Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/seoyqqqtybnXjRu_YDIs6szcygc.roa
File: seoyqqqtybnXjRu_YDIs6szcygc.roa (raw, json)
Hash identifier: G/fHaVimJdrG6JON3vSFxPRXYh2DdIc7TtzZ34mXVLg=
Subject key identifier: B1:EA:32:AA:AA:AD:C9:B9:D7:8D:1B:BF:60:32:2C:EA:CC:DC:CA:07
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10C8
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/seoyqqqtybnXjRu_YDIs6szcygc.roa
Signing time: Wed 01 Feb 2023 10:29:02 +0000
ROA not before: Wed 01 Feb 2023 10:29:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 218.32.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4296 (0x10c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:02 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B1EA32AAAAADC9B9D78D1BBF60322CEACCDCCA07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a6:f9:36:47:58:f4:8f:64:cf:a6:cf:3a:38:
00:84:f8:02:13:a9:ac:44:07:37:da:0d:97:18:1e:
81:fc:e6:38:5a:ee:5e:9f:dc:ee:ed:1a:d2:ba:2e:
26:62:69:51:1e:7c:53:40:0a:df:c1:0b:52:e4:bc:
69:50:25:07:88:6b:95:60:01:5d:a1:10:57:f9:a7:
77:5a:5c:9c:49:57:c1:65:18:e2:5b:1a:82:be:24:
26:e4:fc:d1:c9:2f:82:72:77:f2:37:8d:e3:39:18:
de:96:10:cc:d3:a0:dd:98:1d:30:94:81:6c:fd:1e:
42:eb:b4:e0:03:b0:5a:a9:72:e4:79:df:6b:8d:dd:
2b:3f:aa:ff:6c:05:2f:1c:d7:05:9f:1e:80:20:b0:
37:bb:0b:46:da:e6:73:f0:9a:da:c3:b1:8a:9a:fe:
9a:f8:4f:f2:0c:44:88:0f:05:2c:d1:2b:d1:de:cf:
a9:3d:65:27:ea:95:79:8d:9d:8b:e1:c6:f7:4f:23:
5f:f2:77:a5:33:fc:14:9c:e9:d3:2a:14:c1:e5:44:
11:24:51:cd:9b:ca:80:68:61:e9:08:93:08:d5:9c:
19:4e:21:6c:83:0c:84:f7:65:a3:64:d0:22:ec:17:
10:a1:e8:70:49:20:ec:3a:a4:f1:eb:59:a0:61:0e:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EA:32:AA:AA:AD:C9:B9:D7:8D:1B:BF:60:32:2C:EA:CC:DC:CA:07
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/seoyqqqtybnXjRu_YDIs6szcygc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:95:fd:bf:49:f5:13:2b:27:df:be:35:40:bc:cc:d5:ad:0b:
6e:39:41:c8:86:d5:40:b6:36:0b:4a:71:1f:35:87:28:03:3e:
42:bc:98:0f:f5:b5:2e:be:bd:bb:a5:44:5f:62:41:22:50:78:
05:16:0a:29:af:19:9c:aa:6e:11:fa:68:b5:30:6a:7e:25:cf:
ca:28:eb:86:4e:4e:dd:07:2d:e1:db:74:1f:e3:90:6c:21:e3:
ea:17:eb:5a:59:db:72:b7:2b:3e:c1:1c:f0:24:78:57:51:0d:
59:2e:03:be:f2:c1:f6:b1:75:37:a2:25:87:1d:78:40:18:b7:
4a:7e:c2:ac:45:24:9d:29:bc:27:6c:d9:92:85:21:04:60:1b:
23:30:0d:06:1a:28:bf:ed:70:90:54:bb:62:0a:8a:cd:97:1a:
09:6b:99:f9:d2:d9:cc:63:bd:80:d5:65:73:0e:81:3f:aa:6c:
82:ab:d6:71:6a:16:45:a2:7b:aa:62:7a:c6:23:76:19:f8:12:
27:86:da:47:29:61:34:cc:e0:7b:8b:c3:0e:ab:71:02:b2:e8:
06:51:37:72:e6:3d:2e:14:bf:d2:57:f9:5d:d2:b7:b2:7e:1c:
51:eb:b8:1d:2d:5a:bd:20:af:4f:df:ab:5f:dc:ab:20:e9:1c:
fd:6d:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:33 2025 by rpki-client