Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/dnW6Gm8mwBnkNpejpVMW7NDQHU0.roa
File: dnW6Gm8mwBnkNpejpVMW7NDQHU0.roa (raw, json)
Hash identifier: bXJmskwf+7LgstVT+FqblVWL2rTaOxB75QMwn5v1NNo=
Subject key identifier: 76:75:BA:1A:6F:26:C0:19:E4:36:97:A3:A5:53:16:EC:D0:D0:1D:4D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dnW6Gm8mwBnkNpejpVMW7NDQHU0.roa
Signing time: Thu 15 Sep 2022 02:43:29 +0000
ROA not before: Thu 15 Sep 2022 02:43:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 122.147.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7675BA1A6F26C019E43697A3A55316ECD0D01D4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:b9:02:37:69:49:c5:5a:89:87:a5:96:fd:
06:40:e5:bd:b1:ed:a1:b5:0e:4f:10:49:83:39:1d:
78:e1:12:b1:cb:2e:14:56:69:93:7f:9d:c4:69:1f:
f8:b7:54:e8:10:58:77:c7:ef:54:6d:cc:43:67:f5:
06:be:80:96:70:f6:d5:df:eb:eb:37:5b:68:de:e8:
17:80:a0:cf:d7:74:ca:4d:50:76:c9:d3:9e:88:59:
d8:72:8f:17:ad:86:4a:12:c5:f5:fd:dc:79:50:a4:
57:c2:73:f2:db:ff:0d:4d:85:88:bf:e9:08:88:6f:
60:16:ce:22:70:e6:bc:66:d8:d3:3d:5c:ad:7c:b0:
00:45:65:a8:62:89:37:70:b7:be:3d:3c:94:20:6a:
0a:e8:89:94:0f:c5:f0:da:d3:8b:d9:2a:b0:a2:63:
33:63:2d:e9:b4:73:cb:c6:03:7c:33:55:1d:ea:fb:
3c:b7:db:7a:83:61:0f:1c:35:00:8b:f0:5c:c1:7e:
cd:d3:61:a6:f9:ef:2b:c0:c9:a2:3e:9b:e3:6c:11:
99:73:cf:ea:55:d4:d0:5e:54:26:b1:05:27:25:60:
13:c9:b8:83:63:38:45:6f:a0:75:6b:8a:db:64:bc:
2e:ec:d9:bf:01:5b:a2:42:6e:36:3a:65:47:4f:82:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:75:BA:1A:6F:26:C0:19:E4:36:97:A3:A5:53:16:EC:D0:D0:1D:4D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dnW6Gm8mwBnkNpejpVMW7NDQHU0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.160.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:d0:bd:42:31:df:77:da:ab:42:38:b9:ad:5e:ad:f9:48:de:
01:86:1b:4c:b7:f3:fc:12:da:40:fa:10:be:0a:d7:1b:f9:27:
fd:5a:d6:9d:0f:82:40:c0:30:91:5d:d3:ef:26:f5:6c:cd:c2:
26:be:a3:63:e3:7c:7d:da:40:bd:e4:48:42:91:63:a8:8a:82:
41:68:31:6e:b7:ed:58:32:3e:0e:ac:70:f3:11:61:ac:b8:97:
23:dd:f9:e3:e5:df:a8:50:eb:3a:19:e4:c2:55:64:0c:6a:7e:
68:89:ab:dc:53:40:9a:c5:a1:e9:9c:0a:a1:f3:54:51:01:bb:
42:06:8a:9f:33:8c:70:d1:81:73:83:56:46:0d:78:76:89:fc:
8f:f9:1d:81:16:df:0a:ab:65:43:48:da:d5:6b:a0:23:36:76:
70:35:52:a6:e4:5a:da:1e:c4:b7:6b:35:05:14:f7:c6:57:0f:
4a:1a:d5:04:bf:6c:e4:2a:f9:41:26:ba:49:8f:8e:59:8c:1d:
80:fb:f7:2f:b4:7d:9e:b2:04:dc:27:c0:51:b3:8f:43:1c:bd:
54:2a:d0:7d:57:4a:a2:61:18:0f:59:b3:ba:f5:36:ec:19:64:
3f:9b:a8:28:9b:91:36:32:87:98:35:93:c4:15:cc:4c:1e:a9:
0b:95:6b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:53 2025 by rpki-client