Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/AHcRIlXLeeeHBoHAo_a7MhKFbd4.roa
File: AHcRIlXLeeeHBoHAo_a7MhKFbd4.roa (raw, json)
Hash identifier: ws7V3TtsFn71OoD4eIvzVqB+1BWo0wDsyK/uyy7ra3Y=
Subject key identifier: 00:77:11:22:55:CB:79:E7:87:06:81:C0:A3:F6:BB:32:12:85:6D:DE
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08CA
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/AHcRIlXLeeeHBoHAo_a7MhKFbd4.roa
Signing time: Tue 29 Sep 2020 09:52:27 +0000
ROA not before: Tue 29 Sep 2020 09:52:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 175.183.254.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250 (0x8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:27 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0077112255CB79E7870681C0A3F6BB3212856DDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:b8:93:58:83:ad:92:c4:79:e5:cb:94:1b:
8b:c2:56:51:40:ca:81:74:0d:43:8d:5a:92:2d:fb:
3c:d6:6c:dd:91:f3:5c:3e:1a:c8:f0:a6:a0:7e:d8:
c6:3f:bf:f1:89:5e:64:a2:01:7d:fc:f3:87:14:11:
24:2e:af:84:9d:4e:e5:fb:ec:4d:6f:b6:44:21:56:
aa:ec:88:d2:dc:0f:bc:ce:d3:0e:73:e9:ec:cf:26:
45:35:5d:cb:9d:3d:6b:34:31:23:27:b5:89:2d:1b:
2d:c9:2b:37:38:be:58:2e:d7:33:28:23:e7:2d:62:
ea:eb:52:f2:f6:be:cc:96:a8:33:e7:cf:08:da:c6:
21:87:f6:7b:84:84:48:7f:d2:3f:94:87:9f:93:d5:
98:15:a1:08:93:92:96:f9:80:8c:fb:f6:8a:9a:98:
5e:52:5f:3c:12:68:25:07:b6:40:09:1c:00:31:00:
c5:c8:ae:71:cb:e1:90:1f:8c:af:4b:6e:2d:a1:a5:
1b:d3:46:bd:cf:04:f1:46:a9:bd:cc:e5:ff:61:bf:
ee:ef:eb:7b:6c:89:7b:71:ac:91:f2:c1:43:4e:e8:
7d:da:d5:0e:20:28:a5:06:fd:d0:e5:be:c8:f9:19:
49:b7:46:35:87:81:90:2c:0e:eb:95:f1:f4:fb:66:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:77:11:22:55:CB:79:E7:87:06:81:C0:A3:F6:BB:32:12:85:6D:DE
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/AHcRIlXLeeeHBoHAo_a7MhKFbd4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.254.0/23
Signature Algorithm: sha256WithRSAEncryption
57:21:3e:d5:c6:28:05:93:16:a2:2d:55:64:05:62:28:60:77:
69:2c:a3:d8:0b:3a:5b:83:f1:a8:ae:9b:08:58:37:f0:b9:75:
9b:26:09:3a:de:48:34:84:39:4e:e7:7c:94:08:28:a9:f5:2e:
f8:0c:60:79:ef:5f:52:d2:1f:f9:62:5c:34:02:f8:31:72:4b:
05:10:b8:d4:bc:80:fd:c2:24:db:04:7e:80:4b:71:01:0f:76:
d2:1b:03:7b:a3:c7:70:d2:2d:a7:66:fe:f4:ac:08:d7:2e:b5:
09:0f:0d:0d:53:cf:ea:07:af:71:aa:28:f2:78:96:f4:b6:2c:
a4:25:1c:cd:98:3f:92:16:63:9b:c4:1c:0f:cb:a9:12:06:a8:
7a:47:16:5b:48:2b:8d:f7:41:5c:56:8d:fc:81:d4:a7:e4:0f:
24:99:25:f7:6b:b5:d0:48:81:e6:5a:e8:38:a8:50:b8:c5:20:
5a:57:c8:83:f8:e5:b9:d1:6c:17:77:96:3e:d2:ec:8f:87:17:
94:eb:03:93:d8:eb:3b:22:a6:87:ad:da:06:eb:d9:96:ed:ed:
20:6b:2f:d6:bf:fa:3b:94:a9:ca:fb:54:5a:4d:6d:7a:27:d1:
31:70:01:25:50:00:da:b3:be:c4:1e:ee:85:ae:ea:fb:97:bb:
c2:a5:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org