Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/LNdBBLegjhbNOwZHtWKRZr2DFTc.roa
File: LNdBBLegjhbNOwZHtWKRZr2DFTc.roa (raw, json)
Hash identifier: CYUvl8CEsVleGiteFXqEmC6mRbr+oMe3nhVch8ZDa6w=
Subject key identifier: 2C:D7:41:04:B7:A0:8E:16:CD:3B:06:47:B5:62:91:66:BD:83:15:37
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10B9
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/LNdBBLegjhbNOwZHtWKRZr2DFTc.roa
Signing time: Wed 01 Feb 2023 10:28:56 +0000
ROA not before: Wed 01 Feb 2023 10:28:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.147.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4281 (0x10b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:56 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2CD74104B7A08E16CD3B0647B5629166BD831537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:e5:a4:46:94:69:86:5a:01:be:e4:9f:aa:
1c:63:70:fa:3f:e5:97:ef:1e:5f:19:6f:e3:62:80:
e6:98:55:a7:f4:a4:38:7f:b0:92:1a:50:ee:bd:8d:
ec:c1:2a:d4:9d:e8:4f:0c:15:8f:59:b6:af:cb:0b:
7e:f2:76:44:85:b2:a1:37:4a:d6:f9:a6:e6:0a:15:
5e:2d:90:b3:62:16:1f:42:9c:d1:2e:32:4e:6d:a5:
bb:b2:92:df:58:da:d6:37:5d:f8:3a:b6:40:56:58:
94:7b:cd:c0:e3:ca:b1:32:94:aa:6d:10:62:57:cd:
f8:48:0e:6f:9f:90:fe:e1:91:da:e0:18:01:34:34:
b8:f8:31:c7:f9:50:84:be:66:76:d9:97:fd:a0:47:
27:6d:77:09:91:b9:04:e6:8e:5f:d3:b1:b5:4e:c7:
a5:f1:c8:02:a6:01:da:8e:13:67:d8:77:48:fa:a1:
90:b2:c4:8f:2f:ab:e8:a8:da:1b:45:e4:cc:04:e8:
1c:43:58:af:3b:1c:f8:d9:fb:da:a9:8d:28:2c:fa:
56:35:0a:39:f8:2d:89:a6:c0:65:ff:ba:64:05:a1:
fa:22:ce:12:04:9c:6d:fa:e5:32:96:c4:73:16:8b:
23:3b:a9:f7:97:71:43:37:5f:bb:fb:5b:1e:de:c6:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D7:41:04:B7:A0:8E:16:CD:3B:06:47:B5:62:91:66:BD:83:15:37
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/LNdBBLegjhbNOwZHtWKRZr2DFTc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.0.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:03:46:43:8c:62:8d:96:57:84:c7:a3:0d:93:5a:df:8b:7b:
0c:8f:d3:ee:c0:b8:d8:e9:96:3d:8e:be:30:ad:2e:df:13:34:
dc:65:8b:52:4c:f3:a8:76:0e:a0:70:a2:46:83:6d:1a:44:d5:
6e:0b:2d:97:59:01:10:ec:87:36:c4:33:81:c0:93:14:9b:c6:
f5:59:2f:da:b0:db:19:05:01:02:14:cc:1b:15:5c:26:2c:db:
83:cf:a3:5e:8a:34:f7:49:07:96:41:46:8a:59:81:a0:bd:cf:
bf:80:b4:25:0e:e7:73:a2:b4:1a:bf:eb:43:89:07:4f:c1:5f:
9c:e5:e1:54:4c:2f:ae:a1:17:65:78:c5:ad:67:7f:0f:98:9b:
82:0e:a1:a1:bd:45:a7:31:90:8f:e6:0e:58:39:10:a7:44:16:
be:05:57:07:0e:7a:8c:45:b8:29:de:27:06:cf:2f:52:48:a7:
b8:9f:5b:73:fc:f9:58:2b:dd:cd:2c:3e:31:8b:be:09:83:de:
7e:f3:56:73:39:ba:57:6f:ec:4e:9b:65:ca:d8:07:a4:15:44:
7e:b8:08:ea:a3:39:6c:b5:34:19:99:c7:2c:54:9d:a1:d5:24:
8c:b1:7b:ef:f5:c5:af:9f:c5:13:70:55:21:f2:7e:67:02:32:
04:1c:16:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:17:02 2025 by rpki-client