Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BX07UtYeT7juUzVGDcPSkAWRdI0.roa
File: BX07UtYeT7juUzVGDcPSkAWRdI0.roa (raw, json)
Hash identifier: 26d52x2sV8dbvVB5XgRxkMOEtuBZbuLH+7+DwXTTuMs=
Subject key identifier: 05:7D:3B:52:D6:1E:4F:B8:EE:53:35:46:0D:C3:D2:90:05:91:74:8D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 090E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BX07UtYeT7juUzVGDcPSkAWRdI0.roa
Signing time: Tue 29 Sep 2020 09:52:45 +0000
ROA not before: Tue 29 Sep 2020 09:52:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 106.105.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2318 (0x90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=057D3B52D61E4FB8EE5335460DC3D2900591748D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:bc:e9:de:4c:ce:4c:43:5e:b9:57:e0:2a:
55:78:5c:d0:f8:aa:34:01:70:be:40:cf:1d:5a:a7:
09:b0:b7:73:1a:a0:02:7c:f0:5d:41:77:e1:0e:04:
83:b2:2a:85:ad:d9:57:01:88:43:d7:9b:fd:e0:50:
da:39:33:5b:46:78:b8:f4:44:79:e5:d3:ca:6b:5c:
3d:e2:a5:f3:d7:df:76:92:63:08:bc:32:a3:ad:82:
f3:ff:83:3a:91:48:20:6b:8e:58:26:94:f8:c8:88:
e0:79:2d:dc:a5:15:38:27:01:43:8c:3d:7f:b4:d8:
11:6b:92:d8:65:7e:a2:b6:ec:6a:43:f8:c1:c6:3c:
45:28:ee:46:db:93:ed:e9:fa:32:93:b7:af:50:75:
0c:b2:6b:ca:02:2a:40:b9:b1:44:cb:ae:ef:cc:a3:
e1:1b:c9:52:49:98:52:8c:f2:f3:27:74:da:8c:e8:
e7:3c:0c:1e:68:48:92:cc:22:3a:fa:74:11:61:5f:
9a:bd:99:5e:1d:74:d4:68:88:ac:85:c9:1d:03:bb:
89:80:45:1f:5e:16:71:c1:e3:b5:ef:4c:cc:74:08:
70:88:7d:91:bc:55:cd:a9:62:79:bd:65:b0:4e:b6:
87:06:43:ca:62:af:94:6d:96:7c:9e:5b:35:f4:52:
17:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7D:3B:52:D6:1E:4F:B8:EE:53:35:46:0D:C3:D2:90:05:91:74:8D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BX07UtYeT7juUzVGDcPSkAWRdI0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.164.0/22
Signature Algorithm: sha256WithRSAEncryption
24:b8:1e:e5:6f:0d:a8:96:6e:7d:cd:4b:ca:8c:a0:48:fc:f0:
60:eb:9a:52:a3:de:03:6e:79:7e:24:1a:52:de:9b:9e:97:7f:
3d:18:ff:7d:73:1a:e2:08:e8:a1:dd:cb:f3:bb:89:42:86:b5:
91:1a:8e:fe:70:f1:21:bf:d9:e2:4c:70:42:2d:6d:e9:e5:77:
b0:08:59:64:7c:0c:53:fe:4c:f7:e9:84:56:79:86:f0:8f:80:
1d:e9:db:fe:19:73:c6:f7:22:12:68:0a:3a:9e:6b:bd:d0:50:
e6:80:93:44:24:5b:92:5d:13:48:d8:53:95:be:3f:23:ce:1c:
37:08:8c:10:b4:53:81:9b:96:32:7f:f5:aa:64:e7:83:97:49:
65:a9:b8:0f:8a:92:c5:4c:e0:92:0f:83:63:24:a1:10:e2:bd:
31:36:67:c8:64:a7:d8:58:a9:9e:9f:14:fd:87:6e:16:15:95:
f3:bb:8f:4d:30:5f:00:5c:79:1d:64:a3:77:ad:a7:ae:4a:32:
c7:9a:c9:bf:b7:0b:e2:d3:0a:96:d6:83:a4:26:21:84:16:70:
df:21:15:11:89:f8:1b:2b:93:9b:e9:01:ce:3c:22:1c:a3:ea:
4c:d6:71:6f:4b:99:f7:15:a5:c3:32:e8:3b:2e:be:6c:f0:fe:
b1:42:b6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org