Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/g4NFwRYKQEG2lEepIXaE87jPpcs.roa
File: g4NFwRYKQEG2lEepIXaE87jPpcs.roa (raw, json)
Hash identifier: rwihytWEkhIgNK567npJ8uylNvnkUPn5OcxAJu0W4AQ=
Subject key identifier: 83:83:45:C1:16:0A:40:41:B6:94:47:A9:21:76:84:F3:B8:CF:A5:CB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/g4NFwRYKQEG2lEepIXaE87jPpcs.roa
Signing time: Thu 15 Sep 2022 02:42:56 +0000
ROA not before: Thu 15 Sep 2022 02:42:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.147.166.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=838345C1160A4041B69447A9217684F3B8CFA5CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:da:d0:15:91:d7:e9:91:53:51:50:40:7d:
b2:26:c1:98:66:cb:35:96:d6:46:d0:da:eb:55:10:
99:9b:6c:57:e5:65:fe:da:9d:71:85:65:bf:6e:77:
94:f6:a8:07:5b:5d:74:10:67:88:04:aa:f2:8b:8b:
31:c1:a9:a4:4b:4e:a2:54:6f:03:6e:ae:b2:fe:80:
e6:55:fe:37:e0:e2:6a:59:9a:d2:4b:22:2f:ae:8e:
8a:74:dc:1d:e8:8f:13:88:89:69:27:68:e3:d6:ee:
aa:e9:da:7c:3b:c3:ca:f3:01:b1:90:8d:bf:21:da:
57:d9:7a:06:e2:ad:6c:65:07:51:12:88:26:18:a5:
56:1d:36:60:5f:0d:45:d5:2a:11:b5:18:68:0f:5c:
92:dc:c9:93:41:0b:18:a6:3f:c7:fb:9e:b2:d3:22:
cc:11:da:94:a7:01:43:f4:dc:88:65:0e:36:40:77:
27:88:0c:dc:7a:b3:de:54:aa:e4:09:31:6c:8f:df:
26:e3:05:fd:2b:33:cc:34:fe:3e:5b:bf:c0:2a:b1:
4e:ab:00:cb:04:0d:74:26:0b:9b:8e:b5:3d:c5:e2:
cf:ca:50:48:70:be:4f:c4:3b:2b:d1:60:a5:af:48:
4f:9f:62:cb:a7:b3:b3:3a:b7:0d:6d:47:54:12:0d:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:83:45:C1:16:0A:40:41:B6:94:47:A9:21:76:84:F3:B8:CF:A5:CB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/g4NFwRYKQEG2lEepIXaE87jPpcs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.166.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:26:16:fe:74:81:b7:28:5f:7e:1a:7a:dc:aa:e2:4d:92:45:
a9:f2:dd:28:9c:08:7f:b3:3e:88:a9:2e:23:75:86:48:8a:eb:
b7:07:3f:f1:fb:18:cb:29:81:90:38:56:ed:2f:47:dd:d6:af:
9c:be:1c:a9:30:37:20:4b:94:db:de:f8:e7:83:d2:1e:ac:d6:
fc:f6:ae:67:63:06:ae:0e:97:3b:1f:c2:d7:28:fb:58:a3:b2:
fa:4c:fd:b0:2a:c3:b2:6d:38:33:23:4d:f5:80:81:0d:dd:62:
d3:7d:bd:33:59:4d:e4:07:26:4f:69:15:bb:9d:ff:47:73:84:
a1:f5:ca:a4:56:6f:70:6e:43:fc:0b:0a:66:2d:22:18:e7:49:
4d:29:7c:d6:cc:be:42:88:cf:13:cc:9a:c5:53:ea:7d:e6:51:
db:09:e8:32:d4:45:7e:43:91:36:ce:9e:7c:c6:54:f0:e6:53:
18:a6:ce:f3:1a:19:f7:f5:a6:69:eb:6c:be:7f:f5:08:9a:81:
92:5f:0b:32:bf:03:79:71:19:5d:08:69:3f:2b:34:5b:f3:c6:
e0:29:1b:7f:46:1e:e5:e5:88:44:be:18:19:d7:81:56:86:89:
56:9c:19:1a:59:ee:d3:3f:45:2a:2b:89:0f:3e:e4:b1:04:22:
40:1b:7d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:08 2025 by rpki-client