Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/nkM9SmEDm7COqJiHcrgqytWp9x8.roa
File: nkM9SmEDm7COqJiHcrgqytWp9x8.roa (raw, json)
Hash identifier: A8elbYYd2DOFDeLh+rdE5vkAq2dgp38rjKXpu0X/dz4=
Subject key identifier: 9E:43:3D:4A:61:03:9B:B0:8E:A8:98:87:72:B8:2A:CA:D5:A9:F7:1F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0853
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/nkM9SmEDm7COqJiHcrgqytWp9x8.roa
Signing time: Tue 29 Sep 2020 09:51:55 +0000
ROA not before: Tue 29 Sep 2020 09:51:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 123.205.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2131 (0x853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:51:55 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9E433D4A61039BB08EA8988772B82ACAD5A9F71F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:58:72:46:69:06:95:0b:b8:14:a1:39:c0:
33:a3:49:3e:4c:ba:e9:79:38:57:8e:d7:45:e6:95:
84:ef:d1:63:42:5c:1f:7f:e3:20:bb:03:f9:cb:57:
24:86:b0:3e:70:fc:fc:f7:e9:ff:62:a3:ff:50:84:
32:39:15:8f:d7:43:81:19:97:9b:a6:d8:f4:58:38:
70:d3:c0:12:df:d5:79:ca:29:99:ef:99:60:5b:ef:
0c:bc:2f:04:c8:fb:8f:f0:fd:e3:56:f5:a7:11:74:
31:86:64:78:45:f3:b0:e7:c7:2c:2c:0e:fb:8d:35:
ec:2b:87:a5:21:95:f8:e5:d8:42:bd:76:b9:74:52:
03:67:af:ff:43:d5:02:c6:3e:bb:4d:f7:dc:f3:31:
d5:24:16:87:ad:99:ea:7f:65:b0:96:0a:7f:7d:7e:
de:f3:38:69:5c:3d:62:67:78:bf:c1:8c:b6:19:3e:
e6:c0:38:73:a0:56:c4:c6:f5:6a:c1:38:93:9e:11:
0e:31:40:1d:30:4e:ac:b8:c9:af:f9:8f:41:63:28:
d0:ca:96:33:b8:50:db:5c:e2:45:1a:75:07:75:06:
1b:d3:ff:ae:31:0d:0e:e6:0e:29:7e:ad:20:52:13:
5b:bd:ee:03:e7:8e:90:d2:ad:a3:b0:89:b9:8c:b1:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:43:3D:4A:61:03:9B:B0:8E:A8:98:87:72:B8:2A:CA:D5:A9:F7:1F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/nkM9SmEDm7COqJiHcrgqytWp9x8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.56.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fd:76:9e:7a:85:16:36:42:69:8f:8d:55:20:95:37:4a:ed:
0f:36:cb:be:69:38:b1:3c:6b:38:dc:91:d3:cc:df:1c:dc:e0:
57:b1:92:fe:d3:00:e5:3e:9c:6b:0b:13:87:42:9d:cd:35:56:
52:e3:ff:9a:93:73:51:c6:b7:cc:96:c0:71:a3:1f:92:c3:34:
d5:ca:2b:5d:53:15:e9:89:0a:44:ca:7a:05:3b:0a:bf:98:12:
03:81:64:92:97:31:40:7e:3d:10:d7:b8:4f:9c:62:d8:87:1f:
c1:21:7d:ce:9c:29:5b:92:a1:9a:05:b7:4a:03:41:dd:ba:8a:
77:27:4d:74:1c:5f:51:55:63:c6:a2:1c:9a:3b:2e:fd:22:8c:
30:cb:f1:45:0d:cb:f9:78:98:39:47:2c:ec:29:8e:69:57:76:
f1:69:ec:5e:fb:25:f4:f5:8e:ad:6f:62:d8:a3:28:5f:57:34:
18:d9:c6:a3:f7:b6:99:31:b7:c2:61:ea:c8:cd:66:49:f3:e2:
95:92:b2:90:19:d5:12:f3:52:3b:17:ca:63:63:41:32:c7:4a:
9c:d7:5e:57:41:54:78:62:45:3a:ce:8c:87:16:4b:15:5b:a0:
02:f3:3c:0c:20:9a:11:6f:d4:13:bd:e8:92:41:96:45:27:ca:
a8:5f:24:2b
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUxNTVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDlFNDMzRDRBNjEwMzlC
QjA4RUE4OTg4NzcyQjgyQUNBRDVBOUY3MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA3VhyRmkGlQu4FKE5wDOjST5Muul5OFeO10XmlYTv0WNCXB9/
4yC7A/nLVySGsD5w/Pz36f9io/9QhDI5FY/XQ4EZl5um2PRYOHDTwBLf1XnKKZnv
mWBb7wy8LwTI+4/w/eNW9acRdDGGZHhF87DnxywsDvuNNewrh6Uhlfjl2EK9drl0
UgNnr/9D1QLGPrtN99zzMdUkFoetmep/ZbCWCn99ft7zOGlcPWJneL/BjLYZPubA
OHOgVsTG9WrBOJOeEQ4xQB0wTqy4ya/5j0FjKNDKljO4UNtc4kUadQd1BhvT/64x
DQ7mDil+rSBSE1u97gPnjpDSraOwibmMsV4DAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUnkM9SmEDm7COqJiHcrgqytWp9x8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbmtNOVNtRURtN0NPcUppSGNyZ3F5
dFdwOXg4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHvNODAN
BgkqhkiG9w0BAQsFAAOCAQEAM/12nnqFFjZCaY+NVSCVN0rtDzbLvmk4sTxrONyR
08zfHNzgV7GS/tMA5T6cawsTh0KdzTVWUuP/mpNzUca3zJbAcaMfksM01corXVMV
6YkKRMp6BTsKv5gSA4FkkpcxQH49ENe4T5xi2IcfwSF9zpwpW5KhmgW3SgNB3bqK
dydNdBxfUVVjxqIcmjsu/SKMMMvxRQ3L+XiYOUcs7CmOaVd28WnsXvsl9PWOrW9i
2KMoX1c0GNnGo/e2mTG3wmHqyM1mSfPilZKykBnVEvNSOxfKY2NBMsdKnNdeV0FU
eGJFOs6MhxZLFVugAvM8DCCaEW/UE73okkGWRSfKqF8kKw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:53 2025 by rpki-client