Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/j6OF8BcTKh_YbyGrg0odiPUyj7A.roa
File: j6OF8BcTKh_YbyGrg0odiPUyj7A.roa (raw, json)
Hash identifier: dfRlryuIMzQZ5ZyaXmqmFGSYASNn4jh3POWBXDcqmGA=
Subject key identifier: 8F:A3:85:F0:17:13:2A:1F:D8:6F:21:AB:83:4A:1D:88:F5:32:8F:B0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E9E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/j6OF8BcTKh_YbyGrg0odiPUyj7A.roa
Signing time: Wed 29 Sep 2021 02:43:47 +0000
ROA not before: Wed 29 Sep 2021 02:43:47 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 122.146.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3742 (0xe9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:47 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8FA385F017132A1FD86F21AB834A1D88F5328FB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f6:d5:9b:de:3e:84:40:d1:17:42:4c:a3:ea:
23:d2:c0:ea:f2:98:34:64:0c:75:8c:f8:ec:40:b6:
84:91:01:eb:78:d0:f3:92:97:e0:e8:23:a2:37:b9:
07:07:9d:30:38:85:21:c3:01:79:36:71:e4:f8:d5:
28:36:26:d7:fc:58:8b:19:ef:fe:93:4a:8c:3a:66:
15:c8:1f:21:36:b6:4b:53:c9:d0:ea:da:d6:5b:79:
23:56:4a:91:c7:bb:d3:3e:99:91:ba:b4:c7:89:ca:
06:9b:a3:e3:f9:ab:c7:a5:d9:43:4d:e6:71:28:db:
b7:93:cc:15:f3:c5:07:ac:0d:2a:20:3c:4e:fe:a0:
5f:7d:9a:46:d3:a7:7b:c6:07:6f:68:ac:37:ec:b5:
8c:99:8a:f2:5d:84:26:a9:96:bf:23:10:e3:69:29:
ec:55:df:9a:07:9a:28:4a:07:bc:d5:43:26:24:d1:
ed:30:23:ef:ca:3d:69:dd:b9:4f:5f:fa:a0:ea:28:
e8:b9:93:37:93:3d:11:8e:74:f8:b9:92:1d:b0:a5:
80:b2:24:82:07:47:72:a6:7f:2a:bc:7a:eb:98:84:
4b:c2:36:c4:fa:b0:eb:e4:5c:45:f2:06:c7:56:8e:
9d:9d:3e:6f:3f:20:5e:0f:83:e7:01:80:aa:2d:d5:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A3:85:F0:17:13:2A:1F:D8:6F:21:AB:83:4A:1D:88:F5:32:8F:B0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/j6OF8BcTKh_YbyGrg0odiPUyj7A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.96.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:e6:44:b9:32:68:70:cd:0f:df:6a:5c:e7:55:d1:2d:55:e2:
b5:ef:98:dc:cf:ec:98:e6:a5:f0:12:9c:77:d4:33:db:e0:3b:
9a:5d:74:52:e0:91:2a:3c:27:40:49:39:84:7e:2f:76:80:f9:
f0:65:f2:01:a1:66:92:36:87:ad:e7:bc:25:37:f7:c6:6b:f6:
4e:cd:29:9a:dc:1c:19:8e:df:4a:a2:f3:70:65:2d:cd:bd:b5:
74:41:23:93:62:62:63:8f:8d:d0:d9:3b:a2:21:a2:b5:93:ad:
b6:6d:b1:61:38:cd:d3:d9:51:da:fa:28:69:4c:6d:a9:b7:82:
2c:f5:5d:86:60:e3:ca:3a:f4:3f:34:19:7b:d8:4b:4d:26:0b:
24:5d:cc:50:bc:81:d2:a0:46:71:fd:18:f0:5b:62:45:3c:b2:
a5:52:63:c8:73:f9:11:f0:fb:25:a7:e8:ba:35:d4:73:d5:e9:
ab:b4:2d:ab:cb:8a:c7:75:43:52:8d:a1:02:f7:50:c4:2d:ee:
4a:85:cd:7c:27:95:0f:04:19:f0:6a:16:b2:5f:f6:a4:15:dd:
ed:ae:af:16:b7:08:50:6d:10:db:72:95:01:11:1b:fa:67:a1:
a0:cb:e0:27:74:99:fe:91:1d:73:a6:62:59:a1:c6:d6:61:45:
8c:b3:38:38
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTA5Mjkw
MjQzNDdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDhGQTM4NUYwMTcxMzJB
MUZEODZGMjFBQjgzNEExRDg4RjUzMjhGQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD19tWb3j6EQNEXQkyj6iPSwOrymDRkDHWM+OxAtoSRAet40POS
l+DoI6I3uQcHnTA4hSHDAXk2ceT41Sg2Jtf8WIsZ7/6TSow6ZhXIHyE2tktTydDq
2tZbeSNWSpHHu9M+mZG6tMeJygabo+P5q8el2UNN5nEo27eTzBXzxQesDSogPE7+
oF99mkbTp3vGB29orDfstYyZivJdhCaplr8jEONpKexV35oHmihKB7zVQyYk0e0w
I+/KPWnduU9f+qDqKOi5kzeTPRGOdPi5kh2wpYCyJIIHR3Kmfyq8euuYhEvCNsT6
sOvkXEXyBsdWjp2dPm8/IF4Pg+cBgKot1eG7AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUj6OF8BcTKh/YbyGrg0odiPUyj7AwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvajZPRjhCY1RLaF9ZYnlHcmcwb2Rp
UFV5ajdBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3qSYDAN
BgkqhkiG9w0BAQsFAAOCAQEApeZEuTJocM0P32pc51XRLVXite+Y3M/smOal8BKc
d9Qz2+A7ml10UuCRKjwnQEk5hH4vdoD58GXyAaFmkjaHree8JTf3xmv2Ts0pmtwc
GY7fSqLzcGUtzb21dEEjk2JiY4+N0Nk7oiGitZOttm2xYTjN09lR2vooaUxtqbeC
LPVdhmDjyjr0PzQZe9hLTSYLJF3MULyB0qBGcf0Y8FtiRTyypVJjyHP5EfD7Jafo
ujXUc9Xpq7Qtq8uKx3VDUo2hAvdQxC3uSoXNfCeVDwQZ8GoWsl/2pBXd7a6vFrcI
UG0Q23KVAREb+mehoMvgJ3SZ/pEdc6ZiWaHG1mFFjLM4OA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:33:31 2025 by rpki-client