Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Eouk-TtYBFL12IskCi5MqKhEJjc.roa
File: Eouk-TtYBFL12IskCi5MqKhEJjc.roa (raw, json)
Hash identifier: i0fUViNj4f72IjGo/STDveKP2KfrEdYBWlG+HezNyBw=
Subject key identifier: 12:8B:A4:F9:3B:58:04:52:F5:D8:8B:24:0A:2E:4C:A8:A8:44:26:37
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E57
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Eouk-TtYBFL12IskCi5MqKhEJjc.roa
Signing time: Wed 29 Sep 2021 02:43:28 +0000
ROA not before: Wed 29 Sep 2021 02:43:28 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 220.229.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3671 (0xe57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:28 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=128BA4F93B580452F5D88B240A2E4CA8A8442637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:f5:d5:64:c8:cc:43:f3:fd:34:69:54:3c:
3a:96:76:5d:89:7d:07:42:3d:ee:34:1d:ef:a3:ae:
79:93:a8:78:27:22:74:00:3a:c3:fd:86:c4:26:cf:
28:54:62:ad:70:d9:5e:78:eb:d9:ca:c7:14:44:22:
89:28:34:80:44:c1:34:03:80:be:c6:24:cc:ab:32:
c9:3b:1c:6a:80:1a:f3:48:37:27:b9:0f:7f:a4:c5:
e2:b0:1c:37:23:2a:7c:b2:a8:a7:69:b9:cd:1c:66:
83:b0:98:1e:25:6b:62:4c:e3:48:4e:0e:9e:fe:5c:
1c:ab:b1:7f:d2:e3:69:0b:32:fc:ca:48:e7:ff:b1:
3a:97:f4:0b:78:8b:30:97:c2:f4:20:8b:a0:16:4f:
de:30:f4:fd:e7:8e:92:ab:f3:9e:80:49:75:13:35:
dd:b3:c2:d8:62:6c:2c:59:62:50:4e:48:70:b8:fa:
14:b9:a6:5d:9e:79:0f:80:7c:f5:85:a7:64:9b:07:
f4:ea:eb:14:0f:2a:d6:27:e7:c2:76:a0:c4:89:b0:
ef:1a:67:41:ce:4f:52:e4:98:99:1e:65:a0:d4:68:
4f:f6:6d:d5:44:45:b1:5d:83:53:47:56:e0:d3:f7:
96:f5:0f:4c:94:75:8e:fa:d7:21:b6:78:7a:ea:54:
fa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8B:A4:F9:3B:58:04:52:F5:D8:8B:24:0A:2E:4C:A8:A8:44:26:37
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Eouk-TtYBFL12IskCi5MqKhEJjc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.0.0/18
Signature Algorithm: sha256WithRSAEncryption
01:b5:09:f4:d2:d6:67:af:db:33:20:a5:66:c9:5c:ac:5a:01:
bf:4f:a6:f1:bf:01:55:ec:04:60:03:83:2e:f0:ef:c8:70:c0:
06:76:6d:6e:f7:a8:4e:38:63:bb:83:a6:75:60:27:6d:a9:f2:
0e:2d:47:32:f9:75:81:3d:7b:dc:60:c7:70:25:7c:a1:5c:71:
74:0d:4b:b3:79:48:fe:0c:b8:96:1d:04:5f:52:3d:0b:56:ac:
ea:b2:44:23:5a:82:02:2b:9b:a2:95:6f:48:17:b1:3c:51:a6:
a4:42:a3:7b:7b:4d:a4:8e:14:65:a5:00:ff:60:e1:d9:dc:96:
6e:b9:ae:ad:d6:ac:08:7b:87:df:c3:28:f4:d6:3c:a9:bf:02:
e8:33:a3:55:f3:f4:f2:86:2b:fd:5f:eb:af:6b:c7:33:7e:99:
ae:c9:51:27:83:fc:87:8f:21:9b:bb:7d:da:b1:9f:65:92:4b:
62:b9:8d:42:2a:99:1d:41:92:7e:d4:3c:b3:6f:a6:80:56:ff:
86:77:8a:1e:08:c6:43:18:92:b6:5a:3f:ce:bc:fe:38:29:eb:
4d:00:0f:35:78:9d:fa:02:5b:72:f3:54:4b:95:fd:ce:31:97:
05:50:e4:5e:e8:0e:8e:d9:f3:1d:00:6b:9c:37:fc:75:5a:f5:
06:7b:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org