Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8LkUodPljKc0uWj5AH00FA2GVGk.roa
File: 8LkUodPljKc0uWj5AH00FA2GVGk.roa (raw, json)
Hash identifier: j0r1po+EZ0CSDaRgX4JNlpFpqGBlQJS1LHHzMAM/hcg=
Subject key identifier: F0:B9:14:A1:D3:E5:8C:A7:34:B9:68:F9:00:7D:34:14:0D:86:54:69
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 087E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8LkUodPljKc0uWj5AH00FA2GVGk.roa
Signing time: Tue 29 Sep 2020 09:52:05 +0000
ROA not before: Tue 29 Sep 2020 09:52:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 122.146.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174 (0x87e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:05 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F0B914A1D3E58CA734B968F9007D34140D865469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:6a:6a:aa:a0:55:16:7e:0f:be:8e:f2:00:
39:88:31:d2:e6:da:a1:e0:c4:0e:7a:96:00:e9:85:
b1:f1:05:98:02:07:06:b0:ee:3b:bd:3c:67:33:61:
96:fb:93:f1:10:24:8b:e9:9d:c3:f3:49:75:7c:59:
41:e4:9c:f7:aa:22:b0:47:97:71:1c:7e:9f:c4:d7:
45:5d:ad:e6:11:a5:b1:a0:18:56:9e:5d:c7:18:fd:
4d:37:ce:67:4a:f6:82:16:93:55:5a:8c:93:51:d2:
40:90:fd:c5:0c:49:20:0e:4f:fe:26:dc:33:e3:87:
9c:96:5f:e9:79:71:9e:ab:4f:f1:56:e6:38:0b:0f:
aa:ca:1c:a1:10:ab:da:51:af:16:23:cc:44:f1:ba:
c5:8c:4b:6c:3c:7a:50:87:68:cf:c0:9b:48:38:37:
8f:01:b7:4e:68:ec:fe:17:6c:ce:7f:4e:10:2a:c4:
71:09:55:db:ee:e0:61:c4:f2:73:08:d6:23:60:83:
f3:17:6e:97:ed:73:af:1a:bc:0b:6b:ac:d1:9c:70:
41:d5:0a:c0:4d:f6:40:46:b7:c8:08:12:bc:58:2f:
9d:a5:63:73:dc:22:9c:a4:42:d3:67:a7:81:6d:ec:
fe:51:e0:bb:42:67:f1:a3:3e:00:a5:ea:e2:95:22:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B9:14:A1:D3:E5:8C:A7:34:B9:68:F9:00:7D:34:14:0D:86:54:69
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8LkUodPljKc0uWj5AH00FA2GVGk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.96.0/21
Signature Algorithm: sha256WithRSAEncryption
79:eb:1b:2b:6f:77:d1:ff:d1:77:ee:0e:eb:99:44:4c:14:76:
c7:94:b8:66:84:53:4d:9f:96:2d:f3:25:7b:a3:f3:48:c2:ab:
35:c9:6e:32:05:91:c7:24:b7:c8:a5:56:36:67:f9:a8:2a:f0:
06:7a:fe:37:df:f0:93:68:89:3e:8d:12:02:41:1f:3b:d2:e8:
35:ca:4c:33:a1:48:44:c7:3c:2c:fe:c7:78:e4:b5:19:e1:6a:
89:97:34:6f:ad:d0:aa:49:b0:1b:cf:4c:d0:6a:ce:26:a5:7f:
90:4c:99:2a:a2:60:e3:fc:b8:92:7e:02:8a:d3:1f:03:89:0c:
a1:09:34:6e:02:ac:fe:cc:af:dd:59:3e:25:e0:e1:62:51:77:
89:e7:f3:ab:e6:f2:38:95:9f:ee:e2:d4:c1:a0:83:b7:66:15:
fc:ef:35:a7:8e:e2:c7:da:3f:04:c2:0e:7e:f9:76:fe:5b:43:
94:a1:db:7c:70:e5:73:17:3b:e5:ca:55:94:9b:29:49:09:3e:
af:96:03:5e:62:7f:18:f7:c6:6c:2d:23:36:31:52:dc:70:69:
d9:bb:cc:e9:ec:72:6c:2b:07:13:14:e3:e3:c3:78:4d:9b:65:
d2:55:66:33:02:51:f0:90:0b:d7:67:ec:6d:26:ef:ea:2a:cc:
0f:88:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:06 2025 by rpki-client