Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/2UgdhI8Pho9DQYiPg3u3fr20KzM.roa
File: 2UgdhI8Pho9DQYiPg3u3fr20KzM.roa (raw, json)
Hash identifier: vihqKEcRaqLUx+eEKHjig31Yg5bIVLRo0WsXps3QqfI=
Subject key identifier: D9:48:1D:84:8F:0F:86:8F:43:41:88:8F:83:7B:B7:7E:BD:B4:2B:33
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2UgdhI8Pho9DQYiPg3u3fr20KzM.roa
Signing time: Thu 15 Sep 2022 02:43:04 +0000
ROA not before: Thu 15 Sep 2022 02:43:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.146.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D9481D848F0F868F4341888F837BB77EBDB42B33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:7b:cb:5a:19:be:81:b5:f4:cc:6b:1d:a5:
29:d2:9b:9f:6d:6f:cc:44:e0:1f:b5:17:2c:6f:52:
d7:52:8e:db:5b:0d:d0:94:e9:d7:d2:d0:35:b3:50:
3a:e8:ee:26:55:28:63:6b:c3:7c:a4:9b:4f:26:35:
75:ef:92:cb:99:f8:0a:54:f4:dc:c5:f2:12:6e:6b:
d4:54:d7:25:fd:2b:48:a1:0d:68:58:1d:b9:e5:36:
06:08:f5:d3:ed:f0:0c:44:ee:f7:0a:77:55:53:f8:
ff:d6:4b:05:0e:ca:eb:a9:ed:64:6c:5e:82:05:3c:
e8:ee:ec:a6:76:27:eb:c7:03:7e:44:e8:c2:ac:fb:
b7:0a:db:81:23:52:e1:ad:fe:bc:f6:7e:db:a4:2a:
17:f1:35:58:ca:00:84:38:05:15:48:6f:18:47:b1:
58:f3:68:e5:21:a6:3f:8b:de:c0:c8:41:6e:9f:45:
b5:bd:bb:e5:21:f3:5b:bf:f5:b7:e1:51:e8:62:11:
50:d6:36:5d:96:80:9f:46:d1:9d:62:37:98:ca:b3:
75:7c:47:57:77:ae:86:47:9a:ec:3e:dc:cd:69:c7:
7c:bf:db:e9:dc:98:3e:d8:8d:fa:88:2c:99:3c:b9:
75:93:bc:fa:26:b1:03:14:35:ce:fa:10:92:60:4d:
8f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:48:1D:84:8F:0F:86:8F:43:41:88:8F:83:7B:B7:7E:BD:B4:2B:33
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2UgdhI8Pho9DQYiPg3u3fr20KzM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.128.0/17
Signature Algorithm: sha256WithRSAEncryption
02:cb:75:8e:51:3e:51:06:94:f1:8f:e5:23:3d:3f:f6:db:ee:
ce:df:d0:09:a0:e2:47:fb:d4:06:5d:45:c6:b4:85:90:14:a1:
c3:b0:64:fb:79:44:b9:7c:0b:ed:a7:3e:c8:ec:f5:f2:ef:69:
62:1b:76:65:e2:ae:fb:89:c5:ae:26:1a:04:3e:65:40:d0:9a:
ec:f5:98:2a:a1:57:87:db:cf:bb:7b:07:df:a6:ef:ab:56:2c:
a8:bb:32:e5:67:4a:6f:b8:f9:ee:da:a3:b8:fe:ca:f9:c4:ec:
6d:57:49:b3:84:9c:75:d4:c9:26:e7:f4:ce:dd:60:09:c4:28:
83:cc:a6:df:f1:03:c4:6f:00:9d:cc:76:81:66:58:89:14:7b:
91:7e:ea:5d:37:ea:f4:b1:a6:dc:86:f4:67:4a:00:ab:4f:fe:
6a:6a:6c:2c:a0:70:be:09:92:49:70:f3:34:7b:dd:95:c5:e3:
10:04:fa:4b:12:86:e6:7a:f0:da:4d:2d:e6:19:4d:41:a6:3b:
32:1e:59:cc:da:46:e0:03:da:67:07:66:a5:2b:ab:5b:4a:9e:
45:5a:e6:c6:13:67:67:ad:89:8a:99:a2:5f:e0:d4:17:dc:4d:
0c:1d:0f:34:c7:3d:cf:f5:64:0a:4c:84:1e:87:7d:f5:27:33:
0d:6a:0a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:27:55 2025 by rpki-client