Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/CiLL0O7f7UaTzhiTa5DglFYvZqU.roa
File: CiLL0O7f7UaTzhiTa5DglFYvZqU.roa (raw, json)
Hash identifier: l33R2AwcDC12mH56FVfXNsLUgUxBYVRl8ojzE43fvdY=
Subject key identifier: 0A:22:CB:D0:EE:DF:ED:46:93:CE:18:93:6B:90:E0:94:56:2F:66:A5
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08DD
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CiLL0O7f7UaTzhiTa5DglFYvZqU.roa
Signing time: Tue 29 Sep 2020 09:52:32 +0000
ROA not before: Tue 29 Sep 2020 09:52:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 106.105.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2269 (0x8dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0A22CBD0EEDFED4693CE18936B90E094562F66A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:46:5c:b6:67:78:73:20:57:e2:2f:d6:ee:
bf:c1:3f:e5:5e:6f:40:55:f4:35:64:76:a0:d0:bb:
df:ff:0f:65:ea:2c:a3:a8:21:2d:c6:fd:a1:04:68:
81:74:32:c7:8c:78:d2:c5:76:74:f0:05:c5:b2:a6:
48:e4:26:15:df:aa:01:99:72:d4:3b:73:e4:5e:60:
68:e0:37:5f:e1:83:99:1a:95:f3:6b:70:cc:c3:d4:
ec:a1:50:be:0c:8b:bb:8a:db:bd:b3:ea:a8:1b:75:
09:2d:29:0c:cb:6a:51:ef:db:2a:5b:5a:8b:31:00:
af:7c:12:b8:eb:28:e9:54:4d:d6:3d:7e:cd:20:60:
bb:56:45:3f:dd:b3:01:25:64:7a:98:88:c3:79:0c:
9e:77:cb:15:f5:2d:1e:58:41:75:bb:fb:fe:92:39:
b0:70:16:70:98:ef:c8:4d:81:e8:8e:7f:cc:ca:aa:
14:33:16:56:2c:a1:b0:09:7f:e1:68:c1:eb:c8:8e:
42:57:1b:26:9b:bc:44:1f:a8:54:b5:d1:60:19:a9:
6a:1b:08:5d:7c:d9:8e:f1:10:b4:ab:ee:c8:37:d7:
82:50:10:25:ae:01:94:ea:72:37:fe:e2:0c:69:52:
6e:f5:4e:04:08:13:17:95:d0:48:2e:87:f0:77:db:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:22:CB:D0:EE:DF:ED:46:93:CE:18:93:6B:90:E0:94:56:2F:66:A5
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CiLL0O7f7UaTzhiTa5DglFYvZqU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.80.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:3d:1a:f3:ff:f9:2e:c8:29:d7:5a:3f:3e:42:a1:38:99:ee:
c3:ac:99:dd:97:f8:af:a8:49:e9:38:2d:bf:c3:32:0c:50:0f:
2c:bc:16:84:61:8a:7b:38:4c:9b:68:56:90:dd:04:db:7d:68:
76:d7:6e:1f:a0:b2:5c:db:1e:7c:0b:bb:d5:c5:57:6c:f6:9f:
6c:f2:f7:ee:9f:5d:ec:9d:76:0d:5a:45:89:c6:8f:54:05:d4:
a4:59:95:4f:cb:78:22:a4:8b:48:2a:2c:5f:2c:90:9c:ab:fc:
5e:8d:6a:2b:91:88:b3:8b:48:54:59:0a:fa:cf:86:5e:4f:52:
f3:76:04:8d:c6:19:6b:d6:41:9f:fe:37:da:65:b1:ba:2f:53:
7a:65:e2:d9:83:86:a0:ec:09:be:c9:4c:0d:62:9f:6e:ef:f9:
12:98:ab:ed:0a:a5:b4:c7:03:21:ec:70:ec:17:2a:f5:79:cc:
51:37:cf:dd:f7:54:c7:41:36:d4:68:9d:35:50:2f:41:1c:01:
af:fe:39:ac:d5:30:be:f7:c9:10:ea:07:13:b0:eb:69:51:ac:
0f:ef:12:ac:75:88:b0:f4:2b:9a:94:c1:ef:aa:65:88:73:cc:
9a:04:f8:18:21:8f:98:06:94:f7:4c:7c:8f:9d:83:c4:09:48:
50:2b:b0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org