Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/pzedxGfxEQZ9coQ_wwKqH7vUsHE.roa
File: pzedxGfxEQZ9coQ_wwKqH7vUsHE.roa (raw, json)
Hash identifier: 8eODsw1ZXaKL98TZ1gdhFXUBQVIaW06MVxjWtVIFPKo=
Subject key identifier: A7:37:9D:C4:67:F1:11:06:7D:72:84:3F:C3:02:AA:1F:BB:D4:B0:71
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0CD5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pzedxGfxEQZ9coQ_wwKqH7vUsHE.roa
Signing time: Sun 07 Feb 2021 11:45:28 +0000
ROA not before: Sun 07 Feb 2021 11:45:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 122.147.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3285 (0xcd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:45:28 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A7379DC467F111067D72843FC302AA1FBBD4B071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:d2:b6:a7:7c:8e:87:b3:bf:18:e8:9b:e2:
90:79:9c:d2:0d:49:1a:79:da:ff:76:04:bc:4b:0d:
d8:94:8b:6c:2b:95:dd:73:38:e0:b8:9f:87:0c:3b:
a4:8f:51:40:52:c9:a9:91:cb:6d:7f:9f:ec:96:8c:
f8:2c:83:a7:f8:28:de:84:b5:45:71:53:75:62:a3:
9c:ce:23:33:65:46:ba:9e:bd:a3:6a:e4:47:9a:3e:
36:16:07:88:56:c0:ab:4f:a0:4a:eb:ad:70:4f:5f:
cf:5f:c2:45:38:ec:a4:50:f4:5f:cf:eb:73:1d:4b:
18:5b:63:e7:33:96:1f:39:be:3f:9a:68:f8:22:42:
a3:49:18:00:62:5f:8b:03:62:d8:4c:32:6c:7e:da:
40:b5:37:d8:ed:0c:b4:ea:07:2d:69:bb:92:b0:53:
20:6b:9f:eb:c7:27:da:1e:d1:55:06:a2:51:9c:99:
de:e6:25:a6:7b:03:57:7d:fb:75:a8:6b:d2:75:6d:
c4:62:9f:0f:67:bd:2b:b5:8e:77:20:24:d0:d4:b9:
7b:d8:d6:ae:cb:1a:39:69:3c:f9:71:4a:ac:ae:8a:
ad:69:90:10:b1:77:d2:2d:f3:52:cc:e9:76:30:69:
05:d1:d9:39:94:6f:88:a1:a9:03:7a:96:42:47:ee:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:37:9D:C4:67:F1:11:06:7D:72:84:3F:C3:02:AA:1F:BB:D4:B0:71
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pzedxGfxEQZ9coQ_wwKqH7vUsHE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.0.0/20
Signature Algorithm: sha256WithRSAEncryption
90:c7:89:63:1f:83:9d:68:8f:1a:70:a7:21:e3:26:08:3b:69:
12:13:33:5d:b2:b4:4c:43:f2:89:dc:0d:ba:59:25:6a:62:4c:
b8:a8:34:2d:fd:97:a1:6f:a3:40:b2:ec:ab:99:2a:07:57:3b:
8f:b4:16:21:65:ba:03:fa:2d:3a:51:df:c3:3d:39:07:a4:02:
f2:6b:b6:63:79:8d:2f:3b:0c:21:a4:07:c1:66:8d:e0:ff:63:
b8:e7:53:a6:02:09:1d:26:79:6a:88:b6:53:11:fe:04:d8:4d:
fa:40:3b:3d:c8:e0:77:26:59:43:94:0c:ad:9b:d7:d5:1d:1a:
94:2c:99:15:ff:19:39:3d:b6:f0:83:c5:e7:3d:7d:52:16:43:
4c:19:eb:4d:c1:91:dd:45:85:12:23:47:d1:aa:53:44:b5:c7:
d5:35:25:43:8b:49:e4:f1:8e:86:1d:f2:28:89:42:d1:28:57:
e7:48:57:b3:5a:73:75:2e:d3:8a:c2:1d:b1:83:49:f1:2c:71:
66:69:9b:aa:b7:c3:d9:5c:d7:4a:fe:f5:6f:83:22:86:0e:6d:
71:93:29:69:9e:c6:b2:88:b8:16:47:9c:85:dd:0c:bc:3f:d2:
cf:8a:f1:0f:35:4c:8d:ad:69:e5:67:ff:42:09:4b:89:ad:f8:
79:bc:74:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:14:34 2025 by rpki-client