Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/nclZxKK8TsKuR7OD9kE3B2V2IJc.roa
File: nclZxKK8TsKuR7OD9kE3B2V2IJc.roa (raw, json)
Hash identifier: xkIC3vtGzDz0hkTtNJtXi4mPmYahZRufjpxR7gjxN4Q=
Subject key identifier: 9D:C9:59:C4:A2:BC:4E:C2:AE:47:B3:83:F6:41:37:07:65:76:20:97
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1330
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/nclZxKK8TsKuR7OD9kE3B2V2IJc.roa
Signing time: Fri 01 Sep 2023 09:24:36 +0000
ROA not before: Fri 01 Sep 2023 09:24:36 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 122.146.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4912 (0x1330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:36 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9DC959C4A2BC4EC2AE47B383F641370765762097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:53:74:72:3d:7d:a7:26:a1:81:f4:12:f1:
14:ed:9e:df:5d:bb:8a:e5:04:db:d1:c5:05:71:bd:
08:a6:ae:90:44:69:24:48:6d:e4:8d:85:60:e5:62:
cd:d1:9f:70:5a:e3:5b:9c:a1:5d:a5:13:61:23:d1:
33:ce:57:c7:29:f7:56:45:2f:ea:aa:32:e9:0c:21:
e8:27:05:48:91:d6:d5:7b:d0:88:3b:39:93:3e:92:
f6:04:b3:ba:de:17:ec:14:da:a4:27:d4:b8:f2:15:
ef:ff:e8:18:40:77:a7:c7:eb:15:c0:2f:30:bd:40:
45:df:1c:c4:6c:ff:b9:dc:ae:91:e1:26:e5:a6:bc:
1a:60:df:57:19:b0:4d:88:6a:f9:02:f3:b0:82:80:
21:5a:61:4f:a5:85:84:9f:87:c4:c5:a4:6f:e4:3d:
23:e4:e5:29:4e:37:51:3e:6c:0f:f7:bc:08:5b:2e:
ee:5a:ba:98:10:07:6f:a1:12:d8:b4:32:93:10:33:
f9:39:04:ad:9b:cc:7e:08:c5:3a:22:e4:89:aa:f0:
12:ae:73:44:19:22:9b:7f:f1:2d:3e:b2:c6:9c:c1:
38:7c:aa:6d:d8:97:fc:c3:2e:9b:2f:2b:8e:12:74:
d6:8b:d1:a9:e6:d9:12:e2:1c:94:bc:47:53:43:c7:
81:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C9:59:C4:A2:BC:4E:C2:AE:47:B3:83:F6:41:37:07:65:76:20:97
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/nclZxKK8TsKuR7OD9kE3B2V2IJc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.0.0/15
Signature Algorithm: sha256WithRSAEncryption
20:c3:2b:5f:5b:0b:fb:e0:28:9f:6c:a6:ba:ae:5b:99:1f:a0:
8e:85:0d:51:db:d4:9b:00:5c:5e:95:cc:86:1d:81:4d:f0:f7:
fe:8f:94:4e:1e:d8:ac:bd:ec:d9:eb:8a:0a:56:f9:18:00:23:
80:63:5a:48:27:c0:1c:26:0b:83:1a:58:cd:7c:b5:71:bb:24:
20:d0:82:4a:8c:c5:1a:e5:86:4d:ef:49:02:f1:9c:4e:f2:c7:
29:5c:6a:43:b2:e6:57:e2:38:6f:f4:64:7e:d4:88:d2:91:a3:
2e:c0:61:b0:40:d2:1c:4f:a5:52:fd:59:3e:0c:9b:05:f0:bb:
71:ec:e1:00:18:96:14:2c:17:7f:03:4d:02:ab:f2:11:a0:16:
e4:40:3f:61:3c:32:4b:93:5c:a1:fe:12:bc:ad:e5:e6:b7:a1:
11:db:a8:2b:d7:f9:7b:31:4c:6f:67:be:33:39:d6:14:f2:f2:
1f:db:39:93:af:98:51:4d:2a:77:5c:8e:60:5e:ac:60:37:5f:
e2:68:b8:0e:50:72:79:c8:ae:35:1c:a0:67:c6:f7:81:e4:cf:
ec:9d:af:3b:c5:2d:5a:51:63:67:55:6f:16:18:71:94:70:30:
61:70:5b:6c:8c:5d:92:3a:29:9d:e3:6d:a7:de:98:93:99:d6:
f8:c9:82:50
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICEzAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw
OTI0MzZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlEQzk1OUM0QTJCQzRF
QzJBRTQ3QjM4M0Y2NDEzNzA3NjU3NjIwOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCu5VN0cj19pyahgfQS8RTtnt9du4rlBNvRxQVxvQimrpBEaSRI
beSNhWDlYs3Rn3Ba41ucoV2lE2Ej0TPOV8cp91ZFL+qqMukMIegnBUiR1tV70Ig7
OZM+kvYEs7reF+wU2qQn1LjyFe//6BhAd6fH6xXALzC9QEXfHMRs/7ncrpHhJuWm
vBpg31cZsE2IavkC87CCgCFaYU+lhYSfh8TFpG/kPSPk5SlON1E+bA/3vAhbLu5a
upgQB2+hEti0MpMQM/k5BK2bzH4IxToi5Imq8BKuc0QZIpt/8S0+ssacwTh8qm3Y
l/zDLpsvK44SdNaL0anm2RLiHJS8R1NDx4F1AgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUnclZxKK8TsKuR7OD9kE3B2V2IJcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbmNsWnhLSzhUc0t1UjdPRDlrRTNC
MlYySUpjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAXqSMA0G
CSqGSIb3DQEBCwUAA4IBAQAgwytfWwv74CifbKa6rluZH6COhQ1R29SbAFxelcyG
HYFN8Pf+j5ROHtisvezZ64oKVvkYACOAY1pIJ8AcJguDGljNfLVxuyQg0IJKjMUa
5YZN70kC8ZxO8scpXGpDsuZX4jhv9GR+1IjSkaMuwGGwQNIcT6VS/Vk+DJsF8Ltx
7OEAGJYULBd/A00Cq/IRoBbkQD9hPDJLk1yh/hK8reXmt6ER26gr1/l7MUxvZ74z
OdYU8vIf2zmTr5hRTSp3XI5gXqxgN1/iaLgOUHJ5yK41HKBnxveB5M/sna87xS1a
UWNnVW8WGHGUcDBhcFtsjF2SOimd422n3piTmdb4yYJQ
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:32:17 2025 by rpki-client