Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Yzc8hRbHWgl-jFW0p7W6T94KSt8.roa
File: Yzc8hRbHWgl-jFW0p7W6T94KSt8.roa (raw, json)
Hash identifier: TmSeWjd4bM4o3c8ga1Oh1T20/QAukieOj107GtX0Hm8=
Subject key identifier: 63:37:3C:85:16:C7:5A:09:7E:8C:55:B4:A7:B5:BA:4F:DE:0A:4A:DF
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08F8
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Yzc8hRbHWgl-jFW0p7W6T94KSt8.roa
Signing time: Tue 29 Sep 2020 09:52:39 +0000
ROA not before: Tue 29 Sep 2020 09:52:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 122.147.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2296 (0x8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:39 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=63373C8516C75A097E8C55B4A7B5BA4FDE0A4ADF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:33:b8:b2:69:df:35:be:7b:b9:9a:52:2b:
e7:c9:f1:3e:29:9b:87:83:0e:21:a6:ee:be:91:db:
69:15:55:2e:64:a7:05:1c:4b:33:5b:9c:36:55:6c:
4b:6e:ae:25:ab:dd:a6:ae:34:ec:29:e7:bd:23:92:
9b:14:22:52:4c:4e:d1:ef:86:8d:4e:23:19:06:55:
3b:8c:ea:f7:d7:0e:77:96:50:4b:a1:65:d2:ca:cf:
11:ea:dc:0e:12:29:a7:4e:cc:8a:13:51:25:42:05:
4a:6e:47:41:76:31:a3:f5:8d:e1:32:bd:d7:c7:ab:
12:5c:bd:0f:bf:bd:1c:74:8f:2e:02:d0:6a:64:d7:
f3:c7:f8:4f:e6:6a:2a:0b:8d:03:0d:cd:a9:16:b2:
65:e2:ce:bf:0b:5d:cb:6e:5c:a6:68:1d:b6:96:c5:
4c:70:a2:03:44:6a:d2:40:eb:4c:0b:70:88:c7:12:
e0:1f:8c:1e:86:46:66:1d:e4:26:15:ba:2a:2c:93:
6e:3f:26:36:cb:18:0b:eb:41:54:14:3a:2c:54:c0:
41:b8:72:31:da:e1:9a:e8:bf:f3:69:f6:cb:09:83:
87:bc:dc:ad:87:42:3f:e8:31:82:b3:17:f3:41:ee:
18:ba:9c:eb:02:52:d3:3c:4a:05:0a:56:70:7a:d7:
b6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:37:3C:85:16:C7:5A:09:7E:8C:55:B4:A7:B5:BA:4F:DE:0A:4A:DF
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Yzc8hRbHWgl-jFW0p7W6T94KSt8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.16.0/21
Signature Algorithm: sha256WithRSAEncryption
30:3f:13:23:04:84:f1:56:89:a1:73:46:ee:0d:c3:a1:0c:b2:
32:a9:7c:57:0e:2d:0f:16:a3:e2:a0:38:a6:bf:08:91:e6:89:
1d:68:da:63:32:bd:9c:b6:f2:83:5a:6c:40:0a:8c:93:53:e2:
55:4e:50:19:61:39:1f:24:24:c0:e2:73:cf:20:5e:37:7d:c8:
d9:f2:be:23:8d:27:96:49:95:dd:ef:44:93:4c:8f:57:a3:36:
43:ba:3b:1e:4b:35:b1:3a:70:84:08:6b:1e:f2:c1:48:54:03:
ae:04:52:c8:5d:1e:4e:37:c5:5e:b9:df:34:15:dc:24:10:4e:
78:c7:e2:d2:cc:dc:02:98:0e:ac:1d:67:13:97:01:1f:22:e6:
51:2e:4b:8a:77:50:fb:e4:64:70:8c:82:56:db:db:5d:12:73:
c8:8b:0e:4e:91:8e:fe:b7:c1:cd:73:aa:87:f9:dc:47:6a:d9:
e7:ef:84:26:99:37:85:b1:f9:52:d6:69:b7:c8:f3:b3:6a:a5:
95:5e:5e:0e:b3:b7:9e:56:fc:13:91:f7:37:37:4e:b0:b4:38:
51:50:d3:16:7e:72:ba:5a:bd:e2:db:a4:41:15:42:ed:77:82:
2e:9e:12:9e:ea:e8:2d:94:5d:26:f8:1c:00:17:41:b5:f0:2d:
a5:8f:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:39 2025 by rpki-client