Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-6smIoPjM_7bjLjZzbW7dMunJlY.roa
File: -6smIoPjM_7bjLjZzbW7dMunJlY.roa (raw, json)
Hash identifier: p0IWcNrfpg0R4saImzlsABZhGMoWaeaLDMnKBS8OTl4=
Subject key identifier: FB:AB:26:22:83:E3:33:FE:DB:8C:B8:D9:CD:B5:BB:74:CB:A7:26:56
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0D2F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-6smIoPjM_7bjLjZzbW7dMunJlY.roa
Signing time: Sun 07 Feb 2021 11:48:53 +0000
ROA not before: Sun 07 Feb 2021 11:48:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 220.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3375 (0xd2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:48:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FBAB262283E333FEDB8CB8D9CDB5BB74CBA72656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:e8:b0:70:42:ea:f5:41:a6:9a:44:f5:05:
ab:ac:c9:e9:49:e1:35:7d:cb:63:b8:c6:bf:eb:d1:
04:47:1e:20:17:e4:4d:3a:ec:61:87:83:1f:7d:6e:
33:f5:ae:f5:06:65:94:c7:65:62:18:13:54:00:25:
c7:2e:10:c8:59:8e:9b:15:ac:4d:ff:7d:45:a7:63:
27:45:26:58:e0:99:c7:06:2c:38:22:b9:e9:bb:e6:
8d:bd:5b:2c:5c:b5:3c:32:d8:c1:40:e8:bf:12:ac:
19:e3:8e:57:25:e0:de:95:aa:01:16:62:24:2c:b3:
a4:02:be:eb:a3:46:af:43:3d:68:07:cb:b7:a1:63:
d9:42:53:69:a6:ca:5c:4d:56:2e:c2:82:48:d0:18:
cd:17:a7:2c:37:5b:50:ef:7a:25:ff:04:b9:41:f9:
70:f5:78:58:54:07:55:b6:dc:13:a6:24:4f:25:1d:
3e:d4:6d:ab:72:7c:62:96:5c:94:bf:de:1d:1a:bd:
a8:a3:47:70:9a:c2:a8:68:0c:69:e4:6a:70:f2:fd:
d5:53:a1:ee:13:b8:69:a6:ba:a8:37:f9:a0:d0:18:
c3:e0:fb:d8:47:c0:6d:b7:4e:f7:20:ed:71:df:c9:
ac:e2:29:53:c5:95:f1:59:9d:cd:f7:c5:0b:c8:8c:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AB:26:22:83:E3:33:FE:DB:8C:B8:D9:CD:B5:BB:74:CB:A7:26:56
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-6smIoPjM_7bjLjZzbW7dMunJlY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1b:05:4d:52:52:d9:a6:84:6f:52:84:c7:d5:d8:00:39:73:53:
62:7d:dd:34:b6:2a:2d:47:99:55:4a:8e:c5:dd:8d:0c:9d:e1:
6a:63:95:24:9c:a5:c9:61:82:67:6b:df:06:2a:ad:1a:07:7a:
fe:fa:bc:74:58:d8:a6:c4:e3:25:bd:54:86:8e:cb:c2:ff:de:
fe:1c:83:aa:41:a3:73:d8:27:f7:be:28:f0:76:25:04:4e:e0:
ab:a6:02:69:41:97:91:03:dc:29:22:0c:c6:8e:ac:5c:d9:9d:
5f:13:6d:13:32:94:41:75:b1:fc:db:9c:7e:6b:4c:7e:f6:03:
e8:a6:5d:5c:0f:e9:80:69:54:c5:ef:f3:76:15:0d:1b:21:b4:
b5:4c:23:cd:db:8f:3d:20:45:35:39:63:f0:cf:7c:9c:f3:df:
c8:77:07:35:01:7c:7f:b5:f9:2d:8c:0e:a1:7c:f2:bb:a8:29:
d7:36:a7:ce:56:49:80:1e:8b:17:fe:a3:13:9d:6e:a3:ee:c7:
52:a6:e3:91:b3:e5:0f:74:8b:b5:51:e8:b5:5d:f4:9f:27:43:
cd:ac:26:4e:c2:ad:ff:bd:34:c8:1b:c5:5b:27:a9:66:8a:ee:
4b:e2:4a:34:98:fb:05:50:7f:f8:74:2b:e3:9b:74:4a:6b:e5:
7f:e1:14:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:57 2023 by rpki-client on console-ams.rpki-client.org