Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/rt1xpkMxvKqSEp39Ayb25SEh7vw.roa
File: rt1xpkMxvKqSEp39Ayb25SEh7vw.roa (raw, json)
Hash identifier: EpYfmid5jttHrko+PhjVuo5rF6+W18tYVxQXGZNpNcA=
Subject key identifier: AE:DD:71:A6:43:31:BC:AA:92:12:9D:FD:03:26:F6:E5:21:21:EE:FC
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0A1C
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rt1xpkMxvKqSEp39Ayb25SEh7vw.roa
Signing time: Sun 07 Feb 2021 06:39:45 +0000
ROA not before: Sun 07 Feb 2021 06:39:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 192.72.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2588 (0xa1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Feb 7 06:39:45 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AEDD71A64331BCAA92129DFD0326F6E52121EEFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:84:b8:73:db:4b:6b:cd:e9:7f:e9:92:76:
f4:5e:e1:92:89:f8:61:81:38:a1:99:79:d9:e6:3d:
d5:04:90:16:19:6a:9e:99:2d:42:9d:5f:b0:18:e5:
58:1b:3a:a2:3f:38:bb:bd:4e:92:d7:ea:79:03:d4:
b5:db:9b:d7:69:78:7b:aa:14:36:73:55:2a:6f:98:
19:31:4c:00:79:c7:ba:82:7a:20:34:72:27:05:40:
f1:e0:2a:41:a9:bf:85:7d:57:42:33:f2:48:95:32:
01:63:47:a3:5c:a9:38:0c:ce:da:dd:86:c3:c2:c4:
c9:a0:73:6d:f1:4d:7a:b9:74:51:01:1d:c0:fa:91:
7b:9b:e8:0d:0f:b0:07:b3:26:13:b0:f6:6c:4d:5c:
ba:33:cb:c0:5b:7a:82:38:32:81:8b:8b:fa:64:94:
70:68:2d:6b:80:89:0e:b4:b4:ab:90:ad:98:20:67:
18:5c:8c:00:06:59:46:c1:d0:ca:c8:8d:95:2e:28:
d7:3c:6b:6e:fa:a9:c0:99:3a:d7:28:f0:8f:d7:be:
d3:f3:dc:4f:8c:d6:ff:30:1e:fa:9e:8e:56:b1:9b:
5b:1e:19:c7:c2:94:81:23:2d:e7:10:c9:c8:63:75:
c0:8a:af:e8:1b:7d:17:33:47:da:13:ff:24:a0:d8:
c9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DD:71:A6:43:31:BC:AA:92:12:9D:FD:03:26:F6:E5:21:21:EE:FC
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rt1xpkMxvKqSEp39Ayb25SEh7vw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:cb:8f:f8:c6:e0:ff:b1:6b:bc:75:9d:14:57:cb:4a:df:88:
ed:b5:07:74:38:95:6d:38:06:fd:a9:00:b3:1b:34:3f:87:e9:
04:3b:ed:70:82:4d:c8:63:c0:43:d1:f9:52:bb:2d:b0:7c:71:
c4:47:6d:67:b4:ae:83:a7:ac:3c:95:fa:df:a2:75:61:fa:ca:
bd:8a:57:37:1e:4a:65:47:c4:2f:02:43:92:58:bb:82:2d:a3:
4b:d0:c3:48:a4:12:1a:cc:1b:8c:e2:b2:25:bd:68:be:a4:ba:
3d:a9:55:37:f1:09:e4:f2:72:d5:ec:eb:9d:62:2c:20:c8:d7:
8f:19:fa:f7:12:f9:85:e1:16:9f:e2:a8:73:f9:26:5d:bf:2a:
60:03:f3:25:37:c5:24:74:7a:c8:13:05:1a:13:c8:64:e4:77:
2c:81:f2:9e:cf:e1:29:66:06:0f:8a:43:31:f1:3c:be:dd:de:
d7:f7:a4:c0:5e:cc:ae:a3:3d:cb:cd:e6:02:e2:6c:01:67:21:
64:46:f5:f6:72:82:be:dd:f3:85:17:cd:38:17:e3:cd:ee:09:
a6:e3:42:1a:27:b9:22:4d:82:bb:7d:f4:91:5e:eb:50:a6:7a:
10:e8:6a:23:ff:3d:e4:cc:a7:01:24:f6:18:94:3e:86:ee:d0:
c6:1c:3c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:40 2025 by rpki-client