Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/7HWTkhrF8_rNrpTKBx_6GWPGNJI.roa
File: 7HWTkhrF8_rNrpTKBx_6GWPGNJI.roa (raw, json)
Hash identifier: SNTvpTVo9/wlbkFtIlJFKkvl0arbaPcdm79s4EvUNrs=
Subject key identifier: EC:75:93:92:1A:C5:F3:FA:CD:AE:94:CA:07:1F:FA:19:63:C6:34:92
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0CE1
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7HWTkhrF8_rNrpTKBx_6GWPGNJI.roa
Signing time: Sun 07 Feb 2021 11:45:43 +0000
ROA not before: Sun 07 Feb 2021 11:45:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 122.146.110.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3297 (0xce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:45:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EC7593921AC5F3FACDAE94CA071FFA1963C63492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:16:c0:cf:59:6f:13:7e:79:41:1f:d1:57:f2:
63:20:80:b5:f7:8e:69:2c:9c:b2:9f:a3:73:3c:3c:
1c:d0:72:01:c3:8b:b0:17:d4:fb:8a:3b:68:87:14:
f6:4c:2a:cc:e0:b1:dc:b4:3f:e9:3d:e0:18:00:ae:
85:8d:19:c4:85:e8:b0:63:5c:22:8d:2d:17:77:c4:
ae:9a:a4:5a:98:44:74:27:80:7f:60:2f:5e:e0:48:
62:8f:32:50:8a:f2:2c:15:96:25:47:ea:58:0f:23:
d4:6c:26:a9:af:90:83:67:af:b0:8c:3a:70:47:e5:
68:34:af:c5:ee:d2:e5:67:2c:12:bd:53:a5:64:b7:
99:58:0c:c0:1c:29:05:90:b4:d9:83:ed:5f:b8:a1:
26:bb:d3:96:32:01:0b:e7:b4:70:1f:ad:1c:4e:7a:
c4:fb:c5:4d:46:a4:8b:28:57:f3:5a:d0:71:60:09:
46:ea:50:2b:ea:05:89:f4:22:49:dc:d2:e8:77:a0:
b0:8a:91:28:c2:f9:17:d1:01:62:71:d7:dc:3d:e8:
77:ca:9d:ff:bf:3e:da:24:9f:99:68:51:55:d1:26:
f3:f6:f3:06:f2:57:21:16:c0:29:6d:8e:4b:bd:49:
e6:8f:9f:42:21:92:0d:37:c9:60:a7:83:c5:58:ab:
3e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:75:93:92:1A:C5:F3:FA:CD:AE:94:CA:07:1F:FA:19:63:C6:34:92
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7HWTkhrF8_rNrpTKBx_6GWPGNJI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.110.0/23
Signature Algorithm: sha256WithRSAEncryption
06:10:ea:31:ae:bb:75:71:03:af:cb:07:8a:ee:49:f9:e6:b5:
13:e6:57:7d:7f:1a:69:22:a7:72:ce:77:3d:1a:f8:ad:18:c7:
75:12:b3:02:b7:01:cf:90:95:52:84:a1:51:eb:e7:bb:b1:bb:
a5:68:2a:70:ef:e8:c5:57:7e:ec:a9:57:59:0f:bb:82:9c:d0:
a1:a6:20:55:88:56:6f:85:28:d7:71:a2:43:a9:5f:20:90:69:
c4:60:13:22:46:61:06:9c:93:de:5b:21:e6:7c:6e:23:da:80:
79:ca:e9:0e:66:8f:0f:28:9d:5a:59:ed:5b:d4:81:ba:f8:d2:
0b:35:86:ef:81:c7:a0:da:20:f4:b8:b2:ca:ef:4c:50:60:90:
ae:30:88:2c:fb:a8:59:cd:12:26:03:33:fd:79:62:bb:14:6f:
6f:3f:6b:1b:5e:3b:21:21:86:d8:09:9e:46:ca:6b:b5:28:2f:
fb:d3:3f:49:c9:41:c9:22:e4:ad:78:ef:3e:3b:b0:c6:b4:f6:
89:02:a9:6e:30:79:51:8e:03:21:c2:e1:b1:f8:64:69:c5:20:
93:15:6e:29:55:f6:f1:de:38:99:63:72:73:dc:7a:88:21:68:
5b:a4:74:ad:57:fa:d3:d9:4f:53:42:fb:6e:35:cc:52:6c:0a:
13:97:95:2c
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcx
MTQ1NDJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEVDNzU5MzkyMUFDNUYz
RkFDREFFOTRDQTA3MUZGQTE5NjNDNjM0OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD1FsDPWW8TfnlBH9FX8mMggLX3jmksnLKfo3M8PBzQcgHDi7AX
1PuKO2iHFPZMKszgsdy0P+k94BgAroWNGcSF6LBjXCKNLRd3xK6apFqYRHQngH9g
L17gSGKPMlCK8iwVliVH6lgPI9RsJqmvkINnr7CMOnBH5Wg0r8Xu0uVnLBK9U6Vk
t5lYDMAcKQWQtNmD7V+4oSa705YyAQvntHAfrRxOesT7xU1GpIsoV/Na0HFgCUbq
UCvqBYn0Iknc0uh3oLCKkSjC+RfRAWJx19w96HfKnf+/Ptokn5loUVXRJvP28wby
VyEWwCltjku9SeaPn0Ihkg03yWCng8VYqz7bAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU7HWTkhrF8/rNrpTKBx/6GWPGNJIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvN0hXVGtockY4X3JOcnBUS0J4XzZH
V1BHTkpJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXqSbjAN
BgkqhkiG9w0BAQsFAAOCAQEABhDqMa67dXEDr8sHiu5J+ea1E+ZXfX8aaSKncs53
PRr4rRjHdRKzArcBz5CVUoShUevnu7G7pWgqcO/oxVd+7KlXWQ+7gpzQoaYgVYhW
b4Uo13GiQ6lfIJBpxGATIkZhBpyT3lsh5nxuI9qAecrpDmaPDyidWlntW9SBuvjS
CzWG74HHoNog9Liyyu9MUGCQrjCILPuoWc0SJgMz/XliuxRvbz9rG147ISGG2Ame
RsprtSgv+9M/SclBySLkrXjvPjuwxrT2iQKpbjB5UY4DIcLhsfhkacUgkxVuKVX2
8d44mWNyc9x6iCFoW6R0rVf609lPU0L7bjXMUmwKE5eVLA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:23:01 2025 by rpki-client