Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/bOhL8aGQwlXIYgBicF_yN-Vio6Y.roa
File: bOhL8aGQwlXIYgBicF_yN-Vio6Y.roa (raw, json)
Hash identifier: KhE3GnZECOdKLBVDJeGpllYP/RYnpNtDmwE/oBFO0lc=
Subject key identifier: 6C:E8:4B:F1:A1:90:C2:55:C8:62:00:62:70:5F:F2:37:E5:62:A3:A6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0855
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bOhL8aGQwlXIYgBicF_yN-Vio6Y.roa
Signing time: Tue 29 Sep 2020 09:51:55 +0000
ROA not before: Tue 29 Sep 2020 09:51:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 122.146.108.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2133 (0x855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:51:55 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6CE84BF1A190C255C8620062705FF237E562A3A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:75:5d:a8:c4:ae:b6:dd:ca:e4:c4:78:16:c7:
6c:79:22:5e:a7:77:1b:8d:80:e7:30:d8:a8:ac:cf:
a2:9b:06:75:ad:5b:09:2b:0f:58:84:9b:ff:c4:4d:
7d:92:b8:28:8c:ea:b2:93:4d:7b:38:d8:ef:6b:90:
2b:e3:b1:0f:73:39:f1:64:b2:a4:17:29:e1:59:83:
6b:5b:80:b0:2b:90:9e:8c:d6:14:f5:c8:7e:33:ec:
b8:c2:85:95:59:e5:43:47:3f:60:15:69:25:c0:4a:
8f:0c:bf:e6:04:d4:04:ae:bd:58:1a:e5:fe:2d:25:
6c:cf:45:d7:3b:b4:ef:06:4e:fe:4c:8c:16:23:b9:
2c:0c:6d:e3:e0:25:36:b5:f9:6d:5c:8c:5a:7e:04:
f5:2e:29:6e:75:d9:f9:fd:c4:b6:1e:87:6d:7f:fe:
28:b0:45:1a:bf:b9:b6:3e:c8:0c:c8:aa:4a:7f:d8:
96:64:af:6f:b4:0d:a3:21:15:42:fa:44:a9:e7:cd:
87:b7:b8:11:83:01:aa:23:8f:1c:a1:1f:d0:f5:f2:
cc:82:00:76:66:8f:67:00:e7:84:55:7a:de:78:05:
46:3a:47:e6:f9:58:5c:a0:aa:42:f8:69:fa:18:ce:
2d:b4:22:e2:27:cb:aa:0c:07:4a:08:4e:ef:30:d6:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:4B:F1:A1:90:C2:55:C8:62:00:62:70:5F:F2:37:E5:62:A3:A6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bOhL8aGQwlXIYgBicF_yN-Vio6Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.108.0/23
Signature Algorithm: sha256WithRSAEncryption
91:69:f4:ac:ba:f1:15:ed:1d:30:b6:9c:d0:46:f0:86:f9:f9:
a0:79:69:dc:91:69:1a:f2:4b:62:14:fd:c9:e7:80:ce:01:53:
2b:a9:57:35:6f:0c:f0:b1:bc:70:8f:bb:72:42:bd:f8:20:da:
9d:4b:ee:7b:5f:2f:5d:b7:58:43:00:97:d5:9f:7d:19:ea:96:
ef:1b:fa:22:92:d1:93:0b:c0:d1:a9:3d:97:75:0e:6f:fd:9b:
84:48:88:0d:e8:ee:af:fe:e4:16:de:84:e6:4c:b0:6b:8e:0d:
e7:d4:70:75:35:38:2f:12:5f:8b:c1:f7:e1:30:2d:26:8e:41:
a5:1c:af:c0:f7:a5:ad:f6:39:2d:55:80:70:ee:0a:a2:2f:f2:
39:c2:24:00:ea:7c:cc:22:27:3f:ad:8c:ad:e7:26:83:30:d5:
6e:98:6b:85:73:3c:77:35:e3:ca:3d:b8:25:69:72:8d:38:07:
80:50:16:eb:64:91:67:89:ef:4e:03:f0:a4:58:3d:c1:fe:4e:
10:b0:e4:0c:a7:e1:f6:c5:9d:a4:84:a9:e2:27:15:97:2a:6c:
9a:a7:bd:81:57:66:b6:3f:00:06:d8:02:ca:35:e7:9d:ed:d4:
7b:65:f7:ec:7b:7e:fe:43:50:d2:9c:65:80:67:7e:53:21:92:
a3:c6:af:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:36:15 2025 by rpki-client