Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1yOLBHZS5o6TwM0UnmDtilYlN4g.roa
File: 1yOLBHZS5o6TwM0UnmDtilYlN4g.roa (raw, json)
Hash identifier: uv0q9oeesv2kWhyTPb+KGvxk3u1la93eFs1vR8uej+8=
Subject key identifier: D7:23:8B:04:76:52:E6:8E:93:C0:CD:14:9E:60:ED:8A:56:25:37:88
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10FC
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1yOLBHZS5o6TwM0UnmDtilYlN4g.roa
Signing time: Wed 01 Feb 2023 10:29:19 +0000
ROA not before: Wed 01 Feb 2023 10:29:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 123.205.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4348 (0x10fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:19 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D7238B047652E68E93C0CD149E60ED8A56253788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:a3:e3:7f:6f:f3:ee:bd:7c:1e:fb:1e:2e:
fc:78:2e:0e:5b:61:8a:80:e1:db:0e:f3:b8:f1:29:
83:46:5e:48:4f:42:e0:58:e9:42:30:0f:f2:9b:c2:
48:ec:86:78:3c:f2:d9:a1:c3:5b:51:5e:5e:d7:69:
3f:59:b3:97:17:29:b2:62:42:b5:9b:32:9d:f2:fb:
3e:0c:99:a4:45:a2:0a:cf:b8:64:6d:b0:7f:05:76:
0f:6e:94:85:28:97:b6:1a:b7:f3:80:ca:a7:8c:96:
97:fd:13:22:70:6c:26:dd:9e:23:4f:b2:d3:98:89:
b2:1e:22:f4:89:ab:c2:41:af:64:cc:45:87:c1:a1:
52:c0:69:db:2d:08:b9:92:1b:82:96:25:a3:e1:65:
ee:99:58:12:5a:eb:4b:27:6f:a2:59:ed:ef:f6:1b:
32:d9:b0:72:c9:dc:80:f7:a9:53:b2:b8:8d:58:e4:
09:3e:20:46:8c:9c:08:5d:28:09:0f:7d:cd:e0:3d:
cb:85:1f:f5:88:4f:37:d3:60:28:0f:78:39:42:af:
6c:0c:fa:ac:48:e5:19:97:5e:8a:44:a4:cf:8c:f4:
6d:0b:36:d3:fb:80:31:73:af:af:15:ed:8b:da:77:
87:86:02:44:a2:82:bc:46:1a:69:7e:e4:69:53:8d:
7b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:23:8B:04:76:52:E6:8E:93:C0:CD:14:9E:60:ED:8A:56:25:37:88
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1yOLBHZS5o6TwM0UnmDtilYlN4g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.64.0/19
Signature Algorithm: sha256WithRSAEncryption
41:9a:70:d9:f5:88:ce:d6:71:c6:78:70:c4:55:d7:33:95:01:
f5:22:9d:bc:c2:cb:4c:b9:5e:54:29:d8:6d:c2:c0:fe:00:8e:
8a:22:77:e3:dd:08:2f:ea:9d:0d:3c:93:c7:fc:74:c5:b7:b0:
f0:96:f4:f0:cd:d2:24:5d:c1:a6:43:97:d3:c7:c7:d1:40:1f:
7d:07:d2:72:be:71:e8:ec:a8:c7:1a:55:1f:e4:3b:bf:95:5d:
d0:d0:6c:85:1c:22:76:f5:88:fe:7b:13:4a:51:65:7e:d5:7f:
c9:26:4b:d7:a9:e3:10:40:55:e8:12:9e:13:30:bc:b0:79:29:
d9:55:50:d5:92:b1:73:b7:7d:87:44:b2:e7:14:db:59:72:50:
18:65:50:76:ac:4f:16:fa:e7:f2:23:8d:69:38:1e:e8:9d:ba:
f4:4f:bd:64:59:d4:c9:34:76:87:72:0a:eb:a4:7e:28:f3:c9:
6e:42:0a:73:bd:a9:67:85:bc:02:d9:a6:5f:00:46:a3:94:1d:
27:db:b2:6e:c0:cc:90:84:8f:fc:2a:c5:5c:1f:93:9b:b2:13:
ef:bc:d9:3e:fc:c6:a2:15:00:63:e3:18:a5:6d:f1:ed:1a:cd:
15:43:a7:38:b2:b0:da:01:83:83:4a:bd:62:08:fd:f4:36:86:
a9:55:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:07 2025 by rpki-client