Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/EiDCKr6AL-FDwKW3h33yzvlxnAc.roa
File: EiDCKr6AL-FDwKW3h33yzvlxnAc.roa (raw, json)
Hash identifier: EKUloE1z+8YGJkc37wPQAvH+aAZGY1FsJKCa0SUntfo=
Subject key identifier: 12:20:C2:2A:BE:80:2F:E1:43:C0:A5:B7:87:7D:F2:CE:F9:71:9C:07
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C1B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/EiDCKr6AL-FDwKW3h33yzvlxnAc.roa
Signing time: Sun 07 Feb 2021 07:02:36 +0000
ROA not before: Sun 07 Feb 2021 07:02:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 106.107.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3099 (0xc1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 07:02:36 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1220C22ABE802FE143C0A5B7877DF2CEF9719C07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:23:87:05:30:51:88:36:69:10:85:64:9b:
ca:58:ba:23:6a:6f:e0:2b:fb:24:bd:1d:13:25:f2:
a2:d2:90:85:32:3f:c6:d8:04:b2:41:1f:e3:df:3d:
c7:d1:c0:76:03:c3:7c:77:86:d6:45:26:e4:7e:70:
ba:0a:cc:e1:aa:19:a9:62:ac:9d:37:92:80:18:64:
15:b6:8e:58:b8:5d:48:e5:88:f6:2c:1b:e3:b7:05:
c8:38:e9:77:fb:9f:48:a3:d8:3a:23:9c:b4:a7:02:
68:9b:79:f4:85:6a:88:3e:6c:c8:76:1d:00:32:70:
3c:82:49:fc:74:04:b9:8f:54:d5:be:58:8c:2f:05:
0c:32:c5:1d:51:e1:84:41:de:12:4f:5d:c8:0d:f4:
06:59:00:42:55:ed:10:db:ee:63:6d:c2:bd:97:b3:
ca:81:4b:6a:91:43:fc:e2:c5:c1:a6:c2:22:1c:25:
31:b5:0e:7c:44:c0:e9:df:06:6f:c9:d6:eb:ad:b6:
22:89:63:cb:e3:1b:52:7d:5a:14:60:f0:13:dd:25:
4d:52:fc:a9:fc:08:4d:4f:38:27:d6:46:97:95:ee:
9b:00:6e:15:7c:f9:fd:da:aa:fd:05:d0:39:41:a3:
92:ca:02:27:36:a2:c3:67:af:23:29:8b:11:86:7e:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:20:C2:2A:BE:80:2F:E1:43:C0:A5:B7:87:7D:F2:CE:F9:71:9C:07
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/EiDCKr6AL-FDwKW3h33yzvlxnAc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.128.0/17
Signature Algorithm: sha256WithRSAEncryption
99:31:11:51:5e:d7:6c:67:0f:0e:59:c8:1f:22:45:4b:79:58:
90:b6:6c:79:c7:ed:26:99:5c:ad:72:b6:2c:f9:63:4a:db:b2:
51:f9:23:14:5f:b3:1a:7e:dc:29:f7:64:12:eb:22:b5:1f:2d:
ba:38:17:a2:88:17:ce:43:1e:7b:aa:35:98:39:5f:22:89:30:
3f:de:42:05:4a:1e:2b:6d:94:0e:40:27:cb:21:ce:1f:62:66:
c0:4f:a4:22:a3:86:ca:9a:7b:ea:82:39:81:f6:08:84:89:de:
1f:20:43:75:73:db:9b:92:49:a3:f6:fe:08:d9:89:b6:7b:38:
54:cd:a4:4d:3d:c9:ff:f3:6a:e9:ca:27:08:3f:8c:fe:27:9f:
ca:09:66:b0:81:69:9f:bd:37:52:6e:4c:0b:26:0b:b6:83:d2:
d1:f2:00:40:29:dd:fd:dd:93:ee:d2:90:2a:39:53:a6:ba:9d:
84:b5:18:42:4d:af:04:00:3e:d6:9e:3d:f4:11:12:1c:28:2d:
60:6b:c2:34:22:0c:21:b9:b6:9e:d0:ed:61:84:9d:60:11:6e:
09:e6:9c:08:2d:8b:98:45:34:c0:b6:98:64:7d:34:92:a3:c5:
ea:74:a2:10:4f:e1:9d:48:7f:9a:d9:da:fe:6b:7c:f7:3d:83:
a1:fe:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org