Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/yi8R0FaR15WeGPphHd21o9VbHrg.roa
File: yi8R0FaR15WeGPphHd21o9VbHrg.roa (raw, json)
Hash identifier: mZs99xBi/hAGe87Zpj57lnOmmMDp57sAICfDSLwpPmM=
Subject key identifier: CA:2F:11:D0:56:91:D7:95:9E:18:FA:61:1D:DD:B5:A3:D5:5B:1E:B8
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yi8R0FaR15WeGPphHd21o9VbHrg.roa
Signing time: Thu 15 Sep 2022 02:42:42 +0000
ROA not before: Thu 15 Sep 2022 02:42:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131586
IP address blocks: 175.183.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CA2F11D05691D7959E18FA611DDDB5A3D55B1EB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:05:35:66:a5:8c:dc:77:4a:80:48:dc:2e:
6f:d2:49:bc:df:6a:51:bc:3e:f0:c3:94:2b:8a:0c:
1f:8f:d0:17:78:86:e6:7d:db:7c:09:e1:6c:45:f5:
9c:6c:68:19:48:d1:2a:a9:b8:97:cc:f3:32:2d:7b:
65:e4:b4:a3:1b:15:51:b7:39:8d:e2:ce:d6:fd:5e:
a3:e3:69:95:45:1d:f8:c2:ea:0c:e0:8e:a1:38:db:
83:e2:34:40:5f:6d:e4:d1:f6:dc:8c:cd:48:7f:9c:
e8:12:3e:7e:7b:0b:68:d9:e7:e9:1e:8d:72:a4:96:
c1:33:41:cc:8f:2f:27:ac:4d:b9:af:79:77:14:c1:
e7:15:6e:bc:6b:53:75:c2:3c:46:55:85:1e:ac:ef:
50:96:61:3b:3a:3e:3a:ef:a6:d5:99:87:7b:c9:65:
dc:dc:14:82:d4:19:44:86:8c:77:72:44:62:33:09:
b0:10:0c:69:60:3d:7c:b2:a4:fe:53:4a:26:07:32:
ee:46:c8:8b:48:9e:cd:e7:c4:af:5e:83:6a:1d:9f:
17:85:32:11:38:f7:32:55:c0:63:67:3a:42:1c:ed:
dc:c8:28:09:ff:a4:54:05:4b:76:57:53:aa:9e:1c:
ea:c6:c0:c0:0e:28:e1:98:c4:66:9a:49:12:e2:8d:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2F:11:D0:56:91:D7:95:9E:18:FA:61:1D:DD:B5:A3:D5:5B:1E:B8
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yi8R0FaR15WeGPphHd21o9VbHrg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.137.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:fe:15:1f:f5:0b:94:da:28:1c:ed:44:76:1b:16:45:07:79:
7b:8d:44:c1:1b:a3:3c:65:8c:60:11:4c:fb:69:fb:52:f4:77:
3c:de:5d:fc:59:e2:69:2f:53:9c:27:4f:bb:d1:8c:1f:79:fc:
79:c6:26:da:5a:3b:8f:8c:7d:c4:bf:75:9f:c4:5c:8f:49:2d:
b8:d3:5f:96:d9:8a:2c:19:c9:72:b3:05:37:ff:26:5d:11:14:
c0:ad:01:e6:b2:9b:41:07:b9:87:54:34:e8:fb:72:a6:ef:93:
ee:5b:fc:19:ac:20:8a:14:57:ab:3c:14:fd:60:54:72:1d:0a:
bb:de:2b:d2:7c:42:aa:f2:0a:3e:c9:e0:c5:25:c6:15:91:50:
4a:ae:0c:12:a2:c9:37:7b:e5:f2:db:62:26:bf:2d:12:4f:90:
2c:53:73:0d:85:7e:37:82:ff:d6:6b:1d:f4:c3:33:b9:ca:bc:
d7:f4:f8:5f:6e:82:b2:9c:f5:8d:45:44:d7:d1:bd:92:fb:af:
99:34:2e:b8:b5:40:48:59:a2:d7:77:59:37:92:32:4a:62:09:
6e:31:60:a6:a0:85:b5:62:c0:65:e4:66:57:22:e3:3b:ce:fb:
c7:20:3f:88:73:98:15:4c:d1:80:ce:d4:ee:cf:70:18:b6:9b:
0e:f5:74:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:30:11 2025 by rpki-client