Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/q7u-WAjwXrFuQrOgDgV8yXch9Fc.roa
File: q7u-WAjwXrFuQrOgDgV8yXch9Fc.roa (raw, json)
Hash identifier: 4XJ01FoLIIxLEtWTEwJm+PNeTxM6yGvhKGSNhO58pEQ=
Subject key identifier: AB:BB:BE:58:08:F0:5E:B1:6E:42:B3:A0:0E:05:7C:C9:77:21:F4:57
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 12E3
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/q7u-WAjwXrFuQrOgDgV8yXch9Fc.roa
Signing time: Fri 01 Sep 2023 09:24:13 +0000
ROA not before: Fri 01 Sep 2023 09:24:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 106.105.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4835 (0x12e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=ABBBBE5808F05EB16E42B3A00E057CC97721F457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:8b:f1:e4:73:82:ad:5d:f3:d1:a6:cc:d6:
46:27:a0:dc:fd:64:9c:90:44:c3:34:3f:d7:07:59:
46:0f:13:ff:4f:80:e1:ab:03:0b:fe:9e:8e:1f:86:
b8:21:da:16:08:cd:ee:5d:32:e8:b9:af:e8:8d:85:
80:c6:56:51:79:fe:e9:4e:4b:de:3d:2f:a8:2c:53:
ea:c0:20:ce:67:7e:85:1a:e9:21:79:52:2e:4a:62:
45:6f:a0:7c:44:04:5d:80:e1:f5:58:62:4f:45:df:
05:bc:8c:8d:15:c9:30:93:5b:2c:74:ce:51:b8:fb:
87:6d:bb:bd:45:a4:bf:63:24:df:1a:85:5a:86:9c:
57:78:91:1b:24:d9:40:26:bc:12:94:10:35:13:c0:
1a:f5:db:32:11:f2:99:15:ef:36:16:ac:0b:5d:53:
6e:ba:d6:25:75:0c:2b:4b:fe:a2:2d:49:51:a5:79:
a2:49:59:d4:e7:8b:14:4c:fc:ae:be:3f:d6:86:a7:
3e:c7:85:ae:97:2d:a7:e9:67:93:fb:c4:07:30:bd:
2f:42:da:ae:89:8d:d5:5d:37:30:9c:75:f5:6d:5c:
63:97:6f:d1:d4:8d:ca:18:8b:cb:11:de:95:86:26:
b4:69:00:8a:86:06:c9:8b:1c:9f:43:f3:94:f3:de:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BB:BE:58:08:F0:5E:B1:6E:42:B3:A0:0E:05:7C:C9:77:21:F4:57
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/q7u-WAjwXrFuQrOgDgV8yXch9Fc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.72.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:e8:bd:95:06:90:84:b3:a9:76:82:2a:94:92:9a:a1:8b:92:
ca:ec:48:c8:c2:36:1b:45:5e:14:4e:43:a2:d5:b6:19:55:19:
a0:5d:64:ea:13:da:0a:fd:0e:b3:67:0d:16:55:b1:56:15:13:
3b:a9:dc:26:ee:e4:01:4f:f6:40:fb:dc:d7:5f:a9:13:f7:04:
46:e3:08:40:c9:f3:a6:0c:83:b8:21:a4:30:1c:d1:17:b8:1c:
10:4c:09:cb:e1:8a:01:52:8f:7b:01:86:ef:26:4d:16:d1:99:
9f:d0:c3:87:7c:80:c8:6d:d8:0a:03:da:3d:b3:da:07:5d:50:
a1:d5:52:d4:5e:1d:d0:aa:57:b6:6b:52:65:06:9c:72:df:76:
c6:bf:56:9e:17:a8:ca:f2:d0:72:d4:04:fc:1d:8c:24:3e:26:
8b:b2:32:e1:b5:c2:1c:8b:52:7f:13:18:34:c6:7e:06:62:df:
bf:55:b6:4b:1c:e8:32:31:06:7b:a3:10:9d:07:71:86:61:39:
1b:82:19:62:f5:cb:b9:93:51:bb:42:f9:cc:93:fc:e7:d4:bf:
90:8c:b2:10:88:cb:85:8a:fd:bd:c6:4f:6a:6f:d4:a1:5c:f9:
55:30:89:72:1e:2f:b6:7d:60:24:c8:df:67:2b:7d:c9:52:86:
42:a3:42:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:14:25 2025 by rpki-client