Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/4F5PY61MicTWh_MdwUcId-CdVHg.roa
File: 4F5PY61MicTWh_MdwUcId-CdVHg.roa (raw, json)
Hash identifier: 8sSVe5kB6yXpmsI7G7gqRCMepZ6Murr1mXM84zGU7k8=
Subject key identifier: E0:5E:4F:63:AD:4C:89:C4:D6:87:F3:1D:C1:47:08:77:E0:9D:54:78
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 12FC
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4F5PY61MicTWh_MdwUcId-CdVHg.roa
Signing time: Fri 01 Sep 2023 09:24:20 +0000
ROA not before: Fri 01 Sep 2023 09:24:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 123.205.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4860 (0x12fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E05E4F63AD4C89C4D687F31DC1470877E09D5478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:da:4e:3c:dc:f4:e4:82:a5:cf:65:87:c9:
79:4c:1a:b8:75:13:34:66:ba:55:d9:c0:b8:61:c5:
ba:ac:e4:c7:3a:61:02:d2:43:a7:9b:37:85:93:f1:
96:af:ee:e6:75:8e:2b:47:39:c8:a6:3c:e0:81:30:
b4:2e:30:96:af:9e:cd:d2:73:35:79:1d:1a:57:28:
7c:49:a8:7b:90:1a:57:87:93:81:06:25:89:de:08:
3d:63:94:26:eb:11:68:c0:0e:18:18:81:6b:85:5e:
c3:3b:c4:0d:c9:4f:21:52:a5:a4:48:73:28:75:24:
67:ce:0d:4e:2c:8a:1d:40:7f:2f:31:55:96:ea:d4:
66:63:13:57:02:6d:5b:a7:b0:0b:37:90:47:d8:e9:
2f:f2:b8:02:29:7a:cb:10:2c:31:4a:0c:6c:90:8f:
da:bf:9c:07:e9:b2:97:43:df:a0:c9:b5:6c:3e:43:
a2:70:a3:91:57:36:5f:55:40:0f:9b:68:00:51:80:
4c:76:db:72:d6:97:0a:e3:c2:70:49:73:ab:eb:30:
a7:54:a3:19:8d:9e:b5:d8:d0:c2:fd:31:1d:54:06:
73:59:6b:89:aa:e1:d4:56:12:d9:51:8b:6d:7f:66:
4f:1b:3d:0a:c7:a4:3f:09:cb:c2:9c:37:a2:bf:71:
d4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5E:4F:63:AD:4C:89:C4:D6:87:F3:1D:C1:47:08:77:E0:9D:54:78
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4F5PY61MicTWh_MdwUcId-CdVHg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.32.0/19
Signature Algorithm: sha256WithRSAEncryption
87:1b:09:45:bb:bd:6d:ec:95:bd:cb:19:92:ad:11:cc:c5:fb:
af:b3:27:5b:7e:e7:47:65:0a:b7:16:c7:fe:45:d5:ae:0d:25:
f2:ff:dd:96:a2:3c:eb:37:49:46:52:ed:f4:06:a8:35:61:18:
fd:79:2f:9d:2b:f9:77:d5:f2:2e:81:00:88:91:2a:1f:71:a4:
26:95:e8:30:f4:8e:de:bb:b1:b5:29:05:77:c4:aa:62:fd:18:
7e:47:f9:4d:6d:76:e2:ce:f8:ad:63:4b:60:99:c1:5e:34:a8:
f3:a7:1e:3f:11:eb:22:47:e6:9e:a2:b2:f9:b7:77:fd:a6:e2:
7a:e9:76:52:1a:5f:84:90:f2:2b:34:48:51:88:a7:b8:79:ee:
59:5d:63:48:7b:e8:6b:0e:11:57:24:36:ef:59:d2:8a:f5:f1:
a5:f0:6d:bf:c9:2e:3c:27:11:e2:b7:29:4f:26:0a:a5:e1:93:
38:f2:37:6b:6b:e3:0f:5d:ef:7f:53:e0:a5:b1:db:cd:ef:c6:
85:b5:78:db:9e:1b:d0:ac:e0:3b:7a:df:07:f9:72:71:ec:5b:
0d:5d:04:4a:0d:5c:60:97:57:a2:e6:14:1e:0d:03:0d:8e:05:
0b:d7:bd:f1:8f:11:e2:2d:6c:88:e2:7c:b6:74:7a:bb:e4:9c:
4c:26:33:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:35:25 2025 by rpki-client