Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/o7tDpt6YagjpL7mLNgL_QZA9ey0.roa
File: o7tDpt6YagjpL7mLNgL_QZA9ey0.roa (raw, json)
Hash identifier: YQAzWKLPepqqWZ9G1TlBqZI8cfXIeDOh2xBwflhr//M=
Subject key identifier: A3:BB:43:A6:DE:98:6A:08:E9:2F:B9:8B:36:02:FF:41:90:3D:7B:2D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0CFD
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/o7tDpt6YagjpL7mLNgL_QZA9ey0.roa
Signing time: Sun 07 Feb 2021 11:47:44 +0000
ROA not before: Sun 07 Feb 2021 11:47:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 123.205.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3325 (0xcfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:47:44 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A3BB43A6DE986A08E92FB98B3602FF41903D7B2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:55:2b:16:16:42:e2:4b:ea:69:2b:be:87:
e0:78:f1:20:85:a9:3d:a2:d2:8e:dd:ed:45:46:71:
5e:b6:35:df:9e:3e:cb:10:a5:9e:08:ab:5c:cf:3a:
08:8c:ce:18:41:9c:78:5a:2b:87:6d:44:75:d0:f8:
dd:4c:89:62:f6:4e:2d:93:b5:d8:bc:ff:b6:1a:ae:
da:e9:57:4b:da:b1:e5:92:bd:09:30:a2:41:ce:ae:
ae:50:27:5f:45:22:e6:e0:6d:e5:bd:54:c0:30:11:
70:cd:a3:71:9a:c2:cd:06:d9:77:66:4d:3e:04:e5:
48:07:bf:d6:aa:ce:04:ab:75:9d:f3:8d:e2:4d:2a:
ca:c6:44:5c:87:ec:1e:c9:f1:4e:21:54:6e:40:f4:
96:50:f4:e1:cc:0c:db:7e:e3:b2:87:40:65:9a:7b:
ee:50:50:94:b9:45:14:73:41:c4:0e:fa:8c:24:b5:
d4:14:aa:d7:6a:0d:70:7f:0e:a4:ef:10:03:1f:ed:
6e:d4:38:f5:1d:1e:45:fd:ce:79:08:92:de:3f:01:
45:d6:cf:36:d2:af:f4:88:1e:e1:2f:b5:76:ac:29:
14:b2:d7:d6:32:df:ee:09:4b:5a:2d:d3:95:0c:0b:
e0:36:fb:10:ab:a5:28:65:cc:49:4d:96:c5:5d:23:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BB:43:A6:DE:98:6A:08:E9:2F:B9:8B:36:02:FF:41:90:3D:7B:2D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/o7tDpt6YagjpL7mLNgL_QZA9ey0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:52:d5:98:4e:77:49:fc:79:19:68:c9:40:5f:c1:d8:db:05:
e2:4e:7f:a0:b3:57:35:a3:a7:7a:56:2f:36:ec:58:f4:5f:38:
0e:b7:aa:af:40:c6:ed:94:d9:e5:aa:ac:ed:dd:33:d2:f7:ef:
75:3a:de:4c:4c:62:fa:45:0d:f3:f5:80:fc:b0:0d:86:9a:6e:
e1:14:cf:92:a3:19:32:42:66:4b:4d:38:b3:ca:03:4b:4d:3c:
fb:fb:78:ae:47:e4:8a:f7:6d:de:b8:19:3f:1d:91:e4:5f:ef:
43:46:a2:46:2b:0f:12:ac:66:3e:f0:28:c9:95:26:93:e0:fa:
5b:e4:9a:02:a2:1f:f6:2d:17:b7:de:7f:f0:b3:03:d1:20:dc:
d3:65:1f:2c:74:03:36:98:b3:f1:1e:98:9b:dc:69:87:de:41:
49:61:3e:da:85:71:34:16:91:cc:e6:fc:87:58:60:fb:ec:c3:
c5:d7:ce:55:f8:1b:64:7b:58:f8:5a:6e:8a:9a:4a:5e:5e:95:
ba:ba:be:9d:14:fc:09:48:76:01:90:1b:24:e3:62:36:d9:14:
c7:0a:96:15:7a:4f:d9:91:05:9b:28:3b:aa:96:90:a1:57:7e:
e6:1f:6d:f4:21:77:ae:4a:a1:e1:8d:24:ea:6a:04:9d:bf:6e:
37:72:a9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:25:29 2025 by rpki-client