Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/stuXXJUiB5yVDPBwmNKQWkQXZT0.roa
File: stuXXJUiB5yVDPBwmNKQWkQXZT0.roa (raw, json)
Hash identifier: d//B1g6jhtOUahmNjnZDhhZtzjy9wLrM9d0SFOIfaO8=
Subject key identifier: B2:DB:97:5C:95:22:07:9C:95:0C:F0:70:98:D2:90:5A:44:17:65:3D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08D7
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/stuXXJUiB5yVDPBwmNKQWkQXZT0.roa
Signing time: Tue 29 Sep 2020 09:52:30 +0000
ROA not before: Tue 29 Sep 2020 09:52:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131586
IP address blocks: 106.106.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2263 (0x8d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:30 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B2DB975C9522079C950CF07098D2905A4417653D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:ab:88:34:c2:9e:89:df:74:af:ad:92:4b:
29:da:9c:fe:ca:96:08:fa:64:da:5e:89:c8:63:45:
ee:15:77:18:36:fe:58:a4:16:ac:c6:56:53:fc:dd:
65:47:50:e7:95:20:d8:ae:73:d2:ac:16:ad:88:7c:
25:1a:ba:f2:9a:7f:8a:62:81:cd:f4:dc:15:e7:fe:
14:56:db:9e:51:3d:95:07:3f:2f:5d:ec:ad:3e:af:
2e:d3:e0:80:09:99:cd:3b:de:a0:0a:90:1f:f7:04:
23:53:2d:bf:c7:70:ce:9a:06:ea:b2:17:53:ce:11:
b2:bb:15:5d:72:34:29:3a:87:64:31:98:5a:ed:e8:
5f:ae:36:10:2c:07:7a:e0:24:b7:8a:a9:32:56:a3:
04:30:64:3c:2c:af:74:4f:c7:1e:98:2e:0a:bd:f1:
df:fc:21:80:f4:c7:e5:b4:2c:de:81:bd:58:0d:ea:
a5:c0:3a:cf:29:51:85:fd:e8:b9:2d:6d:00:e2:7f:
e9:bc:55:82:a2:1f:dc:45:90:af:12:de:a3:51:7f:
00:0d:fd:1e:54:b1:34:47:ee:8c:fc:18:f6:cc:31:
fd:49:67:02:c4:27:94:c0:01:ab:0c:a3:4b:bb:2c:
31:42:57:57:8f:a6:23:f2:d5:70:95:f3:80:8a:3a:
4e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DB:97:5C:95:22:07:9C:95:0C:F0:70:98:D2:90:5A:44:17:65:3D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/stuXXJUiB5yVDPBwmNKQWkQXZT0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.106.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:48:fd:48:40:35:19:e3:15:51:8e:cd:3a:01:d5:b2:9e:45:
df:f2:2c:74:73:7a:c4:b5:ea:ce:6f:3a:bb:07:db:09:69:8c:
e1:b9:4e:c8:d5:8f:2e:f0:f8:49:e0:e6:13:d4:23:7f:39:2f:
87:18:c9:84:18:72:f4:b2:33:7c:18:7a:2c:fa:53:47:52:66:
a9:98:3a:a3:80:c4:d2:2e:ab:d1:e3:98:23:42:1b:b3:39:0c:
32:f3:34:25:b8:aa:7e:0b:9d:f8:2c:d8:8a:d8:da:1f:76:da:
ee:5a:97:49:61:f1:7e:10:ed:f4:15:17:1e:2d:9a:c9:42:a3:
8c:e8:8e:0e:90:6d:7f:06:1e:fe:f6:07:c2:13:df:0e:49:c3:
25:ac:12:cf:9a:e3:7d:dc:cf:f7:11:26:0d:91:99:dc:ad:eb:
83:21:ff:d4:ff:bb:53:54:75:40:59:2b:37:8c:57:ca:03:8f:
be:5c:91:3e:cc:6d:5b:a9:72:7a:05:cf:e4:b7:d7:ce:91:b2:
09:9f:15:2c:dc:77:10:61:93:18:af:d9:79:66:6f:72:7d:b5:
84:73:47:6e:d5:19:50:e4:66:5c:d8:64:dc:ae:2e:49:4d:96:
f9:bb:a7:cd:58:ae:2b:08:ae:4b:60:04:89:cd:83:bb:2d:6a:
98:28:e6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:17:05 2025 by rpki-client