Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/pspIAIKZrUP9W85iGf2mn0Djevk.roa
File: pspIAIKZrUP9W85iGf2mn0Djevk.roa (raw, json)
Hash identifier: kCWBsOONc4rM7En4kI61ZG+CYSNFO+vzlsgKaTWZ+9I=
Subject key identifier: A6:CA:48:00:82:99:AD:43:FD:5B:CE:62:19:FD:A6:9F:40:E3:7A:F9
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 089C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pspIAIKZrUP9W85iGf2mn0Djevk.roa
Signing time: Tue 29 Sep 2020 09:52:13 +0000
ROA not before: Tue 29 Sep 2020 09:52:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 45.64.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2204 (0x89c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:13 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A6CA48008299AD43FD5BCE6219FDA69F40E37AF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:3d:73:44:21:c1:47:ee:e8:9b:6b:a2:ad:
56:9f:79:dc:17:83:24:cb:ef:ef:c9:56:a7:ad:77:
b4:18:bd:9d:a6:93:62:d5:a2:56:12:61:3b:5a:77:
ec:31:85:02:b8:fd:04:34:5a:1b:27:73:8d:08:21:
83:82:84:2c:fd:a7:2a:10:fb:5e:30:0b:1c:cb:b1:
9f:33:b9:64:5b:5d:88:24:db:a4:28:63:35:99:05:
d7:fe:d7:bd:4e:7d:dd:24:a1:09:16:05:3d:00:57:
16:cc:e6:21:58:a9:a1:7d:d9:d6:27:01:63:04:69:
95:f8:08:ef:3a:18:ba:93:e8:6b:4d:76:c3:bc:7f:
7d:e8:f7:42:ea:56:16:93:00:e4:0b:99:30:f8:7d:
b5:20:4a:94:08:b6:2e:7d:4a:ef:02:7c:b2:4e:fc:
4d:0d:b5:37:23:9f:98:d6:c7:58:af:06:e5:62:2a:
ba:97:10:17:82:10:da:ba:5c:0a:f1:1f:e7:f6:d3:
a7:9a:77:00:79:2f:b9:a5:04:b9:39:da:4c:04:0c:
3f:f4:a6:3c:aa:8d:4a:d5:63:82:bd:cf:cb:08:92:
46:c1:b2:7d:17:44:1f:d3:77:48:43:c4:87:a9:d9:
89:77:4e:51:75:e0:31:25:2b:33:fc:60:00:6b:c9:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CA:48:00:82:99:AD:43:FD:5B:CE:62:19:FD:A6:9F:40:E3:7A:F9
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pspIAIKZrUP9W85iGf2mn0Djevk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.228.0/22
Signature Algorithm: sha256WithRSAEncryption
14:b4:9d:86:50:84:b8:97:1c:22:36:91:c1:67:d6:af:75:92:
10:a8:7f:d1:1e:88:02:35:1d:1a:e7:91:49:99:3a:a4:78:d0:
57:51:b8:ec:6c:3c:f1:b5:f2:e4:3a:8f:7a:9c:01:0b:3c:da:
51:81:a2:16:5a:ee:26:5a:b7:00:52:00:d3:2c:27:d0:02:d4:
78:d0:7f:d4:cc:5b:a3:bb:39:4b:72:8b:99:3c:70:52:3f:56:
d8:88:6c:e1:4a:19:b2:8c:26:76:d9:8e:cc:6c:30:f3:ab:92:
df:ff:fd:19:b0:8d:18:80:57:f6:81:28:f1:b1:cd:bf:f1:94:
29:64:b7:ff:8a:78:65:82:dd:2d:ef:23:60:f5:9c:4a:4a:e3:
b1:5c:3e:4e:a4:5f:4d:05:98:ef:54:f7:f4:7b:8e:4e:5f:e7:
8a:be:25:6b:f3:38:07:d7:63:77:17:34:7c:aa:8e:22:36:33:
c8:e8:2c:fa:50:ba:3c:be:3f:c5:94:02:35:a9:ec:92:e5:81:
86:f8:aa:2c:59:60:e3:39:91:aa:b0:bd:7f:2f:f2:b0:03:43:
33:5c:e9:2a:8d:29:85:7d:4a:f6:5c:a3:d0:f1:3b:ea:97:bd:
b5:af:e6:0a:76:a1:ea:81:8b:47:09:e4:9e:3c:4f:30:ac:03:
f7:c3:9e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:27:51 2025 by rpki-client