Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/YDQSI70G0YTrI-QUnhukwJwwCBc.roa
File: YDQSI70G0YTrI-QUnhukwJwwCBc.roa (raw, json)
Hash identifier: hglhMU0DWq3FLLWNmG62I5N9esN+uGwcsJQcIapR4Lo=
Subject key identifier: 60:34:12:23:BD:06:D1:84:EB:23:E4:14:9E:1B:A4:C0:9C:30:08:17
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0869
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YDQSI70G0YTrI-QUnhukwJwwCBc.roa
Signing time: Tue 29 Sep 2020 09:52:00 +0000
ROA not before: Tue 29 Sep 2020 09:52:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 122.147.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2153 (0x869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:00 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=60341223BD06D184EB23E4149E1BA4C09C300817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:79:8d:b3:24:61:b9:9b:a2:b5:d4:cd:18:
89:b3:19:27:ea:dc:14:1a:40:2c:98:41:52:71:8e:
f9:22:aa:1c:77:b6:b0:15:13:ad:89:c3:a3:72:83:
dc:93:25:00:aa:4f:9f:2d:c5:64:b0:ad:f5:70:4c:
17:c1:dc:2b:df:91:d7:ea:14:f6:f5:f9:be:c6:5e:
1f:81:dd:31:c4:27:4e:14:0b:29:35:4f:3e:89:f3:
e7:29:35:98:0c:d3:dd:ec:15:4b:ed:59:3c:ed:c2:
c4:83:e5:a9:70:b3:6b:10:37:ee:77:53:a5:c8:32:
df:79:d3:6a:74:8b:4d:21:2a:f1:9e:0f:da:6e:9c:
82:30:07:10:38:1e:ed:0b:35:54:9f:60:92:95:af:
81:86:7a:7e:8e:38:9c:04:bb:6f:29:3b:4c:9e:1e:
f5:79:a0:8d:f5:36:06:6f:ae:c8:2f:ca:8a:06:d6:
a8:1a:94:48:51:ee:a2:93:77:8d:bc:3c:64:7c:19:
b1:83:ec:7f:33:f9:bd:37:73:29:2c:aa:ae:ee:f8:
6b:08:a0:3e:65:1b:e7:77:1f:1f:11:fa:d0:ac:a3:
58:0a:ef:d4:2e:cc:26:56:d1:c8:e6:df:f7:5b:d8:
4c:d8:5b:a9:93:cc:d2:ed:95:1b:c4:96:e9:18:35:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:34:12:23:BD:06:D1:84:EB:23:E4:14:9E:1B:A4:C0:9C:30:08:17
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YDQSI70G0YTrI-QUnhukwJwwCBc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.128.0/17
Signature Algorithm: sha256WithRSAEncryption
08:9e:af:41:a4:6f:a2:8d:2b:ee:13:d6:a2:67:04:92:38:f3:
71:17:1e:0e:e0:25:ee:c3:18:1b:c2:17:73:19:30:15:e6:09:
ee:ba:a9:8a:bb:26:f9:25:2b:81:eb:76:62:9b:f7:be:54:c7:
17:c9:c3:9f:19:7a:34:03:89:5b:a5:e4:ba:69:fc:09:53:5f:
bd:3e:40:3d:4c:56:4b:2e:b3:e1:f9:a2:9f:19:26:24:b0:e6:
28:a1:83:04:86:3d:a3:7a:51:36:97:36:5a:be:67:27:3a:a2:
67:2e:6f:7c:c1:64:0d:9b:9d:74:3d:4f:82:fc:b9:a5:74:c8:
43:6a:ea:62:08:ee:13:54:c8:9e:51:26:53:5a:1c:07:5f:be:
38:64:1a:34:a1:df:2a:93:e5:4a:9f:8d:5b:04:f8:f3:e0:4d:
ff:b2:d7:bc:a4:e7:c9:fc:c3:b2:c1:10:43:d1:c7:8f:f3:c6:
0e:f7:91:1e:0d:a5:ea:35:48:6c:21:77:6a:7f:d4:85:e6:b0:
49:2a:8b:66:ed:3f:a1:ed:c5:e6:bb:06:3b:71:48:98:e5:c7:
48:04:28:5c:fd:fc:3f:57:71:61:8c:b6:f5:bb:4f:76:b1:e9:
2d:d8:98:5f:bd:54:b1:d8:d9:a8:0e:d5:31:6b:df:8c:5a:30:
a2:f8:6d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:32:18 2025 by rpki-client