Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mO-D7Sj7kD-xB0nhv6ohKfweKEs.roa
File: mO-D7Sj7kD-xB0nhv6ohKfweKEs.roa (raw, json)
Hash identifier: qWUDcu7y6mSQZ0EbLd+xPEwp+b95axq9R/BqJ6Tk4a0=
Subject key identifier: 98:EF:83:ED:28:FB:90:3F:B1:07:49:E1:BF:AA:21:29:FC:1E:28:4B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 12E7
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mO-D7Sj7kD-xB0nhv6ohKfweKEs.roa
Signing time: Fri 01 Sep 2023 09:24:15 +0000
ROA not before: Fri 01 Sep 2023 09:24:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38851
IP address blocks: 122.146.108.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4839 (0x12e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=98EF83ED28FB903FB10749E1BFAA2129FC1E284B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:36:d9:f1:23:43:58:f6:d9:76:9f:59:47:
26:bf:75:ad:8b:51:80:a6:7a:d7:f2:ae:ae:29:cf:
78:6f:8f:7e:41:fd:ce:76:a8:9a:ca:3b:43:c3:07:
b9:91:77:61:26:b2:8b:ea:62:e1:c0:8c:1c:f7:ae:
6d:d9:55:91:93:6d:e0:99:53:e6:de:57:ee:66:52:
dd:96:da:10:22:17:be:c5:83:75:11:27:d6:b7:00:
4f:21:d6:44:13:4b:c3:ca:3b:33:94:72:92:35:ac:
8b:18:c8:73:17:54:33:1d:ce:1b:ce:f4:e6:30:2a:
3a:eb:38:96:1e:00:c0:e1:d5:22:3c:ae:15:97:7b:
94:1d:ce:7d:88:eb:2e:4f:98:54:5c:c8:37:d5:cf:
bf:6b:58:29:56:dd:65:d4:18:9b:12:16:7e:d8:96:
d8:36:24:cc:89:08:a7:b2:1a:69:4b:9c:7e:e0:ba:
30:5d:04:57:c9:cf:5a:90:73:96:be:bf:cb:c5:4a:
a6:3f:94:72:52:63:1e:a2:d5:73:38:95:ef:4b:52:
b9:59:1b:ed:89:e5:f2:b8:77:66:4f:12:18:c9:3e:
c5:c3:99:7d:53:e0:46:59:4b:0c:2e:82:7d:81:3a:
34:5f:12:8c:c0:c4:ae:2b:59:3e:fd:73:a3:a1:70:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EF:83:ED:28:FB:90:3F:B1:07:49:E1:BF:AA:21:29:FC:1E:28:4B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mO-D7Sj7kD-xB0nhv6ohKfweKEs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.108.0/23
Signature Algorithm: sha256WithRSAEncryption
55:7b:11:04:3a:8a:48:69:85:aa:d8:df:68:01:6e:60:26:d9:
a9:e5:73:58:b3:81:d4:04:9d:19:c7:27:cd:38:76:ba:31:5e:
5b:52:78:c1:2f:a6:da:7e:9f:c8:e8:fc:08:15:10:e9:6e:2e:
14:e1:fa:ba:2c:ce:0d:68:9b:4d:70:bb:35:d8:f0:43:2e:c2:
16:fd:50:14:78:44:91:de:cc:b9:23:40:66:1e:c8:6a:1f:a9:
cc:68:c9:9f:6a:55:c9:da:b7:65:7e:3e:26:01:6e:73:15:53:
84:22:8e:99:8c:0d:a2:f5:ef:c2:45:2f:7a:20:5d:dd:92:5e:
05:93:8e:99:d5:20:4c:d2:e7:91:f8:15:41:75:bf:fd:c7:95:
37:f8:92:ee:bc:1e:06:ca:84:ed:4a:d8:a2:5f:c4:72:c3:30:
20:19:06:f8:d3:4d:5c:05:73:6a:86:9a:1b:f4:12:3b:23:d7:
58:5d:12:8e:54:b2:ae:3d:02:db:68:5a:11:f0:b9:f5:ef:4f:
b8:01:26:7e:76:5c:f6:4f:10:93:c1:46:f8:58:b3:8f:74:41:
2b:80:c0:8d:14:97:e1:92:21:c5:77:90:e9:be:c9:c5:6c:d9:
3c:fa:a2:f2:f5:45:be:95:d0:a1:d3:c8:27:a1:8a:17:cf:16:
90:fd:0f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:35:24 2025 by rpki-client