Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/qq3ZqSBA154NQX-ki1KvopTgs5o.roa
File: qq3ZqSBA154NQX-ki1KvopTgs5o.roa (raw, json)
Hash identifier: RgFUlb00pMvxqj2mxJ+kPx6W9HVBonl4hRmgziDTByE=
Subject key identifier: AA:AD:D9:A9:20:40:D7:9E:0D:41:7F:A4:8B:52:AF:A2:94:E0:B3:9A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/qq3ZqSBA154NQX-ki1KvopTgs5o.roa
Signing time: Thu 15 Sep 2022 02:43:34 +0000
ROA not before: Thu 15 Sep 2022 02:43:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 220.229.66.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AAADD9A92040D79E0D417FA48B52AFA294E0B39A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:d4:aa:05:36:00:95:5d:b5:f7:e0:5b:83:
0b:1d:e2:ca:18:13:82:ce:a1:e5:f4:40:87:50:c5:
c5:da:53:da:76:a6:2c:36:38:1b:6c:6a:ed:54:5f:
09:bb:b0:5d:5f:d5:cb:b9:39:de:ba:1a:39:11:09:
68:5d:9e:d6:96:36:fd:75:e3:3f:f0:30:4e:a6:4f:
67:d8:7d:42:77:c7:4b:e0:f2:2d:58:03:bf:4e:1c:
6f:01:ed:65:80:8f:37:71:2a:8b:72:d1:9e:ab:44:
fb:31:22:f8:53:5e:c5:fe:ec:b3:05:a3:76:28:c4:
5b:6b:4c:6b:3b:0b:d9:6e:ee:9d:8f:a8:90:55:5b:
12:ac:b1:ca:bf:c7:23:b3:4a:b0:f1:7a:1e:39:3e:
3c:39:c3:29:e0:be:59:9b:66:25:68:e5:91:28:9d:
8f:b2:27:03:ee:75:a6:61:94:43:de:0e:1d:6f:ae:
59:72:2c:5b:20:6a:cf:65:ae:14:2e:9e:0b:45:73:
a6:fc:01:1e:5b:cd:b5:e8:94:b9:cc:a4:4e:1e:e0:
ae:9d:8e:e1:5f:f3:d3:e8:80:21:1c:e4:23:86:52:
d1:74:da:54:ad:2e:3e:56:84:f7:f9:32:b1:7f:fa:
86:97:66:b4:2f:81:3a:c8:7f:79:64:02:2a:25:4c:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AD:D9:A9:20:40:D7:9E:0D:41:7F:A4:8B:52:AF:A2:94:E0:B3:9A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/qq3ZqSBA154NQX-ki1KvopTgs5o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.66.0/23
Signature Algorithm: sha256WithRSAEncryption
44:a2:15:90:24:c6:22:4c:66:8a:5e:28:31:0c:ec:e6:ea:a9:
b6:40:e8:88:64:93:e8:55:8b:8c:d8:a4:0c:12:1a:cc:35:4c:
72:85:39:0e:69:1a:2a:dc:dc:d1:0b:f0:94:f0:f5:90:cd:92:
a0:0d:76:8b:30:86:52:bd:a3:c5:de:9b:fa:83:05:63:60:8e:
30:39:92:e3:f6:9c:59:03:55:e2:20:ce:6d:22:b6:e4:86:78:
ae:49:4b:d3:be:73:cf:b2:e7:d7:68:93:59:40:c9:4b:51:9d:
5d:6b:7e:7c:fe:fe:bb:62:77:00:91:ea:68:e2:e4:6c:0a:ca:
f7:27:3d:fc:1a:8a:b9:5e:f5:13:f9:66:32:2e:5c:07:d9:be:
93:18:f5:28:eb:b1:b8:c9:10:52:b1:d7:e5:dd:b8:03:5a:bc:
ce:91:ed:91:b2:28:c0:10:95:9f:34:00:07:cc:e7:7c:26:38:
96:d6:59:d7:f0:f4:89:d2:1d:af:08:2e:a3:53:5a:8f:d4:66:
10:15:4e:8f:fd:bd:3d:60:b2:6d:8d:6f:ce:83:3f:d5:d2:b4:
76:df:88:30:3d:be:33:7b:d3:da:e4:2a:5e:77:10:7d:ef:41:
43:7f:57:a0:fb:83:4a:d0:b5:4e:12:d8:ac:8d:48:b2:93:01:
88:6d:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:53:08 2025 by rpki-client