Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1lqrelrQzbCn4nq1dn-1C_qA4MI.roa
File: 1lqrelrQzbCn4nq1dn-1C_qA4MI.roa (raw, json)
Hash identifier: yu+ZTq6Mv90YAQnOcvc1BRscAjBmgUa9nc3haJ3pY1s=
Subject key identifier: D6:5A:AB:7A:5A:D0:CD:B0:A7:E2:7A:B5:76:7F:B5:0B:FA:80:E0:C2
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0DF2
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1lqrelrQzbCn4nq1dn-1C_qA4MI.roa
Signing time: Wed 29 Sep 2021 02:43:01 +0000
ROA not before: Wed 29 Sep 2021 02:43:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 122.146.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3570 (0xdf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D65AAB7A5AD0CDB0A7E27AB5767FB50BFA80E0C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:7e:e5:fc:1b:89:58:61:fe:f6:30:58:ba:
a6:41:19:78:37:9d:98:d3:a9:34:fa:2c:26:8a:86:
45:fa:ab:99:9b:26:f3:23:22:3f:de:24:50:54:c5:
f6:54:3d:32:e7:8f:f2:3c:be:bb:3a:03:95:72:54:
e6:72:6c:2f:8f:0f:d0:3e:90:9a:79:a9:76:b5:d1:
1b:1c:c1:70:3e:53:61:e2:04:bc:30:c3:87:e6:42:
f9:0d:dd:13:92:2a:66:39:41:c9:20:9d:ef:23:4e:
d1:91:34:b7:33:31:f9:30:4b:25:50:10:fd:36:4f:
b4:41:5e:0e:a9:fb:6b:0c:63:11:30:f8:1e:22:7d:
98:cc:80:6b:8c:36:ee:2d:e4:8d:d2:48:19:d2:b6:
cb:01:3c:fe:1e:eb:e0:11:a7:9e:d6:56:14:9b:7a:
18:a5:19:19:fc:64:b1:d4:bd:d0:d0:d7:52:d0:8d:
c7:e4:2d:83:28:0f:f0:df:9f:3c:2a:5a:fa:81:13:
92:ba:74:9a:22:df:60:b3:a2:c1:67:61:e7:1c:da:
5e:cb:97:75:5e:c4:f6:14:e5:b8:a3:96:56:a4:9a:
78:46:ea:7c:a7:92:1a:01:83:1c:f3:01:fc:32:f1:
81:9e:27:17:fa:e4:92:11:3d:43:db:8f:c8:82:ac:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5A:AB:7A:5A:D0:CD:B0:A7:E2:7A:B5:76:7F:B5:0B:FA:80:E0:C2
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1lqrelrQzbCn4nq1dn-1C_qA4MI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b6:9c:eb:4b:51:f3:45:59:b8:dc:5d:a9:04:46:fe:b0:4d:5c:
82:28:e9:b2:32:41:70:52:5f:25:f5:00:54:4f:00:a6:0e:a4:
5f:91:fc:48:96:8b:78:89:e7:70:88:9a:8a:32:c8:a6:da:dd:
36:f1:d7:fb:0c:fe:5f:a9:d2:d2:bc:3f:d7:4e:d0:d4:b6:e7:
9a:08:84:e1:8c:ba:f7:a3:e1:d9:b1:eb:fc:64:06:01:6f:00:
53:f7:fe:b4:29:01:6b:a9:cc:4d:fc:11:3e:09:28:8d:57:65:
46:0e:3b:e6:8d:fd:8a:a0:83:2a:37:07:22:84:4e:ac:e7:9a:
6f:3a:52:18:cd:c6:c4:14:98:04:e4:42:d6:9e:72:b8:88:7f:
c5:e2:c0:d5:d9:d4:8c:c9:47:37:c4:54:6e:32:45:c2:47:05:
b6:1c:1f:3b:9e:77:b8:eb:9e:ee:fb:de:22:79:d1:c1:a1:3a:
83:d2:c4:d1:a0:11:52:7f:3e:a2:9d:da:a5:cd:d3:cf:02:81:
2e:15:c6:b1:56:de:48:01:ac:bc:d1:0a:d4:f3:12:3e:6e:26:
a3:cb:2a:c5:d7:2c:9d:b5:d0:14:86:f1:0b:12:9b:80:ee:79:
53:4e:aa:87:23:2b:c0:da:7c:cf:7b:20:5c:5e:7f:8c:54:e3:
3b:df:6f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:14:31 2025 by rpki-client