Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Cs1s7XeK3RYzWGL-MpJ9xMFp4ZQ.roa
File: Cs1s7XeK3RYzWGL-MpJ9xMFp4ZQ.roa (raw, json)
Hash identifier: A2+qhKu61gTTVRPitAG8feFXq/CwahJYOrExrpJt8lQ=
Subject key identifier: 0A:CD:6C:ED:77:8A:DD:16:33:58:62:FE:32:92:7D:C4:C1:69:E1:94
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C5D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Cs1s7XeK3RYzWGL-MpJ9xMFp4ZQ.roa
Signing time: Sun 07 Feb 2021 11:43:04 +0000
ROA not before: Sun 07 Feb 2021 11:43:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 175.182.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3165 (0xc5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:43:04 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0ACD6CED778ADD16335862FE32927DC4C169E194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:e3:27:67:60:5f:d8:39:93:79:19:9e:bf:
96:02:b4:a4:38:ff:61:8a:88:21:7b:ee:b4:88:37:
16:7b:12:09:aa:22:a3:eb:70:70:24:73:4e:6d:cd:
83:6d:a8:b2:6f:52:b7:64:c7:81:57:c2:05:b7:af:
5d:cf:ff:d2:fd:d0:93:0d:64:57:37:6b:be:6b:9d:
97:5f:e2:5e:62:7d:04:5a:b5:85:d8:e8:18:b5:6a:
b2:fb:c9:b2:db:49:95:81:89:fb:33:36:a9:7e:35:
eb:d1:af:c0:1a:30:17:d6:0a:8b:84:60:49:b3:92:
a4:7b:04:a5:2c:45:a3:fa:f7:b2:64:48:a8:1f:4b:
6b:17:8b:bc:68:a7:5c:20:6d:41:11:27:d5:cb:ca:
99:6b:1b:04:49:88:85:81:05:b2:a6:8f:a1:e0:07:
6f:8e:09:21:9f:d7:c5:e9:5b:ea:66:95:44:9e:c6:
4a:5f:ae:2b:22:20:db:3d:21:34:00:bc:bd:64:e3:
f5:de:ad:f0:45:92:43:ec:32:2d:09:91:a1:c4:8f:
bf:12:75:2c:3b:51:3b:f9:73:10:05:07:84:7b:cd:
7e:72:c2:57:bc:92:c2:bb:91:19:6e:8e:c7:b6:57:
be:b5:a8:b2:c5:16:16:52:8c:e8:0f:90:2b:c1:e8:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CD:6C:ED:77:8A:DD:16:33:58:62:FE:32:92:7D:C4:C1:69:E1:94
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Cs1s7XeK3RYzWGL-MpJ9xMFp4ZQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.182.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:de:c9:44:5f:6a:8a:8d:2e:0b:07:ac:11:fe:a7:0b:c0:3c:
64:f7:02:0f:be:77:7a:2e:b8:a8:f8:da:9e:27:8a:8f:2f:3c:
86:70:8f:71:26:b5:e3:36:46:73:51:38:01:10:9e:2e:c7:40:
e6:9a:5b:77:05:6d:c3:78:33:fa:ee:32:c8:14:4b:42:01:e7:
42:fe:48:dd:97:ed:20:0e:40:a1:d1:08:06:56:b7:5f:30:49:
b1:d6:70:fe:56:9c:c2:78:bb:7f:e2:02:11:67:56:fc:67:50:
12:a9:35:96:9d:a9:38:c0:90:66:74:eb:d1:d6:f4:06:29:5a:
c6:ef:f9:b0:68:af:1c:1d:2d:bc:6b:69:54:84:e6:1b:eb:45:
9d:06:f6:d0:9a:d0:5f:eb:10:45:51:21:ea:3d:11:38:3a:00:
7d:55:f9:6a:90:25:15:c9:1f:27:3f:c5:54:3f:95:1c:68:f8:
4a:c1:a0:b3:cf:66:10:16:0c:9a:f6:ed:ac:1d:53:ea:59:43:
96:0b:57:ec:90:68:b9:22:4e:f1:e1:17:ab:53:78:8e:5b:60:
a3:98:41:ea:2c:c4:ce:be:4f:4c:96:76:be:60:85:30:19:1f:
08:78:b2:d7:83:16:65:fd:7a:f9:1e:40:b7:ae:14:1b:9d:90:
13:be:75:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org