Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/zGUqBmg2umnGkyTJF_Vi6364p80.roa
File: zGUqBmg2umnGkyTJF_Vi6364p80.roa (raw, json)
Hash identifier: 0TrlgtrZXkJDa35gw2alpj8biJuorjkDKTA2ZUKKyfU=
Subject key identifier: CC:65:2A:06:68:36:BA:69:C6:93:24:C9:17:F5:62:EB:7E:B8:A7:CD
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0DB0
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zGUqBmg2umnGkyTJF_Vi6364p80.roa
Signing time: Fri 01 Sep 2023 09:24:52 +0000
ROA not before: Fri 01 Sep 2023 09:24:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 192.72.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3504 (0xdb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 1 09:24:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CC652A066836BA69C69324C917F562EB7EB8A7CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:42:ef:2b:ea:95:db:61:4f:b1:86:3f:6e:
17:65:ad:af:a1:60:db:b5:ab:3b:e5:24:1b:00:e7:
05:05:00:0e:ef:ba:c7:38:40:bc:71:13:ed:58:44:
3c:97:6d:3c:92:b6:c1:2d:b6:47:de:d4:6c:07:18:
88:23:8b:82:59:4d:5b:4d:ea:ef:79:59:29:86:2b:
2f:ef:8a:f7:5a:88:bd:58:65:df:b3:11:0b:0a:54:
1f:67:83:6c:31:be:f5:05:4a:61:e5:b7:80:8d:d4:
0b:cd:a8:40:4a:d2:2a:07:d8:86:fb:de:48:23:b8:
04:f6:dc:d0:3a:f2:b2:61:7e:73:f1:0f:ec:40:d1:
73:5c:e2:34:63:27:bc:4d:ae:88:bb:e8:c8:1c:42:
6f:ea:ed:eb:ec:30:00:e6:88:f3:3c:9f:9f:08:95:
8f:9a:6b:85:80:2c:57:f0:c3:f9:15:8f:97:7e:d8:
7d:f7:eb:44:74:6b:71:41:00:2e:b3:fa:74:1f:80:
4a:68:63:e5:8a:fc:da:99:d5:9f:a9:8d:46:33:6b:
29:28:8e:4b:ea:98:c7:97:8b:eb:58:f3:bb:ce:be:
e0:d2:92:d6:80:04:c4:df:79:7c:a1:fe:08:9e:ec:
a3:9a:38:7f:84:11:d0:3a:ac:e4:13:db:42:b4:12:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:65:2A:06:68:36:BA:69:C6:93:24:C9:17:F5:62:EB:7E:B8:A7:CD
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zGUqBmg2umnGkyTJF_Vi6364p80.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.128.0/18
Signature Algorithm: sha256WithRSAEncryption
9c:64:30:f7:a1:86:56:f4:97:45:6a:4b:18:20:b2:4a:c0:d9:
3a:4b:e2:4d:fd:f1:2b:47:b2:02:01:8b:74:d2:61:36:df:13:
59:3d:ae:4a:c0:86:cf:df:ed:07:f2:27:5f:9e:5b:73:4f:79:
28:c7:04:83:d9:e4:cb:ea:d0:4f:bb:4c:8e:11:76:c4:68:0a:
78:e3:60:86:15:fa:bc:51:ac:b8:fb:0b:8f:e7:00:eb:0e:1e:
88:c6:c3:a7:28:9c:63:91:d2:51:13:2a:22:93:b5:14:69:1f:
f5:85:91:c3:b1:28:7f:6f:eb:ab:cd:c1:41:5a:58:d4:78:34:
14:d1:da:e9:cd:28:b7:65:ad:d3:2b:46:49:31:7f:d2:0f:eb:
b1:22:01:d7:1a:d5:de:c9:d7:62:33:d6:68:83:d7:70:fd:93:
f2:e7:b0:9b:b8:53:22:a1:6b:54:53:ad:fa:b6:d3:7e:b3:2d:
0d:03:ed:f4:55:16:6b:c1:f7:53:3e:ca:6e:4e:8b:b8:97:d0:
f8:e7:53:a8:a7:9c:00:dc:0d:3e:7d:12:aa:9d:55:eb:61:62:
1d:f6:52:84:a1:da:0d:ab:bf:fd:3b:07:5b:44:4b:ea:a1:e4:
09:54:fd:e5:a6:07:d7:de:a7:ca:75:05:5a:fd:77:42:93:ef:
b5:f4:81:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:52:58 2025 by rpki-client