Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1A6pxg0zraqdcZzLxkR7OXgK5Rg.roa
File: 1A6pxg0zraqdcZzLxkR7OXgK5Rg.roa (raw, json)
Hash identifier: RPKI7J18WmDhLWF7WRBrNRRGv6vosR/6mlTwYI7E0N0=
Subject key identifier: D4:0E:A9:C6:0D:33:AD:AA:9D:71:9C:CB:C6:44:7B:39:78:0A:E5:18
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C2D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1A6pxg0zraqdcZzLxkR7OXgK5Rg.roa
Signing time: Sun 07 Feb 2021 07:06:40 +0000
ROA not before: Sun 07 Feb 2021 07:06:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 112.105.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3117 (0xc2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 07:06:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D40EA9C60D33ADAA9D719CCBC6447B39780AE518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:45:62:ad:37:fa:92:0a:9f:cf:b6:9d:34:
64:6c:8b:96:21:f0:47:e6:c8:68:6d:8f:cb:c0:97:
cc:e0:42:af:f5:ed:e0:37:d8:cf:00:b2:cc:ae:d0:
18:45:1a:a4:13:85:d0:cf:53:d1:54:02:af:2c:e9:
58:d4:ad:4a:77:21:df:e2:27:4c:23:ad:54:a6:aa:
d1:4f:6d:d5:1c:e8:2b:93:d6:47:e5:f5:82:8b:71:
d6:8b:35:00:b8:29:b4:cd:be:66:13:6f:54:1b:04:
a9:bf:6f:8d:19:be:55:26:f3:23:88:27:17:bb:48:
b7:0c:14:e8:01:a3:5c:29:8e:9a:1a:c9:c9:35:2f:
9b:54:8b:6d:53:d0:03:eb:f4:59:06:1f:94:3f:b6:
de:00:27:16:ce:b1:bb:1e:af:2b:4f:1b:b4:3b:04:
3f:0c:17:a4:6d:a9:ad:ad:cf:98:43:b5:51:8e:5b:
32:99:39:c3:ea:cd:83:1d:72:4e:23:88:95:a5:3b:
f1:c1:71:4d:10:97:86:8b:50:f5:9f:15:2d:6e:cf:
0e:60:b9:40:b0:07:32:0c:23:e1:17:ac:53:a0:7f:
ca:a5:63:ef:c4:e2:9f:52:96:72:ca:75:e2:7f:d1:
b7:b0:a1:64:c6:75:9c:07:59:ae:7b:64:bf:11:9d:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0E:A9:C6:0D:33:AD:AA:9D:71:9C:CB:C6:44:7B:39:78:0A:E5:18
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1A6pxg0zraqdcZzLxkR7OXgK5Rg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.56.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:09:38:33:67:89:fd:39:cd:71:a1:3e:92:e1:59:59:2c:ef:
dd:c1:5d:6d:92:44:5f:e8:cb:cd:d8:ed:fa:4b:d3:bb:80:db:
d5:a4:76:0f:3c:9d:ba:53:8c:e9:3c:a4:bd:80:e8:3e:66:d6:
66:3d:f0:69:7b:1f:fd:7f:c3:92:b5:c3:86:ff:d4:4f:71:d0:
d4:84:e1:1b:1c:6a:89:cb:f4:80:ea:f1:2b:05:f4:5b:65:a9:
2c:b8:d6:6b:06:d3:06:3d:62:8c:a6:c5:9b:33:ef:2c:f4:31:
33:fe:79:6e:42:57:57:01:7a:89:72:86:f5:72:50:ce:a2:5d:
c7:b1:a6:ae:b1:58:04:81:ba:29:1d:ef:eb:31:22:8e:ab:c0:
d4:47:7e:c3:8b:96:58:35:4f:63:81:4a:7f:dd:da:29:cb:fe:
e3:35:fd:61:f7:c7:84:fc:18:5b:a8:e9:3b:28:63:d7:73:0e:
3c:a8:ca:b6:6b:00:e7:47:2f:82:65:0c:bb:1d:26:09:39:7e:
29:81:1b:37:95:b8:04:5c:b4:1b:5a:04:ec:7c:8c:f3:5a:84:
36:55:d7:59:f6:56:e0:d6:d9:be:ed:47:30:73:50:e3:00:1f:
6d:1c:2b:27:b7:06:cd:76:e3:4a:fe:48:f3:14:64:bd:94:22:
de:40:c2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-fra.rpki-client.org