Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/7Q_uXKRObYFS18RxGbP2KnI3Woo.roa
File: 7Q_uXKRObYFS18RxGbP2KnI3Woo.roa (raw, json)
Hash identifier: 3VljyY0Pj9xi7twcDKbgezAlZJFDcmCQRjNf6tnwPsI=
Subject key identifier: ED:0F:EE:5C:A4:4E:6D:81:52:D7:C4:71:19:B3:F6:2A:72:37:5A:8A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08D6
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7Q_uXKRObYFS18RxGbP2KnI3Woo.roa
Signing time: Tue 29 Sep 2020 09:52:30 +0000
ROA not before: Tue 29 Sep 2020 09:52:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 123.205.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2262 (0x8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:30 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=ED0FEE5CA44E6D8152D7C47119B3F62A72375A8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:bc:79:48:c8:31:ec:07:d4:e8:db:46:46:
82:17:16:a7:ed:6e:d1:c6:39:28:4a:64:ed:99:39:
26:96:0d:65:38:02:70:05:54:1a:94:55:85:7c:75:
cf:d4:85:b9:6e:fc:50:a6:0f:fb:9f:37:e4:3b:3b:
d8:75:2a:dd:3b:5e:6c:8d:05:72:f7:00:99:93:e5:
70:68:99:b4:10:13:db:07:22:b7:86:47:20:78:74:
8f:31:ec:61:a4:de:c2:1e:60:76:59:30:db:5e:36:
a2:a6:08:99:75:f3:6a:c9:aa:53:5b:c4:65:ab:16:
47:53:8a:6b:2b:af:65:ae:da:40:15:9f:45:04:ae:
a3:68:11:3c:1e:7e:1a:b7:98:16:42:bc:29:81:0f:
71:d4:3b:0c:a8:f4:cd:20:2e:52:20:5b:ae:ed:9e:
9c:2c:54:7b:33:89:ad:19:ec:5a:dd:2f:19:6d:e4:
10:c8:dc:c3:14:da:af:d4:4a:99:9c:1a:0d:b8:a3:
b3:6f:e8:17:91:a7:60:48:ea:7e:38:c9:dd:10:f5:
5e:63:29:0e:52:f5:6c:06:1b:d6:b1:d0:45:03:6a:
af:67:e9:bf:a4:cb:93:30:ca:9d:7a:38:0f:27:ed:
8f:5f:b3:e7:77:90:76:54:5e:e1:31:40:6b:fb:88:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0F:EE:5C:A4:4E:6D:81:52:D7:C4:71:19:B3:F6:2A:72:37:5A:8A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7Q_uXKRObYFS18RxGbP2KnI3Woo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.76.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:6a:53:03:4c:6f:99:10:38:5e:a4:c4:4a:d5:df:fb:5d:e9:
47:f0:6b:4d:2b:b1:fd:0e:ba:34:fe:ac:a0:c9:50:32:a2:e3:
34:68:b9:cc:cf:5d:85:e8:67:5e:be:b7:a9:fd:77:2e:9c:fd:
3c:ba:5d:57:69:58:57:29:45:f3:4a:ce:0b:f5:f8:57:4f:6e:
31:4c:e1:e0:2c:44:10:68:8b:18:01:14:45:fa:91:7f:05:53:
86:0c:0b:ac:8d:64:d5:51:a6:50:ae:f1:d3:19:a5:0c:c9:30:
2e:b2:bd:dd:87:e4:4a:b6:1e:1f:08:14:d4:11:59:8b:af:17:
2f:56:d0:7f:23:4b:42:b9:c8:28:32:97:43:a8:9e:90:2c:e7:
f7:bb:74:24:65:72:d5:be:d5:23:e8:90:da:13:15:5d:51:6d:
37:2c:92:72:5e:3b:7f:5c:99:c2:b2:dc:c8:08:94:21:c1:b3:
c9:d3:a4:63:95:f0:2a:7c:9a:97:bb:15:fc:7a:7f:c8:ec:5f:
3d:eb:08:09:e6:54:da:7c:e0:60:a7:ef:14:b9:dc:86:ba:c6:
e4:12:50:a6:81:13:b7:7d:ae:1c:ba:b7:d2:e2:15:06:ac:c4:
82:85:d6:49:6c:ba:d0:1c:a4:37:be:4e:c6:de:63:2a:fa:6f:
b5:b0:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org