Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-sEE8louBRLZNCllxXKgluQ14JY.roa
File: -sEE8louBRLZNCllxXKgluQ14JY.roa (raw, json)
Hash identifier: ImQF8uG0KyRl1kly9NARvJFxqfOCMEPkVAP9o8iMVbc=
Subject key identifier: FA:C1:04:F2:5A:2E:05:12:D9:34:29:65:C5:72:A0:96:E4:35:E0:96
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0CA5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-sEE8louBRLZNCllxXKgluQ14JY.roa
Signing time: Sun 07 Feb 2021 11:44:22 +0000
ROA not before: Sun 07 Feb 2021 11:44:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 123.205.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3237 (0xca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:44:22 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FAC104F25A2E0512D9342965C572A096E435E096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ee:c1:5b:10:5e:95:c2:05:4e:37:16:61:40:
c7:cb:58:18:a7:d6:a4:99:34:2f:d9:85:87:26:d0:
1e:84:f4:47:37:06:5a:56:32:f9:07:c8:13:f7:c8:
b6:d3:0c:e3:5b:21:6c:65:fd:8b:ab:10:cf:c6:6e:
34:ab:0f:36:a0:74:63:2e:33:96:bc:c1:f7:e5:e9:
3d:f5:04:02:50:76:fd:35:c6:ca:6e:84:40:b9:a9:
06:db:37:66:46:5a:95:7f:ce:06:b1:a9:4e:bc:48:
54:82:eb:ce:f6:10:25:cc:03:33:a8:26:62:07:0a:
57:68:df:7b:76:c7:14:6d:f6:09:d9:86:8a:98:89:
ff:0a:d4:31:5e:3e:71:a1:e9:79:8d:bb:4c:be:88:
74:5c:34:f7:67:39:af:9e:5e:45:cc:14:53:a8:72:
21:ab:25:88:a9:6c:46:26:b6:50:26:00:2f:48:8e:
84:42:af:df:bd:49:9b:2f:1c:d6:64:77:de:0d:e4:
8e:74:f8:c9:96:ec:e5:ba:e9:14:58:d0:5a:08:c7:
dd:1f:a5:a7:d0:ba:b5:4a:84:e7:8b:89:5d:43:ba:
9e:38:53:13:72:8b:86:7e:78:fd:e0:87:f8:6b:09:
a7:a2:97:99:7c:6f:21:27:03:91:d2:c3:a3:98:60:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C1:04:F2:5A:2E:05:12:D9:34:29:65:C5:72:A0:96:E4:35:E0:96
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-sEE8louBRLZNCllxXKgluQ14JY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.0.0/17
Signature Algorithm: sha256WithRSAEncryption
1a:7f:ea:06:3b:15:04:d0:c0:c7:b3:53:85:17:e5:85:0d:c2:
71:22:50:46:b5:62:5b:af:57:c9:04:85:a0:e9:d4:fb:62:87:
87:4a:ce:5f:ff:76:60:75:7f:ab:3f:b2:df:2d:f5:53:89:fa:
29:76:9e:a4:7a:70:f4:c9:2b:34:71:69:70:c4:29:04:b3:d9:
63:96:56:a6:17:77:22:85:4f:bd:26:62:3e:6b:fe:0a:e3:d0:
51:02:c9:47:cb:62:db:55:40:7d:76:9a:fc:ea:02:f1:18:fb:
26:7e:63:19:e5:a4:e2:df:cf:e9:89:6d:11:50:34:de:92:4f:
77:03:81:ac:df:2f:d8:3e:8f:62:d1:6e:69:78:c1:b5:df:9a:
19:a1:b5:63:c7:8f:37:79:88:6e:c4:96:bc:e2:a3:e8:26:37:
bb:67:b3:2d:b5:cb:1d:50:dd:68:48:3b:06:25:92:b8:3c:d8:
ba:88:b1:a7:4b:f4:c3:c2:c9:3d:4c:d1:d5:5e:76:c1:6a:34:
64:cf:af:56:0b:e6:d2:e8:d0:da:2c:e9:5a:07:13:7a:04:73:
dc:6a:49:53:28:7e:63:88:5f:af:db:86:52:fc:7e:f3:05:26:
e5:d7:7c:53:59:03:6f:db:18:2a:e9:1d:17:63:65:f6:d4:39:
0a:99:12:a2
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcx
MTQ0MjJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZBQzEwNEYyNUEyRTA1
MTJEOTM0Mjk2NUM1NzJBMDk2RTQzNUUwOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQ7sFbEF6VwgVONxZhQMfLWBin1qSZNC/ZhYcm0B6E9Ec3BlpW
MvkHyBP3yLbTDONbIWxl/YurEM/GbjSrDzagdGMuM5a8wffl6T31BAJQdv01xspu
hEC5qQbbN2ZGWpV/zgaxqU68SFSC6872ECXMAzOoJmIHCldo33t2xxRt9gnZhoqY
if8K1DFePnGh6XmNu0y+iHRcNPdnOa+eXkXMFFOociGrJYipbEYmtlAmAC9IjoRC
r9+9SZsvHNZkd94N5I50+MmW7OW66RRY0FoIx90fpafQurVKhOeLiV1Dup44UxNy
i4Z+eP3gh/hrCaeil5l8byEnA5HSw6OYYHh9AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU+sEE8louBRLZNCllxXKgluQ14JYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvLXNFRThsb3VCUkxaTkNsbHhYS2ds
dVExNEpZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3vNADAN
BgkqhkiG9w0BAQsFAAOCAQEAGn/qBjsVBNDAx7NThRflhQ3CcSJQRrViW69XyQSF
oOnU+2KHh0rOX/92YHV/qz+y3y31U4n6KXaepHpw9MkrNHFpcMQpBLPZY5ZWphd3
IoVPvSZiPmv+CuPQUQLJR8ti21VAfXaa/OoC8Rj7Jn5jGeWk4t/P6YltEVA03pJP
dwOBrN8v2D6PYtFuaXjBtd+aGaG1Y8ePN3mIbsSWvOKj6CY3u2ezLbXLHVDdaEg7
BiWSuDzYuoixp0v0w8LJPUzR1V52wWo0ZM+vVgvm0ujQ2izpWgcTegRz3GpJUyh+
Y4hfr9uGUvx+8wUm5dd8U1kDb9sYKukdF2Nl9tQ5CpkSog==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:57 2023 by rpki-client on console-ams.rpki-client.org