Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Exc0k34VmAQghHfGIAX4Lk-sg_Q.roa
File: Exc0k34VmAQghHfGIAX4Lk-sg_Q.roa (raw, json)
Hash identifier: Q467SzPj6YxNHN+NDu73WqXyIJiXn0QmUY4/29PzXyI=
Subject key identifier: 13:17:34:93:7E:15:98:04:20:84:77:C6:20:05:F8:2E:4F:AC:83:F4
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0B75
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Exc0k34VmAQghHfGIAX4Lk-sg_Q.roa
Signing time: Sun 07 Feb 2021 06:19:29 +0000
ROA not before: Sun 07 Feb 2021 06:19:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 122.146.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2933 (0xb75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:19:29 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=131734937E159804208477C62005F82E4FAC83F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:08:60:e0:99:3c:bb:a6:f0:e3:06:84:e2:
ce:13:b3:c8:ff:8f:e5:b6:ec:95:95:01:89:a6:c4:
e3:27:53:38:cb:5b:fd:6b:ec:a5:23:07:2e:7b:07:
77:d2:ee:05:01:d9:b7:86:da:bc:c9:bd:c3:34:90:
cb:56:68:f6:cd:6c:a1:8f:35:97:8e:75:83:94:dc:
7c:3b:e4:e5:f9:ae:5b:3b:23:08:67:bd:4d:66:bf:
e3:b2:2b:31:89:21:54:45:4d:65:87:5c:96:92:d2:
44:60:e7:45:3c:a4:3a:5a:59:2d:64:6c:b2:29:08:
d2:17:ec:50:6e:05:52:53:68:ef:5d:70:40:b8:aa:
68:90:e5:6c:3d:16:85:01:de:5c:20:c3:e4:a6:ce:
09:35:7e:53:09:ed:a9:79:fa:36:94:ef:52:1e:78:
45:a1:8a:ce:1a:c2:f6:03:5d:f0:fd:f5:64:7e:04:
13:6f:7d:16:9d:b0:e3:05:ae:a0:6d:45:ad:55:d3:
a8:f7:18:03:21:57:1e:6a:7a:69:2a:cb:fd:27:5d:
7e:fa:1f:6e:cb:1d:20:f1:0f:67:58:5e:c1:1f:a5:
69:76:f0:da:72:f9:ef:c3:93:89:bd:4e:2c:61:c2:
35:1e:f8:d1:16:24:c0:e1:43:a4:ad:f7:3a:9d:1d:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:17:34:93:7E:15:98:04:20:84:77:C6:20:05:F8:2E:4F:AC:83:F4
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Exc0k34VmAQghHfGIAX4Lk-sg_Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.0.0/15
Signature Algorithm: sha256WithRSAEncryption
48:58:96:4f:7c:6e:5d:fa:b6:91:2b:12:e0:dd:70:45:2c:1e:
8c:8b:e2:a3:b1:55:f3:e1:97:bf:99:37:41:70:75:7b:fd:82:
b3:a9:51:05:e9:4a:39:ba:16:8e:d5:d8:44:a3:00:28:59:e8:
77:cd:45:bf:72:05:49:42:0f:04:d8:56:71:d4:bb:65:a8:20:
b2:ca:a4:d3:73:be:9b:8e:8a:38:81:d6:5a:a5:2f:b1:3f:77:
46:20:c4:ff:12:f3:9b:fa:0d:ef:0e:38:0f:46:e7:15:a8:ac:
2a:06:6c:72:b6:f7:11:85:47:96:a2:f1:bc:1b:56:58:cb:0e:
ed:e1:fa:c0:82:6f:ee:91:af:a8:06:a5:6c:7b:79:80:ef:0f:
c1:ad:a4:8d:12:5e:7e:f7:d8:a9:f0:3c:d7:c2:7b:54:4a:9c:
d8:57:bf:9a:93:d3:ab:0e:32:8c:3d:55:e4:bc:00:3d:39:1f:
4c:95:2f:45:d3:2a:de:35:2d:e8:1f:bb:8a:0a:28:a6:91:c6:
12:52:80:79:9c:03:56:61:94:4a:f5:06:88:4e:29:9a:14:f9:
f1:07:95:8e:c5:cc:9d:6d:fb:95:9a:e2:03:67:23:f1:d4:c1:
a6:fb:6e:10:ed:58:02:65:e6:a0:cb:c5:c5:72:66:22:7e:e5:
e3:d8:47:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org