Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Tl3A_fphB3o0vm91Dg3vsm2CihY.roa
File: Tl3A_fphB3o0vm91Dg3vsm2CihY.roa (raw, json)
Hash identifier: C6oJSiA8dXqTO1x3hobsqFT4NAwQeu8wJ+Y15x68CMU=
Subject key identifier: 4E:5D:C0:FD:FA:61:07:7A:34:BE:6F:75:0E:0D:EF:B2:6D:82:8A:16
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13BE
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Tl3A_fphB3o0vm91Dg3vsm2CihY.roa
Signing time: Fri 01 Sep 2023 09:25:22 +0000
ROA not before: Fri 01 Sep 2023 09:25:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 123.51.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5054 (0x13be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4E5DC0FDFA61077A34BE6F750E0DEFB26D828A16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:e6:99:a0:94:0d:5c:f1:3b:e2:bc:b0:4e:
d5:03:f9:db:54:52:a4:16:84:ae:6e:a2:dd:bc:d4:
28:b7:8f:b3:88:b2:40:9a:34:f4:7a:06:26:c4:95:
28:b4:34:c5:dc:80:45:ac:99:bd:0c:2b:70:5d:aa:
21:a3:d6:7e:84:62:f1:a2:8c:21:93:84:21:73:0a:
3a:dc:72:44:2e:9b:90:ca:b7:24:9e:c9:f1:c7:0d:
b9:12:d1:50:3f:1d:67:21:d8:8e:34:ec:3c:77:b0:
00:79:a4:40:d0:d7:d2:c1:7c:8b:69:bd:81:2c:33:
1d:ba:da:4c:c1:b4:4e:39:9c:61:ad:8a:45:43:17:
ee:05:25:1a:30:e6:dd:df:2f:c8:b6:f4:7e:18:21:
99:be:45:64:52:91:de:2f:02:a0:a8:39:cc:1c:87:
75:d1:ff:c3:3f:f8:20:ad:d2:88:bb:99:6b:e5:19:
2d:1e:6f:c9:fe:84:cb:1b:0d:a8:8f:76:f6:b3:5f:
02:0f:e3:2f:b5:2c:d0:3d:1c:92:0f:a4:07:fe:bd:
d1:6e:75:93:1e:d6:60:5e:d5:d2:08:4e:a2:5c:73:
67:88:21:5c:79:e6:ae:20:2d:4d:55:67:14:38:5d:
b5:c7:73:0c:5b:c0:3f:d2:c5:75:f9:aa:68:bc:3a:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5D:C0:FD:FA:61:07:7A:34:BE:6F:75:0E:0D:EF:B2:6D:82:8A:16
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Tl3A_fphB3o0vm91Dg3vsm2CihY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.51.181.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:b1:5a:30:f9:ed:d5:24:5c:50:7b:e3:b4:e9:27:89:0c:80:
07:2a:b0:ba:ac:b9:3e:94:3c:33:d8:ed:42:fb:bd:f0:4b:76:
6b:67:73:0c:ee:b8:60:2d:dc:3c:e3:3a:bb:de:11:4f:9d:5d:
c5:33:64:aa:46:76:79:29:f6:75:dd:53:54:1f:73:82:a0:be:
81:99:1a:28:d0:9a:ec:d3:75:55:88:9f:0c:76:3a:8f:aa:7e:
55:8c:4d:5d:74:83:a7:4a:23:8f:97:75:67:32:65:1c:c8:05:
e4:e7:3c:92:21:e0:44:68:69:cd:ff:c4:b5:bc:c8:08:14:d2:
69:49:15:04:24:6b:b0:a4:e5:63:29:17:df:e1:86:6a:73:bd:
2d:ed:38:a3:e1:76:16:68:da:96:c9:23:c6:40:8f:74:e7:66:
33:51:2d:9b:05:b2:97:30:0e:cb:78:e6:b6:6d:eb:a3:25:b3:
b1:57:23:e5:6b:05:69:7a:8a:58:2b:64:ee:26:e2:64:28:47:
ff:c9:0c:6a:fc:7f:af:2f:68:18:64:c4:5e:0d:7b:43:8f:c5:
70:ad:44:e2:9e:d5:36:8b:14:f8:f7:66:6c:20:ba:e2:da:af:
44:07:88:37:db:b6:b5:52:6b:1b:3b:41:7e:5b:fa:cf:32:fb:
cb:5c:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:07 2025 by rpki-client