Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/EfxEvQ-P4LeBRJB_SYTq5i8bM30.roa
File: EfxEvQ-P4LeBRJB_SYTq5i8bM30.roa (raw, json)
Hash identifier: 7Ca+DNnz76sidK+hliZLZJv2yhmFXYeWusR8OD3VxPk=
Subject key identifier: 11:FC:44:BD:0F:8F:E0:B7:81:44:90:7F:49:84:EA:E6:2F:1B:33:7D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1365
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/EfxEvQ-P4LeBRJB_SYTq5i8bM30.roa
Signing time: Fri 01 Sep 2023 09:24:52 +0000
ROA not before: Fri 01 Sep 2023 09:24:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 122.147.168.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4965 (0x1365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=11FC44BD0F8FE0B78144907F4984EAE62F1B337D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:72:8c:9b:35:d6:01:12:b7:aa:01:a0:b4:
f3:46:a7:9a:00:67:e3:8f:22:d7:d8:5a:53:fa:f3:
2f:07:38:48:1e:fa:af:40:41:7d:9b:c5:a3:57:7c:
50:09:29:04:06:e1:32:b8:f5:30:a4:46:a8:64:ca:
50:5d:0d:c8:b5:8f:c7:3d:be:8a:42:bb:cf:7e:63:
d2:2a:32:17:40:1d:c9:8d:3c:56:f1:52:3e:f8:f3:
97:af:c9:67:91:7b:15:56:91:05:57:24:e2:bf:d5:
a3:dd:a1:06:1c:f1:6f:0e:d1:8c:a5:d2:f3:0a:69:
7d:39:8c:3a:a4:f4:20:38:12:a1:9b:87:9d:9c:0c:
19:d7:79:d8:c3:7e:7f:b9:c2:e5:0d:c0:a4:83:f3:
24:d0:8c:8c:0e:c4:31:c8:51:8e:bc:3c:b3:eb:a6:
6c:59:ff:c8:a5:81:9a:54:c8:bb:53:8c:91:35:3b:
11:d3:0a:24:bd:1b:c4:9d:80:38:e6:31:f9:8b:f7:
85:08:d7:63:6a:b8:bb:8e:f4:9f:1c:14:e7:af:79:
e2:bc:2d:9c:a9:99:71:c7:a8:47:cb:25:87:55:17:
d8:51:7a:c7:74:e2:e4:17:9f:5f:05:39:e9:d6:13:
8d:01:d7:bb:2c:4b:39:cd:58:89:af:a6:50:d1:35:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FC:44:BD:0F:8F:E0:B7:81:44:90:7F:49:84:EA:E6:2F:1B:33:7D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/EfxEvQ-P4LeBRJB_SYTq5i8bM30.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.168.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:c2:e6:ac:f1:97:c5:f3:ae:77:42:a2:d2:a5:2a:25:da:df:
60:fd:42:c8:06:4c:c9:5d:2b:43:dc:6f:73:8f:60:85:4a:e2:
12:cc:fb:48:20:1e:a6:14:8e:01:5c:fe:3b:56:dc:3a:21:39:
68:75:d6:ce:d5:c0:08:2c:99:5a:f6:2c:aa:5f:b6:a2:0f:7b:
64:58:70:ce:80:20:98:a3:3a:5c:19:fc:24:61:63:ee:d2:84:
cf:2c:20:3a:c7:e0:01:ef:ff:da:bd:d7:3b:b6:61:ef:9a:11:
75:b2:84:d4:56:9b:bb:c0:aa:90:7e:8b:bf:68:78:aa:b1:5d:
b1:56:77:3f:43:35:24:d1:6f:d8:6f:8a:8f:ff:59:81:a2:e5:
ff:2e:be:61:7f:19:c3:1c:39:d2:37:86:30:80:68:e4:43:2b:
18:56:5c:b4:46:fe:29:6f:ed:1b:b9:ac:88:aa:8b:36:85:9a:
68:56:31:b6:9d:cb:57:f1:e8:1a:b2:1c:54:f8:35:5d:5b:c1:
7d:4c:eb:9d:4d:40:2b:50:1f:a1:86:c6:8b:87:11:63:e6:a4:
1b:be:dc:8e:12:73:7e:b9:59:79:e8:5a:1d:e8:de:14:bf:ef:
cb:bd:4c:43:8d:81:55:af:cd:5b:0d:55:c9:d2:01:57:1f:da:
5e:28:5b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:36:13 2025 by rpki-client