Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5_hHL0n_MTA8fUeXD2PbvLwXyU4.roa
File: 5_hHL0n_MTA8fUeXD2PbvLwXyU4.roa (raw, json)
Hash identifier: SqZ/pfmzK4JCKKgv25xroDwpz4X8ZqnyfaIDYIj8kwo=
Subject key identifier: E7:F8:47:2F:49:FF:31:30:3C:7D:47:97:0F:63:DB:BC:BC:17:C9:4E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5_hHL0n_MTA8fUeXD2PbvLwXyU4.roa
Signing time: Thu 15 Sep 2022 02:42:47 +0000
ROA not before: Thu 15 Sep 2022 02:42:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.146.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E7F8472F49FF31303C7D47970F63DBBCBC17C94E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cf:82:56:86:44:e1:77:38:6e:d8:d5:f6:c7:
cb:71:ac:e6:ce:2b:b0:4a:00:33:ed:eb:2f:8e:6c:
a0:60:d1:83:d2:47:e7:88:3d:98:05:72:af:ac:22:
2c:25:43:d8:20:2b:93:99:11:4c:58:ac:d1:62:93:
ae:5e:b8:75:5f:cd:91:22:78:cb:cb:37:dd:10:b0:
39:78:a1:6c:72:2f:79:39:49:19:f1:4f:6d:1c:6b:
4f:03:d1:ec:8c:d0:b7:72:18:46:58:4d:2a:9b:3a:
15:28:63:ef:71:8e:6f:84:fa:83:8b:21:27:c5:77:
1f:62:93:3b:a1:d8:f5:06:39:c7:00:62:4e:91:a9:
ec:56:81:09:52:f7:a3:3f:3c:67:57:45:9f:db:fc:
5e:65:b5:b0:63:75:33:3f:92:2b:61:b6:2e:1d:62:
29:e9:a9:54:d2:aa:68:bc:71:ae:0a:43:cd:cd:eb:
6e:28:a7:d6:dd:a3:ac:ac:3e:46:db:c1:7b:76:50:
8a:59:5e:29:b9:6f:cd:98:0f:cc:69:da:4b:ec:0d:
4f:c5:97:1f:15:51:11:e5:93:4b:97:fe:23:f0:40:
5d:43:cc:c9:7f:0e:5d:d3:d7:9c:e6:39:3c:9c:9f:
e6:9a:49:c3:f3:cc:03:6a:41:f4:34:49:22:11:5d:
6c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F8:47:2F:49:FF:31:30:3C:7D:47:97:0F:63:DB:BC:BC:17:C9:4E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5_hHL0n_MTA8fUeXD2PbvLwXyU4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8f:14:f0:0b:18:d9:86:9d:39:39:27:4d:5b:6a:c7:12:07:d1:
d2:4f:a5:18:ad:c0:85:91:04:6f:9a:1d:05:02:f1:5f:9a:b3:
69:5c:f9:40:e2:c5:33:3b:75:80:60:fd:1f:32:7f:24:c4:be:
30:c2:39:63:00:0b:6a:51:72:d1:7d:11:c1:6a:01:be:67:b2:
3d:8d:a1:56:e2:7c:ae:d1:a9:c9:07:b8:be:3a:87:4f:a1:e0:
1d:bc:d3:e9:bf:b8:ce:90:d0:8a:d9:63:d8:a9:87:62:05:49:
27:50:88:10:8d:ec:72:d8:3c:56:29:d4:2b:9c:de:9a:cb:33:
71:de:da:b7:3a:a4:3a:73:e2:f0:be:66:86:a3:b5:84:23:88:
a1:d2:64:4b:68:a9:84:be:6a:9e:5e:11:91:c7:61:39:7a:d3:
f8:46:b7:28:86:33:e2:b9:8e:8b:5e:96:09:36:8f:98:47:7b:
25:07:04:e9:cd:ec:78:cf:46:5a:0b:3b:17:8c:42:ec:91:ad:
40:b7:5a:d3:02:04:41:0c:4c:91:5a:72:9f:03:aa:02:71:f0:
7b:91:21:d7:36:ee:3e:f5:d2:aa:fa:e9:bf:76:e6:ec:a9:01:
03:e1:2b:94:f1:29:bf:30:8f:53:4c:6c:da:46:d8:55:00:89:
d1:ac:18:d0
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQyNDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEU3Rjg0NzJGNDlGRjMx
MzAzQzdENDc5NzBGNjNEQkJDQkMxN0M5NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpz4JWhkThdzhu2NX2x8txrObOK7BKADPt6y+ObKBg0YPSR+eI
PZgFcq+sIiwlQ9ggK5OZEUxYrNFik65euHVfzZEieMvLN90QsDl4oWxyL3k5SRnx
T20ca08D0eyM0LdyGEZYTSqbOhUoY+9xjm+E+oOLISfFdx9ikzuh2PUGOccAYk6R
qexWgQlS96M/PGdXRZ/b/F5ltbBjdTM/kithti4dYinpqVTSqmi8ca4KQ83N624o
p9bdo6ysPkbbwXt2UIpZXim5b82YD8xp2kvsDU/Flx8VURHlk0uX/iPwQF1DzMl/
Dl3T15zmOTycn+aaScPzzANqQfQ0SSIRXWx3AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU5/hHL0n/MTA8fUeXD2PbvLwXyU4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNV9oSEwwbl9NVEE4ZlVlWEQyUGJ2
THdYeVU0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnqSQDAN
BgkqhkiG9w0BAQsFAAOCAQEAjxTwCxjZhp05OSdNW2rHEgfR0k+lGK3AhZEEb5od
BQLxX5qzaVz5QOLFMzt1gGD9HzJ/JMS+MMI5YwALalFy0X0RwWoBvmeyPY2hVuJ8
rtGpyQe4vjqHT6HgHbzT6b+4zpDQitlj2KmHYgVJJ1CIEI3sctg8VinUK5zemssz
cd7atzqkOnPi8L5mhqO1hCOIodJkS2iphL5qnl4RkcdhOXrT+Ea3KIYz4rmOi16W
CTaPmEd7JQcE6c3seM9GWgs7F4xC7JGtQLda0wIEQQxMkVpynwOqAnHwe5Eh1zbu
PvXSqvrpv3bm7KkBA+ErlPEpvzCPU0xs2kbYVQCJ0awY0A==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:33:25 2025 by rpki-client