Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sNoYGo9_k1t0SdEW2V04LfqYHiI.roa
File: sNoYGo9_k1t0SdEW2V04LfqYHiI.roa (raw, json)
Hash identifier: LWocGeQfwe5SC8anmqB9h+urvKMOS7yzVKj0m+1b4JU=
Subject key identifier: B0:DA:18:1A:8F:7F:93:5B:74:49:D1:16:D9:5D:38:2D:FA:98:1E:22
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 12F1
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sNoYGo9_k1t0SdEW2V04LfqYHiI.roa
Signing time: Fri 01 Sep 2023 09:24:17 +0000
ROA not before: Fri 01 Sep 2023 09:24:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 203.73.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4849 (0x12f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B0DA181A8F7F935B7449D116D95D382DFA981E22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:45:15:ac:d0:dd:8f:6e:a0:a9:c5:fd:31:db:
41:a3:0c:9c:d6:2e:1f:2d:f8:04:22:87:ad:0b:16:
cc:2f:ec:ba:35:94:90:85:fd:d2:60:3b:2b:62:c3:
0b:e5:57:cf:b6:82:5d:da:73:82:55:44:3d:8a:49:
ca:e8:65:71:f5:62:01:4b:aa:9d:91:47:8d:8d:2f:
ed:06:b5:d3:0c:80:a2:0b:1a:c8:99:43:48:98:21:
f7:3d:f8:7a:5a:8a:f6:5b:44:ae:47:87:10:50:7f:
c2:52:48:05:fb:2c:cb:2f:21:bf:38:1d:50:04:28:
5d:44:86:1c:dd:03:86:23:9d:f9:28:16:a0:a9:33:
9f:d8:a2:a0:6a:3a:d1:22:49:08:5d:41:de:0b:31:
5c:ea:7b:4b:db:b8:9d:aa:90:31:3f:9d:f4:df:0e:
59:aa:9f:54:e1:d8:9e:b4:2b:a2:e8:84:59:4c:eb:
ae:e1:7f:ee:75:a3:cf:7c:c7:be:d7:42:20:9f:74:
55:2b:6c:a7:d6:f3:57:20:14:94:f1:6b:87:f0:92:
49:9e:2c:24:14:4a:b6:60:09:d0:71:34:ce:1a:35:
81:3c:5f:88:7e:50:70:17:88:47:2e:43:ac:f6:22:
11:fd:70:24:5c:64:d6:fd:83:3e:6d:9e:da:ca:7a:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DA:18:1A:8F:7F:93:5B:74:49:D1:16:D9:5D:38:2D:FA:98:1E:22
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sNoYGo9_k1t0SdEW2V04LfqYHiI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:fe:1c:4b:0d:aa:5b:12:f2:2d:4a:d7:3f:63:e1:79:9c:4e:
60:3b:37:0d:a2:bd:9d:44:f2:43:56:93:39:ab:bc:8d:67:fc:
2b:22:24:10:4c:21:22:7e:08:62:59:2e:1c:72:a8:0f:1b:89:
8f:70:eb:8f:1d:0d:80:98:c3:9a:e0:37:7f:0a:6e:b7:2a:43:
1e:fb:31:0d:fc:2e:0d:43:2d:46:99:d5:8a:28:eb:66:91:08:
a1:60:20:13:47:50:6d:b2:e3:7d:be:a4:c8:a3:98:fc:e5:b5:
c5:21:14:26:e5:ea:9a:4e:f9:be:36:aa:14:3a:bf:4e:59:55:
d5:19:11:87:94:06:0c:9d:2e:be:b3:a4:49:05:f9:30:94:5c:
c0:73:37:ad:af:0c:b7:1c:b6:5c:00:3c:82:75:da:31:d1:3f:
f3:3a:fa:29:54:aa:61:3c:42:b6:fb:b0:f1:1c:11:4f:df:97:
73:ba:9b:33:b3:2f:5a:13:3a:0b:1f:46:ef:d1:c2:a0:54:a9:
a7:32:4a:85:6a:74:63:b1:68:0c:dd:b8:ff:2b:43:c0:2c:1f:
41:25:63:78:c1:83:be:2c:ff:ec:d3:48:8f:95:ee:0c:f7:ca:
4c:53:de:b2:1a:a2:5f:e9:87:ad:30:11:bd:49:9b:77:f1:44:
0d:4c:2d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:01 2025 by rpki-client