Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/9nV9VzDhPldzgMG3J4FjxCVm-bQ.roa
File: 9nV9VzDhPldzgMG3J4FjxCVm-bQ.roa (raw, json)
Hash identifier: Z1pVJaaTtMnee6+qdEJHj40YfHomUfWIJPej1JSVmZY=
Subject key identifier: F6:75:7D:57:30:E1:3E:57:73:80:C1:B7:27:81:63:C4:25:66:F9:B4
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9nV9VzDhPldzgMG3J4FjxCVm-bQ.roa
Signing time: Thu 15 Sep 2022 02:42:41 +0000
ROA not before: Thu 15 Sep 2022 02:42:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 123.205.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F6757D5730E13E577380C1B7278163C42566F9B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:53:67:2f:80:97:17:29:fc:71:9d:56:84:e4:
18:b5:a2:8d:3f:c4:9f:fd:16:90:e7:89:b3:c3:cd:
b1:fd:bf:a5:3f:a8:26:07:09:a5:d9:29:a3:f7:e1:
f8:bc:29:d5:65:e1:8a:e3:d9:60:86:5e:9a:6b:33:
3d:0c:4f:5e:20:fa:7a:c5:4a:8a:43:69:16:fc:d2:
3e:8c:6b:32:0b:2c:bb:65:5c:b4:b0:9f:3d:ad:72:
0f:ab:2d:95:7b:77:de:83:79:0a:a6:26:fa:ce:4f:
a6:0f:97:15:b9:49:17:a3:f8:a9:10:0d:23:0d:70:
70:ae:b4:d5:c7:7e:49:fd:3c:f3:bd:7c:01:48:96:
8a:92:23:f0:5e:7c:77:6a:9e:94:76:d7:a1:48:da:
09:93:14:b5:a3:60:2c:85:41:82:ad:36:01:31:d4:
b9:4f:f7:4c:67:e6:b7:42:27:a7:2c:d0:93:a2:aa:
7a:f9:0d:98:15:18:49:c4:b8:e1:84:ec:38:07:a0:
4d:17:7d:8d:2c:a4:68:3b:5e:6f:f4:02:6a:59:b9:
21:d9:eb:c9:91:bc:26:93:d8:a8:38:6f:e3:2c:2c:
71:1a:09:b6:11:d3:8a:df:2d:53:fd:f6:36:a7:94:
d7:fb:32:c8:51:a6:27:70:09:2f:5f:2c:4a:b5:ee:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:75:7D:57:30:E1:3E:57:73:80:C1:B7:27:81:63:C4:25:66:F9:B4
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9nV9VzDhPldzgMG3J4FjxCVm-bQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3a:85:06:7d:a0:7d:64:0e:56:7e:51:16:87:4c:5d:b0:2c:
7c:c6:74:73:7d:2d:e8:e9:ed:0f:3e:d7:b4:7f:4c:a4:aa:57:
5a:b8:01:9c:81:be:59:f5:4a:43:59:cf:d5:c0:3f:60:46:4c:
d6:c3:ea:f3:5b:2b:ff:09:08:c2:28:a1:ad:2e:60:f9:93:4f:
1a:bd:bf:e5:4c:9f:c4:7d:35:f0:95:cd:1c:92:7c:fc:70:48:
6c:7b:2e:e4:7d:a5:7f:a9:4a:ec:7c:c9:94:a2:31:29:bb:f4:
7c:85:c9:5c:26:3d:89:a7:1a:58:f3:26:19:9e:a5:d6:01:18:
b1:5e:0b:14:01:4e:85:76:c1:f9:4f:9a:a0:50:e8:d5:17:36:
aa:7d:f5:51:a7:55:a1:d0:dc:d3:7d:c5:8b:ef:24:f2:0e:d7:
b7:13:dd:89:26:e3:73:3c:25:a2:ed:f3:7e:72:e1:be:ca:21:
4d:e7:dc:be:57:0e:da:bd:f8:18:d3:0e:70:c3:86:5d:fa:3e:
d3:4f:1c:63:49:24:42:98:af:49:0f:65:6c:a7:b8:5c:17:6f:
0a:87:04:f9:a2:3f:dc:57:a4:5a:68:5f:91:32:cd:f4:55:ec:
3a:82:73:65:a7:6b:39:8e:8f:8d:db:44:fb:53:63:82:76:72:
fc:ec:1c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:35:28 2025 by rpki-client