Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/A81Fbw4IsSG_KnzAXXT1jQy7ziY.roa
File: A81Fbw4IsSG_KnzAXXT1jQy7ziY.roa (raw, json)
Hash identifier: d+z2I5h7MhKeCcZiCxFx0JSF2spo9Ryap7YxeFxdLlA=
Subject key identifier: 03:CD:45:6F:0E:08:B1:21:BF:2A:7C:C0:5D:74:F5:8D:0C:BB:CE:26
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 134C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/A81Fbw4IsSG_KnzAXXT1jQy7ziY.roa
Signing time: Fri 01 Sep 2023 09:24:45 +0000
ROA not before: Fri 01 Sep 2023 09:24:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 123.204.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4940 (0x134c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=03CD456F0E08B121BF2A7CC05D74F58D0CBBCE26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:58:f1:b9:10:fd:d7:bf:dd:df:76:c3:79:
5e:65:e9:67:49:5d:92:50:75:fa:a8:e1:7a:21:c2:
82:94:6c:f1:9d:03:34:66:b1:53:7e:f5:83:49:9a:
4d:ba:88:72:bf:44:af:f5:39:4c:94:9e:c6:fd:ac:
03:fb:3c:5d:d8:8c:16:a3:c1:0b:c7:6b:7c:b6:6c:
1b:07:52:89:d0:c6:c2:ce:5d:e2:28:ee:1c:7a:22:
69:4e:15:5c:46:d5:61:28:d7:de:03:4a:54:09:85:
f1:1d:6d:e9:ac:fa:4b:48:6b:3c:3e:59:82:a3:29:
2d:39:61:7c:f5:68:a5:0b:a8:cb:b0:87:eb:3d:32:
e6:ff:7e:b3:27:34:db:40:ad:11:15:39:47:ea:45:
c5:75:01:db:3f:b8:36:19:dc:4d:54:01:59:d4:84:
1b:10:fc:d7:a5:34:b4:57:93:24:69:0f:2a:43:f2:
ca:0b:5e:e3:3b:34:2b:b1:75:0e:87:ae:be:1d:a7:
09:cf:70:8c:8b:52:b2:34:08:72:d5:9a:68:12:91:
7a:d4:87:78:07:08:97:d3:b5:b0:4a:69:4e:0d:34:
df:01:19:5e:08:be:a0:2c:4e:14:9b:f2:bf:5f:56:
04:9e:5e:76:9b:64:09:b7:b2:fd:0a:b9:de:d6:ac:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CD:45:6F:0E:08:B1:21:BF:2A:7C:C0:5D:74:F5:8D:0C:BB:CE:26
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/A81Fbw4IsSG_KnzAXXT1jQy7ziY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.204.0.0/15
Signature Algorithm: sha256WithRSAEncryption
bc:11:dc:69:cf:a5:6d:d3:b3:f9:cf:ec:31:02:8b:d2:d6:a6:
d2:b6:23:47:dc:8b:30:9a:7c:88:88:25:44:cd:7e:10:8b:5e:
74:2b:eb:b7:9c:d0:e5:c9:04:27:0c:17:9d:0b:58:34:e6:b8:
e2:63:6d:80:31:06:26:d0:c2:4e:c6:80:79:cf:2c:63:53:59:
12:57:ce:ce:46:0f:b2:b9:e9:0d:f6:28:0a:31:10:12:76:aa:
7f:d6:de:8e:49:f3:64:9d:1e:00:f9:ef:fc:58:0d:19:86:02:
31:87:70:5d:47:42:b7:9b:85:8f:ba:18:2f:0d:a1:9c:2c:a0:
60:68:bb:84:34:4e:2d:67:1c:c4:c7:d8:ea:32:a8:b6:44:55:
08:13:f1:02:83:6e:bb:5b:78:de:47:62:44:68:e3:ba:e8:e7:
47:54:c8:bf:59:3c:5c:be:b6:92:39:d4:e6:0a:e0:cd:69:fe:
6f:7d:df:1a:1d:9b:98:76:5a:be:09:6d:f1:56:c0:7a:46:7e:
dd:33:03:bf:7d:21:4b:1f:6b:14:17:d7:14:50:75:59:82:2d:
df:29:f8:bf:ba:4d:9f:d8:11:35:05:df:58:12:0b:a8:8e:f3:
8b:2f:2d:ba:1a:1b:81:a1:af:42:01:44:5d:4c:3d:82:28:c5:
a5:26:50:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:37:47 2025 by rpki-client