Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/COwbzYl3Z9vNm5rPp8wsmjtrrGg.roa
File: COwbzYl3Z9vNm5rPp8wsmjtrrGg.roa (raw, json)
Hash identifier: vJMCnTlwMwShYlkGWI8pjBkuHirsK2Mk0j2jpVitbZ8=
Subject key identifier: 08:EC:1B:CD:89:77:67:DB:CD:9B:9A:CF:A7:CC:2C:9A:3B:6B:AC:68
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0D23
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/COwbzYl3Z9vNm5rPp8wsmjtrrGg.roa
Signing time: Sun 07 Feb 2021 11:48:33 +0000
ROA not before: Sun 07 Feb 2021 11:48:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 112.105.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3363 (0xd23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:48:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=08EC1BCD897767DBCD9B9ACFA7CC2C9A3B6BAC68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:b4:4d:08:4e:26:48:f6:c6:b1:6d:b7:b7:
b7:9d:ff:f6:4b:bd:46:db:96:1a:05:fb:e9:b4:83:
32:0c:c6:12:03:d6:fd:68:8d:ae:10:92:88:96:5b:
fc:7f:13:e3:28:43:a0:e3:e4:6c:01:3b:e1:e0:64:
ea:80:ac:b7:f6:1b:89:bd:01:38:60:29:81:1a:d2:
26:ce:b6:9d:dc:5f:8f:cd:48:2a:e4:29:52:9d:1f:
6e:cc:fd:ad:f7:45:8a:9d:7e:4f:2f:2e:92:52:d7:
1d:c8:c2:a8:e8:3b:e1:1c:db:b5:1b:dc:9d:96:bb:
ec:f3:0f:b8:21:f7:ab:2a:d2:b2:e5:ad:e8:54:08:
f4:59:ca:79:c7:bc:ab:72:03:ce:ca:c8:cb:8d:56:
7d:ac:78:ad:bc:7a:ad:6c:22:a0:ad:35:c6:9e:cf:
83:7d:d0:d8:0a:9b:7d:a9:88:88:69:f5:03:47:b4:
c5:12:cd:3e:c0:2f:cf:0b:bd:8e:9e:ce:30:5b:b2:
7c:63:f8:57:cd:1a:be:a7:2b:6f:fa:7d:ca:f6:8f:
48:3a:a3:6f:18:d3:04:da:8c:e8:03:f7:2a:08:2d:
f4:9f:61:a9:aa:b5:f8:03:74:3f:06:0e:7a:6f:63:
cb:4d:1d:52:33:c6:3c:41:42:c6:5c:3e:3b:fc:f9:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EC:1B:CD:89:77:67:DB:CD:9B:9A:CF:A7:CC:2C:9A:3B:6B:AC:68
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/COwbzYl3Z9vNm5rPp8wsmjtrrGg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.8.0/24
Signature Algorithm: sha256WithRSAEncryption
82:fa:1d:55:4e:83:97:d9:79:ea:a0:5f:28:2b:3c:f2:04:c9:
23:79:31:65:1e:9d:e6:49:08:2f:c8:27:8b:86:35:c5:fb:94:
99:08:ea:e0:e6:85:f0:a1:ff:6e:02:fa:e5:49:bb:04:cb:1e:
80:30:e0:74:37:a9:1b:cc:5f:70:87:4c:9a:54:d6:8e:d9:25:
eb:be:0a:8c:49:7f:6a:da:26:ad:8d:00:10:a1:85:1c:f8:aa:
3e:5d:fb:94:c0:db:4b:17:54:44:14:03:81:4f:5e:67:6e:aa:
f3:7b:5e:b8:f2:e3:cd:a0:63:7c:41:63:17:73:b4:8f:0b:db:
2b:5f:54:31:09:b7:05:e8:a5:3a:48:bf:db:cb:ad:93:2c:fe:
9b:0c:6b:41:a3:08:a7:13:e4:93:01:77:44:56:73:e6:89:c2:
84:ac:13:b2:c9:d9:fb:b6:70:f0:89:d2:11:32:e0:5e:d3:88:
17:a4:58:b4:eb:1f:bd:7d:e1:45:1a:55:ba:0b:c6:fb:92:20:
cd:86:9e:c9:8b:ce:60:7b:1a:0a:35:45:81:93:95:81:2d:c6:
fb:e8:5d:8b:ac:86:fa:84:3c:a5:a6:68:33:ff:f8:d6:cc:f6:
35:d3:11:6c:17:36:23:2d:e2:2b:81:19:e2:8c:1d:65:f4:d3:
81:11:15:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org