Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/b8bgKuypur8bkCd9MKOiDIbZHeY.roa
File: b8bgKuypur8bkCd9MKOiDIbZHeY.roa (raw, json)
Hash identifier: xGUKsBfyDEC61nCI44VBlDvM3PyS0z7U7Wv0zLIziv0=
Subject key identifier: 6F:C6:E0:2A:EC:A9:BA:BF:1B:90:27:7D:30:A3:A2:0C:86:D9:1D:E6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1392
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/b8bgKuypur8bkCd9MKOiDIbZHeY.roa
Signing time: Fri 01 Sep 2023 09:25:10 +0000
ROA not before: Fri 01 Sep 2023 09:25:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 123.205.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5010 (0x1392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6FC6E02AECA9BABF1B90277D30A3A20C86D91DE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4c:2c:4b:82:55:0c:49:ed:a6:45:7f:4c:ca:
3e:47:3b:b5:40:5e:d5:06:75:17:e2:6d:8e:85:ce:
e2:8d:b6:37:c3:0d:d4:8c:94:c8:1f:96:ab:14:b4:
ea:7d:91:09:66:0a:3a:86:bf:84:5c:4c:37:12:99:
aa:af:d0:66:95:2d:b9:7d:b2:2b:cc:80:c7:22:a8:
78:b0:1c:60:35:2c:17:2b:27:a5:e9:1a:72:8f:2c:
22:64:b1:8b:e6:8a:15:d6:bf:d0:83:f1:e0:f3:a9:
b0:44:2c:58:c6:bf:6b:5b:cc:3f:d1:ea:29:50:9e:
c0:2d:9d:80:74:07:bc:af:c7:04:04:3a:d4:57:3e:
50:b3:1b:b4:f2:4f:65:c6:43:77:05:b3:98:c0:f4:
41:e1:1a:3c:db:f6:11:3c:af:ed:43:c7:91:3a:f2:
a5:c2:f7:a3:74:e4:86:ca:cc:8d:8a:3a:7d:eb:cd:
8f:d0:39:d7:68:92:8d:87:66:4b:3b:54:5c:a3:ab:
b1:12:10:18:93:6e:bc:bb:22:02:1c:88:74:ce:50:
d9:d7:92:04:a1:42:4e:b5:f0:24:38:60:7f:3e:c9:
49:05:eb:04:12:69:09:ad:bd:29:c0:72:c6:a3:f3:
84:be:70:0c:b9:a3:40:90:ae:ea:5d:0c:87:1a:6c:
4e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C6:E0:2A:EC:A9:BA:BF:1B:90:27:7D:30:A3:A2:0C:86:D9:1D:E6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/b8bgKuypur8bkCd9MKOiDIbZHeY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b8:4d:f4:44:a9:b8:08:74:9a:54:20:29:37:2a:2c:3a:16:
50:04:77:51:93:29:87:0d:05:c2:da:dc:e0:e6:91:22:da:1e:
b2:89:69:db:27:7f:74:63:55:be:89:c8:63:8b:dd:f6:0d:ff:
d7:24:aa:c6:8c:f1:64:bc:26:68:65:94:52:fd:d5:ea:33:4a:
5f:ad:fa:6f:93:f7:95:0a:b1:6f:35:f7:d8:09:be:0b:1f:26:
26:48:8f:90:bb:b4:98:d0:06:66:1d:e9:b8:a1:28:68:1a:c9:
ec:c7:63:ef:98:28:96:d2:d9:1d:74:fb:ec:c4:08:c2:ee:af:
12:25:4f:2f:77:11:bc:a8:a6:0f:3b:bf:f7:53:b5:0e:97:76:
d6:23:3a:ab:57:9b:48:36:d7:2d:f1:24:08:ad:12:ab:17:33:
97:9e:20:b9:47:10:a2:70:c9:1e:9e:23:e3:4c:e9:a2:d5:65:
7e:34:fe:dc:82:20:51:37:a7:17:35:54:3f:91:52:0f:cd:e3:
1b:44:60:44:d2:ab:76:a5:8d:c9:a3:a7:9f:b8:ad:3e:03:a9:
23:17:c3:44:dc:f7:aa:05:01:5f:6e:de:8a:23:22:b2:e7:bc:
b6:16:c6:90:d9:9f:33:21:ec:68:b0:e4:30:82:17:89:d3:95:
ad:69:c1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:02 2025 by rpki-client