Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Reyg9rxAHQKX_wy-WF01RdwW4sc.roa
File: Reyg9rxAHQKX_wy-WF01RdwW4sc.roa (raw, json)
Hash identifier: o4mETTUweDB+afHeNREvzgxM3ZsE6+cR6OQBriKcO4k=
Subject key identifier: 45:EC:A0:F6:BC:40:1D:02:97:FF:0C:BE:58:5D:35:45:DC:16:E2:C7
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C39
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Reyg9rxAHQKX_wy-WF01RdwW4sc.roa
Signing time: Sun 07 Feb 2021 07:10:44 +0000
ROA not before: Sun 07 Feb 2021 07:10:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 122.147.164.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3129 (0xc39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 07:10:44 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=45ECA0F6BC401D0297FF0CBE585D3545DC16E2C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:30:8a:c8:4b:8b:de:13:c8:db:ea:71:41:
16:ac:d5:09:6c:3a:b3:cc:d7:b2:71:68:90:23:71:
13:7b:41:04:eb:00:e3:76:a8:51:88:13:73:25:69:
ac:48:f3:c8:31:1f:7b:61:c9:fd:7c:b6:ad:2b:f6:
8a:bd:6d:c1:b5:4b:82:f0:d4:4d:20:b8:3c:92:53:
ad:4d:d5:ce:9e:8d:ba:4d:0c:9d:fd:d3:44:a6:18:
c6:63:6f:43:7b:4f:a8:09:8d:38:38:cd:a9:99:5d:
db:b2:38:3c:a9:72:5c:1b:4d:a6:70:21:25:4a:76:
28:16:bf:55:9b:78:2d:8d:dc:24:39:d4:47:a3:ec:
21:18:02:77:ae:8b:b0:53:b7:7b:b4:1b:5d:4a:b4:
64:fe:31:a5:db:1a:5a:ad:47:6b:6d:cb:41:33:b9:
e6:2f:07:b2:bc:d3:0d:3b:5a:01:d9:19:39:c4:98:
09:c6:49:0e:0c:c7:02:2e:fe:42:19:24:75:15:75:
72:45:38:87:bd:94:d0:2e:36:1b:26:f7:4d:48:35:
30:f7:1e:e2:c4:55:d9:93:29:69:33:83:c1:7e:41:
72:30:81:2f:ab:11:71:11:bd:86:be:20:6c:ab:63:
e3:08:db:ab:28:c1:32:de:7d:35:4d:55:28:c0:6c:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EC:A0:F6:BC:40:1D:02:97:FF:0C:BE:58:5D:35:45:DC:16:E2:C7
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Reyg9rxAHQKX_wy-WF01RdwW4sc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.164.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:80:f9:7a:a4:16:37:f9:e7:f2:8b:cd:7d:0a:98:a1:22:0a:
d2:1a:34:51:49:e3:b1:b3:2f:ce:0c:dd:77:8e:c2:a7:06:73:
68:4b:19:59:76:48:5e:79:7e:2f:a2:35:15:6f:c6:a4:a9:bc:
78:d4:4e:ea:db:22:d5:52:75:4b:92:a3:3e:a1:92:53:d1:0f:
22:13:77:24:ed:68:b6:6e:de:a1:bb:2a:15:9a:23:79:24:00:
aa:9e:93:2c:63:96:e2:1f:63:03:24:40:2b:97:fe:83:a9:79:
8e:85:f3:75:e5:b4:e1:97:d0:f8:95:64:77:2a:c2:81:bf:db:
fc:8a:22:de:9c:66:40:b4:38:19:ce:21:61:86:36:6a:28:af:
c3:ef:5b:6d:78:46:b3:9c:4f:db:fb:07:e1:7f:10:3a:b3:5a:
58:05:cc:96:c7:d8:77:aa:c3:2a:18:96:26:2c:14:76:99:57:
82:91:4e:a3:ab:c2:17:28:ca:10:63:e1:fe:e6:60:1f:cb:7e:
79:a3:f1:c1:bf:0f:b3:c0:23:37:da:2d:ad:72:45:ed:c6:85:
8d:ae:21:4d:5e:15:d3:a4:b2:28:ca:87:a3:ce:6b:fb:94:32:
b6:c0:5b:9e:7e:74:5e:ff:6e:8a:cc:09:5a:42:96:6b:f1:82:
8c:df:87:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:56 2025 by rpki-client