:54:35:b9:44:03:51:c9:54:b3:e8:56:68:39:e0:55:15:
78:e4:32:c1:4c:9e:fa:90:5b:e1:ca:05:fb:16:3f:8a:2d:80:
36:de:34:e6:ed:3a:bd:54:a6:8c:04:e7:5d:2f:03:7d:53:f3:
a3:3e:ae:58:f5:53:57:53:07:4e:42:04:17:27:c6:14:40:cf:
b2:3c:36:ea:bb:47:5e:12:bf:8e:f7:16:fb:dd:70:ea:87:7d:
8c:bd:d7:d7:d8:51:fe:5d:8b:31:7b:df:db:d7:2d:01:a5:c7:
89:76:7f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:14:24 2025 by rpki-client