Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/v0rXl758K4zlVTA7a_pQP-fz77M.roa
File: v0rXl758K4zlVTA7a_pQP-fz77M.roa (raw, json)
Hash identifier: k2CazBe0qQw0YCJt6TTYdM5mia1HJpjzCmGfCTMXH4U=
Subject key identifier: BF:4A:D7:97:BE:7C:2B:8C:E5:55:30:3B:6B:FA:50:3F:E7:F3:EF:B3
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E26
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/v0rXl758K4zlVTA7a_pQP-fz77M.roa
Signing time: Wed 29 Sep 2021 02:43:14 +0000
ROA not before: Wed 29 Sep 2021 02:43:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 210.244.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3622 (0xe26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BF4AD797BE7C2B8CE555303B6BFA503FE7F3EFB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2a:1d:a8:55:e8:1d:b5:d4:54:22:0f:25:50:
fa:d2:85:c8:52:2b:53:83:3b:86:4c:ae:bd:0b:97:
a6:7d:16:72:f5:30:20:8b:60:53:7f:7a:a9:3f:42:
a7:83:af:41:3a:5b:15:53:2a:13:f6:8f:ec:f4:09:
6d:92:1c:4f:31:9e:dc:27:a7:30:94:8a:c4:12:d2:
e8:7b:ec:7a:bf:b3:39:82:74:01:a9:0b:99:60:7e:
a2:f6:aa:3d:f3:98:e8:c5:29:b8:56:21:c9:da:21:
90:eb:7d:d2:77:43:ab:ec:89:1c:e2:81:b7:bd:b7:
94:61:2f:b8:79:0d:8f:3f:11:26:7a:9b:62:7c:cc:
d0:cb:e9:21:d0:bd:44:bb:8a:24:2b:cb:5e:ac:e1:
19:47:71:c0:39:ca:6e:fb:fd:ab:f9:4d:e7:f2:2a:
d0:d5:f2:27:3d:f8:fb:97:ef:b7:4f:39:91:72:3b:
ed:32:14:35:e6:02:d9:9c:ca:7f:35:c7:8a:8a:5e:
84:fb:20:74:a1:3c:f4:dd:29:b8:57:be:1a:88:4e:
ba:54:0c:fa:32:3d:63:17:6b:f0:16:33:f4:c5:17:
89:b8:41:8f:b2:81:aa:8b:c1:5a:84:43:99:ae:d6:
ba:6f:01:f9:b2:ef:27:32:0b:ba:2e:a1:d7:4d:3c:
d9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4A:D7:97:BE:7C:2B:8C:E5:55:30:3B:6B:FA:50:3F:E7:F3:EF:B3
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/v0rXl758K4zlVTA7a_pQP-fz77M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.244.0.0/17
Signature Algorithm: sha256WithRSAEncryption
48:3e:90:75:20:6e:2e:01:b2:80:12:96:ea:8e:62:fd:99:50:
f9:b5:2e:30:d6:de:fd:df:c5:41:20:e9:da:28:0d:ae:db:da:
a0:7d:36:08:84:9d:30:6c:31:cf:19:48:31:6a:f0:d6:2a:50:
3a:4f:bd:56:dc:6c:97:5a:cc:c7:b3:df:ad:de:79:6e:42:b3:
fd:6b:44:44:4d:32:84:1a:16:1d:6a:96:48:f4:f4:eb:ce:09:
25:6b:91:e4:1b:18:ba:50:4a:51:96:d8:71:f0:47:e8:de:36:
60:72:b8:d8:1b:51:26:83:1e:45:d3:e8:05:71:ef:a3:d6:fa:
bb:0b:c7:9c:db:c3:3b:7b:c4:3b:53:b6:1a:e8:a4:eb:dd:19:
2b:46:76:e2:7e:93:6e:b0:04:13:4f:0a:9c:90:6e:ee:38:97:
b4:31:24:26:35:2d:f7:d9:3e:bc:99:52:33:1c:47:e5:bd:ea:
4f:b7:91:64:38:09:6e:0c:fb:99:b9:6e:1b:0b:0c:88:64:d3:
90:84:dd:ed:38:60:33:c8:02:06:46:0c:8d:f7:57:1d:92:7c:
9e:3f:a7:5c:11:33:64:06:80:84:be:d9:c1:5d:e3:8e:1c:89:
73:6f:2b:4b:68:5f:ba:ec:26:69:bb:ea:f3:3e:1a:88:a9:2d:
5b:4c:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:34:14 2025 by rpki-client