Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/p9MnaKFthnllc5SaZ0ntXNjLTIQ.roa
File: p9MnaKFthnllc5SaZ0ntXNjLTIQ.roa (raw, json)
Hash identifier: owkCgt0KFEPvE/Hnz+GtwFdxTaq0jw9/9neLs1IpGzI=
Subject key identifier: A7:D3:27:68:A1:6D:86:79:65:73:94:9A:67:49:ED:5C:D8:CB:4C:84
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13CA
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p9MnaKFthnllc5SaZ0ntXNjLTIQ.roa
Signing time: Fri 01 Sep 2023 09:25:27 +0000
ROA not before: Fri 01 Sep 2023 09:25:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 210.244.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5066 (0x13ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A7D32768A16D86796573949A6749ED5CD8CB4C84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:b6:b7:30:d4:79:5e:41:b2:0a:c1:e3:bd:
57:7e:08:18:2d:17:ef:1a:31:5c:cb:aa:64:a5:05:
cd:33:b8:e7:9e:c7:64:d8:f9:0f:a0:18:77:30:dc:
32:ab:d3:30:c2:b5:51:b3:e4:70:61:6e:bc:dd:91:
6a:8b:e3:a2:c9:24:99:62:b4:3c:d5:65:6b:13:f5:
89:60:8f:63:c5:69:2d:33:f1:86:92:64:ea:ac:84:
b8:c1:16:fe:cf:e1:9b:75:93:d1:e5:c5:47:b3:3f:
52:50:b0:e1:17:84:45:64:32:13:72:50:e9:e6:60:
38:1d:0d:d0:ae:7e:4d:3b:d0:d3:86:02:9e:4e:87:
68:57:d3:0d:f4:50:81:be:b9:2e:8a:3a:b3:75:1b:
53:e7:d6:a3:1a:9a:79:d4:42:1d:56:9b:d7:44:53:
dc:04:2b:bd:d2:78:c9:e6:39:59:9d:21:65:3e:b1:
ea:24:6f:fc:be:03:08:d8:5f:2c:50:cd:db:22:b6:
56:81:e1:7c:ae:15:8e:8f:df:f1:20:be:28:90:f3:
cc:40:e0:eb:3b:7f:2b:3b:88:fc:d6:39:fe:72:1f:
61:76:38:f7:76:1c:32:fb:7a:e4:d4:7a:7e:f2:c4:
c8:45:b0:11:3b:d5:e3:33:d2:cb:12:47:a4:ad:61:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D3:27:68:A1:6D:86:79:65:73:94:9A:67:49:ED:5C:D8:CB:4C:84
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p9MnaKFthnllc5SaZ0ntXNjLTIQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.244.97.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:9e:04:93:f5:fc:d7:f7:f8:78:cc:f1:4a:67:c5:f2:e6:e3:
08:d6:3c:c6:e2:88:3b:50:c5:18:27:59:05:b0:00:5a:0a:37:
ab:78:75:61:03:74:47:06:63:60:89:87:06:fe:82:96:4a:5f:
5e:bb:6c:35:79:0f:08:14:f8:3c:2b:06:4c:35:00:f3:7e:20:
4d:af:c9:4c:61:f5:53:40:e8:58:96:0d:6f:2d:a3:09:cb:c1:
fb:6b:dd:8a:d0:7c:b2:3c:03:e4:bb:61:2f:80:a2:ff:0b:c1:
e5:da:5d:49:18:e8:51:e8:14:e6:44:6d:0a:84:16:92:39:03:
92:c0:09:18:0e:45:ab:0b:c7:33:59:98:3d:c4:a8:ce:f7:13:
ed:81:6f:db:5e:05:41:34:1c:c7:86:6f:da:f8:6f:57:b6:03:
1c:f5:dc:19:a7:73:50:fa:05:55:3a:81:45:55:2a:6b:99:9d:
f2:2a:ad:e7:41:5d:7f:f0:8a:1c:f9:e9:06:c2:28:4c:c0:bf:
53:a4:59:fb:a7:ba:d9:c7:bd:9f:24:e3:c9:47:d2:07:39:7f:
df:7d:0c:2a:26:1e:20:0d:94:aa:92:86:16:a0:d0:da:39:9e:
6d:d8:45:69:25:7a:4d:57:91:9a:44:54:b2:3c:c8:aa:4c:e6:
7c:31:bb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:07 2025 by rpki-client