Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/twnvFY3SaTWCHGQljVEnA0nvc2E.roa
File: twnvFY3SaTWCHGQljVEnA0nvc2E.roa (raw, json)
Hash identifier: XxaoIKFBRagx592KVTFVP+fqsAK3s5Kq7ZVI5UlaNvY=
Subject key identifier: B7:09:EF:15:8D:D2:69:35:82:1C:64:25:8D:51:27:03:49:EF:73:61
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 138D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/twnvFY3SaTWCHGQljVEnA0nvc2E.roa
Signing time: Fri 01 Sep 2023 09:25:08 +0000
ROA not before: Fri 01 Sep 2023 09:25:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131602
IP address blocks: 122.147.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5005 (0x138d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B709EF158DD26935821C64258D51270349EF7361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:ce:c5:e2:ca:51:65:11:4e:aa:cb:0e:d6:
4e:07:71:59:e7:bd:8b:9c:88:4c:ca:6a:16:6b:e0:
bf:e9:a2:e2:7f:98:30:74:8f:4f:d5:18:d8:d3:03:
3b:7a:18:83:af:11:dd:4a:ce:b4:06:fe:2d:45:52:
22:aa:f1:8a:a8:3e:0f:52:52:23:9f:ef:fa:18:8f:
4d:dd:c8:7c:98:ff:30:16:e7:82:b2:ce:d1:fa:21:
9f:8c:4e:bf:2f:36:05:45:83:00:ef:90:63:72:bf:
69:bd:62:e5:d3:55:69:ac:f8:02:9e:ec:b9:84:b7:
81:6f:35:c9:8b:29:6b:2e:78:2f:b9:ec:82:c8:6c:
b6:56:77:83:b5:f1:17:c7:f1:e3:48:e0:5f:57:af:
2f:a2:58:80:ee:86:f1:94:af:e9:32:d4:a6:cf:be:
92:3d:b8:fc:50:a7:9f:d4:95:31:62:47:e1:22:fd:
77:f7:61:4c:99:f5:ad:98:fc:d4:08:52:65:4c:b2:
34:a1:e2:1b:f2:6a:21:9b:3b:f2:81:bc:a0:1b:87:
46:c2:5f:ed:4b:8c:e1:f1:a7:9d:77:ea:d3:39:73:
e1:d9:d6:0e:45:53:a2:5f:3b:a0:a9:21:a6:37:3d:
d4:34:d0:6b:28:06:91:3a:de:d5:f1:27:cf:04:7a:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:09:EF:15:8D:D2:69:35:82:1C:64:25:8D:51:27:03:49:EF:73:61
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/twnvFY3SaTWCHGQljVEnA0nvc2E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.16.0/21
Signature Algorithm: sha256WithRSAEncryption
78:10:8a:6d:a9:a1:9c:98:ea:19:0d:6c:c0:2b:c2:d6:73:ef:
87:cf:0d:6c:96:ac:52:89:a2:34:e5:71:f4:0b:1d:3f:6a:f1:
26:f4:d2:83:b1:e9:0d:52:e7:c4:da:ea:f6:dd:83:db:1a:5c:
5e:16:c8:7d:4a:77:ad:88:99:9f:f8:dd:ae:4a:6a:7a:c1:06:
92:bd:bb:b5:ec:e9:2d:16:70:31:72:e5:c1:5d:17:62:5e:98:
ad:0e:90:d8:c6:62:8a:d9:00:d1:c3:8a:25:f5:c0:99:57:ee:
50:6f:a2:c3:73:af:82:7f:53:53:19:dc:22:64:f2:24:d9:b1:
61:86:d3:ab:f6:99:d1:25:0f:01:d8:e9:d6:ca:03:0a:1e:e9:
4f:23:7a:7e:74:a0:9d:40:82:36:77:e3:44:44:06:62:67:90:
b6:f4:64:17:cc:04:85:a6:a4:84:68:a2:be:60:01:71:6f:c0:
7d:25:45:93:47:11:18:ec:27:e0:72:89:fb:52:90:6f:2a:b7:
13:af:57:10:55:91:d0:a2:4d:b0:8e:71:e2:14:54:a1:f4:11:
50:71:ec:de:5a:fc:3d:42:92:01:26:ee:ee:c2:89:e1:db:80:
77:79:73:f2:95:23:df:17:35:ae:b3:70:89:3a:84:e1:80:d6:
a2:c8:9e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:54 2025 by rpki-client