Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCHC/6Lo199w3nc9yvrr3xAPAEBXOijk.roa
File: 6Lo199w3nc9yvrr3xAPAEBXOijk.roa (raw, json)
Hash identifier: BEE++abWLVE+ee9qMZQKzelrwGISlPIWOtpXJA9wyYo=
Subject key identifier: E8:BA:35:F7:DC:37:9D:CF:72:BE:BA:F7:C4:03:C0:10:15:CE:8A:39
Certificate issuer: /CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891
Certificate serial: 0779
Authority key identifier: ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/6Lo199w3nc9yvrr3xAPAEBXOijk.roa
Signing time: Tue 29 Sep 2020 10:05:05 +0000
ROA not before: Tue 29 Sep 2020 10:05:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7539
IP address blocks: 211.73.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1913 (0x779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891
Validity
Not Before: Sep 29 10:05:05 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E8BA35F7DC379DCF72BEBAF7C403C01015CE8A39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:83:b2:a6:34:d3:31:99:ad:4b:f5:fb:da:
98:a3:c1:0a:1c:6b:3a:74:71:98:de:8d:d6:ae:80:
cb:b4:c0:09:84:a5:2b:bb:8b:26:88:02:27:25:31:
24:4c:6b:e3:9c:59:51:5a:0a:3f:7d:0f:f5:34:4a:
99:0a:1e:f0:f2:d8:25:8e:e7:7f:84:4a:b9:d9:a3:
2f:11:bd:30:ae:37:c7:e3:2d:02:0f:31:22:76:0e:
2b:fb:ac:d0:a6:94:b5:8d:47:de:61:fe:86:9b:73:
68:bf:cb:ec:81:34:4a:47:92:28:4b:70:05:ff:a4:
ff:de:86:ac:a5:bd:af:b1:d9:a0:6c:49:62:97:16:
3b:37:e4:45:f3:7f:e6:29:9f:de:79:92:6f:0f:6a:
ea:6f:05:94:4a:b0:94:fb:61:d2:03:8f:55:fa:fe:
71:74:f4:9f:b9:85:a5:52:c6:fc:6d:64:6c:f7:09:
93:90:a1:b0:7d:93:45:10:31:3e:5a:93:8a:34:22:
85:8c:45:ef:a0:57:84:ef:21:6f:bf:ae:eb:e2:cc:
71:50:64:74:2f:f2:36:5f:74:42:95:22:c0:52:7f:
dc:60:c4:33:eb:9d:6a:f9:c5:a2:1a:20:f8:da:b7:
af:bb:22:65:54:7e:e1:db:5a:92:4f:cb:a8:b8:9b:
1e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BA:35:F7:DC:37:9D:CF:72:BE:BA:F7:C4:03:C0:10:15:CE:8A:39
X509v3 Authority Key Identifier:
keyid:ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/6Lo199w3nc9yvrr3xAPAEBXOijk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.73.64.0/19
Signature Algorithm: sha256WithRSAEncryption
90:ee:0f:a8:71:0c:26:20:7d:b6:be:bc:1b:2b:b6:06:43:70:
5f:be:09:05:16:2e:3c:73:21:6a:a3:b8:7b:54:55:00:a5:14:
40:cc:34:7a:ab:00:ba:fc:75:66:7c:7d:90:20:fa:13:81:6e:
dd:8f:db:41:f3:f0:1f:60:f8:7c:89:6a:0b:cf:bf:1a:f2:18:
e3:cc:77:c1:6d:a4:8e:f9:3a:a6:8d:be:6f:21:15:aa:25:94:
3e:c0:27:b3:5b:b5:fe:7c:19:98:60:18:98:93:5f:ba:3f:b0:
06:b2:41:f4:3d:eb:92:a8:5c:8e:5a:d2:33:81:91:e2:50:e2:
e3:77:23:65:c3:fc:5d:5e:95:96:be:27:c5:2c:7e:7e:c8:45:
6f:6d:29:19:c8:7b:aa:85:24:a3:02:aa:20:ee:d6:5a:9f:d5:
c9:62:a9:92:b4:37:e0:72:9e:2d:2a:72:69:39:e3:cd:a6:a6:
ce:7b:da:32:98:ab:11:8a:72:8e:e0:25:95:5b:5d:79:3d:90:
9e:6b:8e:84:01:68:05:32:e6:a6:b4:f3:fd:0d:11:7e:8a:a9:
2d:1b:ec:4a:43:a0:84:50:41:02:23:11:6d:db:e6:4d:dc:c7:
2d:80:0c:b5:e7:b7:28:54:b9:62:79:24:44:18:66:cb:b9:cf:
92:d3:58:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org