Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ue0pLQ9mNeZWHNyhUm4UTPoCvYs.roa
File: ue0pLQ9mNeZWHNyhUm4UTPoCvYs.roa (raw, json)
Hash identifier: TBSJXv/7lznrNUJJN4mdQKw4uofxE0vWcM8pajozo/o=
Subject key identifier: B9:ED:29:2D:0F:66:35:E6:56:1C:DC:A1:52:6E:14:4C:FA:02:BD:8B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1349
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ue0pLQ9mNeZWHNyhUm4UTPoCvYs.roa
Signing time: Fri 01 Sep 2023 09:24:44 +0000
ROA not before: Fri 01 Sep 2023 09:24:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 210.64.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4937 (0x1349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B9ED292D0F6635E6561CDCA1526E144CFA02BD8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:68:b7:3b:2f:06:0c:a0:27:5e:87:d7:44:
8a:dc:bd:04:60:8b:6f:96:94:94:ee:61:15:06:0e:
d3:96:d6:dc:ef:d2:7f:66:e6:0a:02:2d:db:19:b8:
c6:74:db:fc:43:df:ca:e5:53:a7:d2:02:f1:87:96:
e8:08:d2:96:2a:c3:ed:7a:19:88:5a:f4:12:e7:c2:
d5:48:34:e3:37:0d:96:44:ea:81:e5:5e:6a:35:13:
a1:eb:cd:81:c4:5a:2c:98:3a:99:07:2c:22:8a:83:
39:7a:43:6d:92:65:91:04:f4:75:96:46:db:ee:0b:
c0:f7:7a:ca:c4:c5:3c:e1:47:eb:a6:f8:85:2c:cf:
0c:23:38:66:a5:d4:4e:58:c4:71:38:d1:7c:b5:13:
01:7c:f0:da:05:e3:b3:cb:2c:b5:43:d4:ab:a9:df:
a2:0f:2d:70:9f:9c:7e:82:ef:4e:e4:48:a3:a5:74:
12:fc:48:24:b9:81:59:08:2b:14:2c:1b:87:b4:02:
07:13:9d:2c:b7:9b:c0:17:8b:5b:61:49:0d:d0:2a:
a7:8d:19:6b:37:55:35:55:3d:7e:78:74:81:f8:c3:
d9:db:d5:a4:09:4c:36:00:38:f4:f2:61:ea:1f:89:
df:ba:8d:29:cd:65:5b:92:24:79:dc:a2:63:f7:e6:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:ED:29:2D:0F:66:35:E6:56:1C:DC:A1:52:6E:14:4C:FA:02:BD:8B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ue0pLQ9mNeZWHNyhUm4UTPoCvYs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:96:32:06:92:6f:9e:c8:20:82:70:5f:a4:25:86:7e:6b:18:
38:41:a8:5b:f3:89:0d:ca:b2:79:f8:15:0c:25:a5:d6:da:9c:
41:4d:c1:cf:25:9a:b0:67:35:1b:01:15:ea:ba:3a:45:09:56:
63:59:6c:a4:26:0e:35:6e:10:19:27:bf:3d:2b:6f:3c:01:26:
81:43:e0:95:58:23:17:67:ea:27:fd:7d:c6:52:ae:88:8d:f5:
23:8a:0c:f7:d2:72:7f:13:99:ce:ce:8a:eb:25:cb:c5:c6:69:
64:4d:3c:88:77:b4:3b:c7:73:cf:76:d7:2c:87:ee:bc:68:83:
77:13:48:bf:84:d8:67:ff:51:4b:da:8a:f7:6d:91:0a:60:ec:
2b:1c:7d:32:06:1b:14:4e:fe:61:c1:d6:4a:66:76:30:52:c0:
5e:29:5c:02:3e:26:57:38:10:44:4d:8b:18:49:d6:cb:89:aa:
72:2f:24:d4:42:f9:3f:bd:38:a7:8a:42:20:d3:ad:87:df:fb:
ce:0c:23:16:aa:7b:cf:d6:6d:fd:22:e7:0b:9c:14:c6:07:a5:
93:0b:7b:2e:0b:52:bf:94:8f:d6:3b:97:ad:43:a9:5b:4b:72:
8a:a5:4d:58:6e:0e:0b:5b:14:5b:d9:09:cd:d2:0b:bc:d4:7a:
48:d4:b3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:04 2025 by rpki-client