Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/dvzvJi1fiq_Qrn4PX5ET8nt1yFU.roa
File: dvzvJi1fiq_Qrn4PX5ET8nt1yFU.roa (raw, json)
Hash identifier: aHrw1VxcEaSaoL4BRofi4SJTVmU8gRKkRBusI0qS/Mc=
Subject key identifier: 76:FC:EF:26:2D:5F:8A:AF:D0:AE:7E:0F:5F:91:13:F2:7B:75:C8:55
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0EA9
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dvzvJi1fiq_Qrn4PX5ET8nt1yFU.roa
Signing time: Wed 29 Sep 2021 02:43:49 +0000
ROA not before: Wed 29 Sep 2021 02:43:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 123.204.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3753 (0xea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:49 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=76FCEF262D5F8AAFD0AE7E0F5F9113F27B75C855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2f:9d:85:3f:01:5b:d8:be:70:2b:84:ae:97:
7c:1e:23:1d:3f:55:d5:a5:14:e0:3a:18:0c:23:fb:
1f:86:ba:e7:b5:7e:ba:b4:58:27:26:7b:b2:25:e0:
5d:77:55:f2:95:fb:dc:b6:5b:e8:9d:94:cd:93:38:
8a:7c:73:c7:bd:7a:9c:32:b3:ea:8e:f6:d4:7f:fe:
01:47:4d:54:6c:d6:6c:15:63:f1:ad:19:18:84:60:
01:64:cd:05:d1:3b:e7:01:ce:76:e5:2f:25:a7:f4:
7c:0c:c1:4f:58:c4:38:1e:ac:e7:fa:db:14:52:65:
2f:5b:a8:2e:27:12:33:33:c2:40:a9:a8:dd:7d:0e:
fa:19:1b:1b:0b:ed:ea:74:38:e7:d2:bc:63:9e:9a:
33:c8:88:e2:98:57:52:7e:4f:a1:1e:16:ae:5b:3b:
ba:ed:74:78:59:c4:ab:83:9b:00:c5:71:c9:a8:76:
7d:df:38:5f:84:fd:27:22:05:f5:24:29:f3:7d:52:
8c:a8:5b:66:6e:f9:1c:30:53:6a:1c:76:c6:52:1d:
f2:82:2a:b6:3a:25:02:66:11:69:af:2e:62:87:a9:
3d:e9:19:3e:74:da:e4:6f:bd:e8:ef:93:26:74:b0:
e3:9b:52:25:44:00:44:1a:ae:12:b8:c1:be:27:6f:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FC:EF:26:2D:5F:8A:AF:D0:AE:7E:0F:5F:91:13:F2:7B:75:C8:55
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dvzvJi1fiq_Qrn4PX5ET8nt1yFU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.204.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0c:b1:bb:ac:5a:74:e2:b7:34:42:db:2c:9c:08:c2:73:1d:3f:
00:d7:cb:2e:5d:f5:a8:b5:3b:6d:f6:f8:67:ab:07:59:6e:e0:
45:a0:05:78:0a:52:af:cc:64:d7:5d:58:6d:51:14:03:fd:a5:
f8:1a:f3:40:6b:48:bb:ec:25:35:44:1f:06:cd:2e:09:b0:4c:
75:d2:af:cd:29:48:70:88:f5:0a:7e:c8:2e:e0:78:83:6c:41:
fd:f4:51:61:66:34:99:a6:cf:dd:1b:42:b8:49:dd:4b:c8:0e:
d8:1c:8a:2a:5f:05:d7:52:0b:11:6c:71:5b:05:bc:7f:d9:d3:
0b:57:17:07:d4:ce:19:76:55:ce:c2:c3:50:47:15:d0:8c:5d:
33:51:6d:fc:4d:bc:8f:c5:6c:c6:f2:27:01:23:0e:ee:37:e2:
fa:36:1d:1e:7f:2a:41:ec:55:e5:7c:0c:c7:84:e8:4a:4f:63:
06:56:8a:69:b7:d2:5c:3c:04:e2:57:37:65:29:6a:dd:6a:42:
5b:d7:e9:83:7d:28:3d:6d:56:f6:e2:58:cc:87:ba:9e:7d:73:
24:5d:34:62:26:1a:94:33:e5:a7:bc:51:ff:9d:8e:c6:4f:9e:
d1:e6:17:14:7f:7c:64:b1:04:64:04:5c:a9:e4:5c:a9:a2:7b:
77:3f:72:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:27:53 2025 by rpki-client