Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ChuIXceJ4sY1tfuSfTfodUR2VWc.roa
File: ChuIXceJ4sY1tfuSfTfodUR2VWc.roa (raw, json)
Hash identifier: BnWZWPZPA8tQuNZXY52I7B4TTOgwmtPLbflQucyvN6w=
Subject key identifier: 0A:1B:88:5D:C7:89:E2:C6:35:B5:FB:92:7D:37:E8:75:44:76:55:67
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0D05
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ChuIXceJ4sY1tfuSfTfodUR2VWc.roa
Signing time: Sun 07 Feb 2021 11:47:53 +0000
ROA not before: Sun 07 Feb 2021 11:47:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 123.205.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3333 (0xd05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:47:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0A1B885DC789E2C635B5FB927D37E87544765567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:d3:47:0f:3c:d7:df:36:08:be:a0:5c:ec:
c2:71:b7:33:08:91:10:9d:56:d9:ef:9f:73:e5:ac:
c9:d5:de:ed:c6:da:ff:98:c0:3c:f0:f7:65:27:de:
f7:27:b5:9d:d1:9d:4b:e1:2c:9a:95:2d:ac:81:63:
53:41:67:96:b5:e3:18:02:f1:de:72:f3:44:6f:1e:
da:87:79:1d:8b:98:84:15:5f:92:24:d4:5b:02:70:
bb:14:2e:6b:b5:3e:15:99:de:31:e5:04:f3:b9:4f:
7e:01:7b:29:2d:7a:18:f0:24:71:2a:38:e7:d8:51:
38:7c:eb:51:26:65:fb:68:48:c5:ec:3d:1e:64:53:
9c:36:86:d3:e5:2d:e7:ba:30:4e:54:35:45:ff:9e:
c8:f6:fa:10:4e:41:d6:07:0b:eb:a0:0b:64:7a:2f:
24:08:6d:8b:e3:26:98:95:39:c0:c3:1e:66:a7:33:
73:f1:a0:b9:7d:f7:54:9e:e7:6b:3b:38:10:91:8d:
f6:17:13:ea:8b:78:2e:f0:7b:c3:44:b0:c7:67:6b:
27:ed:a8:77:48:bc:43:ed:b4:b2:28:a4:24:af:21:
f7:84:0d:f4:5b:0e:2b:c9:0a:0d:4d:0d:57:57:8c:
63:65:13:3c:b5:d4:16:91:bb:3b:f5:56:11:e9:8b:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1B:88:5D:C7:89:E2:C6:35:B5:FB:92:7D:37:E8:75:44:76:55:67
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ChuIXceJ4sY1tfuSfTfodUR2VWc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:72:b9:d1:36:1c:be:bb:ba:3a:d3:68:c6:1b:58:41:a0:1f:
17:73:3f:bc:5a:df:70:84:d8:26:a1:11:2f:24:c9:a7:e4:1a:
77:af:bf:24:8b:88:d1:46:b0:e6:8d:ef:50:c9:9b:53:ea:64:
1e:91:1e:1f:ee:2a:6b:7e:7a:5e:cd:87:f5:77:1f:d9:92:e6:
3f:71:a6:f6:ec:b9:fa:48:03:b3:cc:89:55:ea:5a:97:37:5b:
39:9f:69:7a:20:0c:1d:f4:07:71:31:e4:b3:e4:eb:56:ef:e8:
ac:4b:e1:5c:ff:5c:29:13:6d:cc:59:e2:e8:da:07:10:9c:83:
69:de:84:63:bd:00:50:e7:04:8d:ec:0b:72:6e:38:05:e6:7e:
51:48:3c:94:57:7e:16:5e:aa:b2:a3:8d:c1:06:19:f8:f3:c7:
5e:67:26:c9:82:6d:d8:a9:8c:83:9c:54:2b:93:84:8f:51:44:
cb:98:69:65:be:2d:89:4a:d2:c2:cb:42:a7:2e:f1:6d:44:85:
09:f5:fc:4d:15:e1:36:d8:ed:91:50:9a:d8:9a:99:3f:c7:c9:
fb:34:14:b8:17:bd:a8:e4:b1:0b:15:80:47:f7:ee:97:e1:9a:
36:62:1c:5d:1e:78:3e:1f:ac:cc:a1:7c:1a:57:d3:87:57:2f:
9a:62:2b:0c
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcx
MTQ3NTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDBBMUI4ODVEQzc4OUUy
QzYzNUI1RkI5MjdEMzdFODc1NDQ3NjU1NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYANNHDzzX3zYIvqBc7MJxtzMIkRCdVtnvn3PlrMnV3u3G2v+Y
wDzw92Un3vcntZ3RnUvhLJqVLayBY1NBZ5a14xgC8d5y80RvHtqHeR2LmIQVX5Ik
1FsCcLsULmu1PhWZ3jHlBPO5T34BeyktehjwJHEqOOfYUTh861EmZftoSMXsPR5k
U5w2htPlLee6ME5UNUX/nsj2+hBOQdYHC+ugC2R6LyQIbYvjJpiVOcDDHmanM3Px
oLl991Se52s7OBCRjfYXE+qLeC7we8NEsMdnayftqHdIvEPttLIopCSvIfeEDfRb
DivJCg1NDVdXjGNlEzy11BaRuzv1VhHpi+v7AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUChuIXceJ4sY1tfuSfTfodUR2VWcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQ2h1SVhjZUo0c1kxdGZ1U2ZUZm9k
VVIyVldjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHvNOjAN
BgkqhkiG9w0BAQsFAAOCAQEAuHK50TYcvru6OtNoxhtYQaAfF3M/vFrfcITYJqER
LyTJp+Qad6+/JIuI0Uaw5o3vUMmbU+pkHpEeH+4qa356Xs2H9Xcf2ZLmP3Gm9uy5
+kgDs8yJVepalzdbOZ9peiAMHfQHcTHks+TrVu/orEvhXP9cKRNtzFni6NoHEJyD
ad6EY70AUOcEjewLcm44BeZ+UUg8lFd+Fl6qsqONwQYZ+PPHXmcmyYJt2KmMg5xU
K5OEj1FEy5hpZb4tiUrSwstCpy7xbUSFCfX8TRXhNtjtkVCa2JqZP8fJ+zQUuBe9
qOSxCxWAR/ful+GaNmIcXR54Ph+szKF8GlfTh1cvmmIrDA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org