Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/s1HA4MKJcLMdnT11EqfxsmBrkLo.roa
File: s1HA4MKJcLMdnT11EqfxsmBrkLo.roa (raw, json)
Hash identifier: KW1F1XsNg1tuoFUHwFcaapzZgTskCF9jhTIXfveVkjw=
Subject key identifier: B3:51:C0:E0:C2:89:70:B3:1D:9D:3D:75:12:A7:F1:B2:60:6B:90:BA
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/s1HA4MKJcLMdnT11EqfxsmBrkLo.roa
Signing time: Thu 15 Sep 2022 02:43:40 +0000
ROA not before: Thu 15 Sep 2022 02:43:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9922
IP address blocks: 106.105.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B351C0E0C28970B31D9D3D7512A7F1B2606B90BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d2:19:00:7a:9a:39:0e:ef:94:ed:10:a1:b9:
73:a7:93:be:5c:52:6a:17:97:82:52:27:c9:04:69:
72:53:17:be:23:a5:29:1c:2f:fd:7c:17:6a:34:0a:
21:66:dc:c3:13:3d:40:ba:31:1f:e6:ff:d1:05:c1:
8f:8c:4e:97:60:bd:25:04:54:9d:9c:58:85:3f:2e:
13:db:e6:4e:5e:20:b3:e2:28:c2:f3:71:d4:07:c7:
f9:b1:1e:7a:82:fb:2a:ee:e3:91:29:5b:56:2e:ce:
9b:5e:60:02:bb:dd:7a:8e:67:f4:0a:fb:8a:99:89:
df:4b:48:5c:b4:74:74:7e:6b:86:78:3a:2a:c5:5f:
de:16:3d:a9:4f:9d:71:fa:66:45:20:44:d1:6d:72:
3b:f2:fa:50:45:7b:87:50:d4:f0:6d:9e:bb:8b:64:
87:5c:e5:50:a5:03:4f:99:c3:20:de:99:86:7c:a6:
f7:c3:ba:68:5b:f3:c5:0e:96:25:e8:1e:fa:d2:1f:
37:f8:e5:c2:f5:fd:2b:c2:48:56:e8:ce:c1:e4:0f:
b8:87:68:81:cd:f3:3f:d9:9d:19:41:e7:e1:66:cc:
a2:ad:64:b4:3e:e2:be:52:6e:38:18:c0:c6:ce:67:
e2:e1:7f:15:35:66:72:30:4c:ee:eb:ff:97:f8:34:
7b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:51:C0:E0:C2:89:70:B3:1D:9D:3D:75:12:A7:F1:B2:60:6B:90:BA
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/s1HA4MKJcLMdnT11EqfxsmBrkLo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:80:3b:bc:26:26:25:4c:7a:d9:ba:24:00:b8:5d:09:10:29:
55:e5:d3:1e:cd:12:53:a7:d9:fe:d6:cf:aa:17:5d:fb:69:33:
cf:84:8c:0a:33:a9:5a:14:05:6a:a1:d3:a4:b0:b3:ca:ae:64:
e1:2c:27:90:e9:71:64:e4:16:34:a3:3b:39:8e:5c:79:9e:00:
70:60:1a:80:fc:f8:96:0e:51:8c:60:ec:c8:a8:ef:1b:c0:f7:
b6:0a:36:31:27:b2:e9:dc:99:61:bb:2f:67:e0:5c:7a:2b:2c:
92:a7:cd:27:4b:05:fa:da:73:3b:86:49:fc:05:57:37:56:87:
7c:4e:12:25:96:07:6d:ce:fd:d6:5a:24:6f:f7:59:d8:db:5a:
aa:35:a5:55:6b:a4:6e:64:b1:9e:a7:8c:87:0a:0c:c5:e9:54:
1b:e1:02:75:82:5c:9b:f3:66:dc:cc:a1:d9:a6:c9:6c:4f:88:
bf:6c:06:87:ff:91:a1:6b:74:3f:e6:f2:3b:ad:e5:ef:b0:28:
9d:f0:80:46:75:f1:53:7e:ce:58:61:bf:b4:fd:98:db:a8:b7:
77:23:f8:6a:c1:db:6e:d2:46:25:4e:7e:e3:5b:5b:b8:48:2a:
4f:34:96:ef:a6:d2:0e:fa:0f:f1:fb:b7:53:86:a3:37:51:da:
97:80:db:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:30:15 2025 by rpki-client