Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ztBYFE8lsQxLzX0vWZd3pKt922Q.roa
File: ztBYFE8lsQxLzX0vWZd3pKt922Q.roa (raw, json)
Hash identifier: npWj7dS3kdyy/J3KOoYf1tiAVdXQVCzxSoc3qP5l8xU=
Subject key identifier: CE:D0:58:14:4F:25:B1:0C:4B:CD:7D:2F:59:97:77:A4:AB:7D:DB:64
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ztBYFE8lsQxLzX0vWZd3pKt922Q.roa
Signing time: Thu 15 Sep 2022 02:42:59 +0000
ROA not before: Thu 15 Sep 2022 02:42:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 139.175.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3183 (0xc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 15 02:42:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CED058144F25B10C4BCD7D2F599777A4AB7DDB64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:78:80:a5:e3:ff:9e:f3:19:42:4f:6f:ed:
8a:f9:c6:2a:d1:07:01:9c:59:d2:76:8a:4d:f7:22:
0e:da:fc:1d:7f:d1:32:e0:a4:6d:fa:b4:87:58:26:
06:b1:2e:d4:cf:01:7c:99:1f:ce:e3:5c:d0:08:00:
47:d8:f6:b1:05:72:84:a8:d8:80:f8:20:44:f1:21:
4c:68:64:16:6f:ba:7f:9f:57:0c:c0:f9:a6:52:8e:
46:58:1b:7c:e3:77:48:5c:23:19:3c:b9:9b:c3:ac:
38:86:5f:c2:83:4d:09:8a:53:a6:2b:90:04:56:dc:
46:e9:11:5c:7c:da:c1:ba:e0:49:5f:b3:ea:c2:c5:
1d:48:d8:9d:ab:2e:7e:08:4a:9f:fa:36:88:25:41:
23:b5:b2:85:58:a9:1d:1c:e0:0d:07:03:1b:7f:c8:
b8:01:80:d3:89:25:c1:0d:4f:ee:06:be:14:1a:00:
70:25:97:67:90:65:21:fc:c7:d8:39:c2:c7:a7:18:
e3:40:81:27:a0:66:15:57:0d:fa:f3:36:14:f0:ea:
d6:49:66:b0:d8:0c:6c:66:8a:eb:11:d7:35:c9:ae:
aa:96:be:33:be:85:de:4e:35:f1:9b:36:3e:5a:0f:
7d:4d:28:b8:de:90:5e:73:25:39:59:8d:47:cb:c8:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D0:58:14:4F:25:B1:0C:4B:CD:7D:2F:59:97:77:A4:AB:7D:DB:64
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ztBYFE8lsQxLzX0vWZd3pKt922Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.175.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:63:7e:99:c6:e0:2f:6f:b2:ea:9a:48:73:07:f1:1c:28:8e:
72:95:8c:ed:d2:7c:19:cb:62:c6:21:25:39:8e:ca:94:0e:a6:
e6:12:86:6e:48:3a:a4:43:55:09:ad:2f:d0:a3:38:26:17:a7:
fd:ea:e5:6d:7e:73:1b:e9:6b:07:74:89:8a:87:d2:5c:d6:a0:
4c:2c:3a:b4:22:b2:9f:44:16:4d:ad:79:a9:86:59:ba:a5:56:
12:c6:6c:38:13:6e:76:bd:88:fc:5a:7f:1a:0a:e6:d5:ed:de:
be:e7:3e:27:44:19:ec:5d:6c:c9:3e:d1:d3:f7:73:fb:d8:5d:
d5:5f:50:4a:c4:3d:01:91:2b:15:95:8a:17:f4:4c:43:16:87:
c2:db:c4:dc:80:e1:9a:80:6f:2e:be:31:29:ee:73:0c:69:b1:
96:a7:5d:5e:d6:dd:90:67:0d:d9:62:14:54:ed:f3:14:1a:eb:
44:3c:17:02:dc:07:2a:ac:64:a4:b6:ee:08:d9:06:a2:d6:5b:
18:e0:f7:59:07:e0:7b:92:f3:9e:67:f9:27:c8:bd:57:f3:5b:
58:c2:38:87:f8:5a:af:9d:c7:91:46:f6:c9:a0:f7:0f:c6:f0:
54:45:93:b4:a8:54:81:2f:31:59:70:72:aa:18:d1:70:a8:9f:
0c:11:cc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:40 2025 by rpki-client