Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/FWpRByHQmls80fV57aWMD1Y_zag.roa
File: FWpRByHQmls80fV57aWMD1Y_zag.roa (raw, json)
Hash identifier: pwPN6oTGAL/lOJ5hlAPw1Yu5ItX/nT1VEuBU4MZM5yU=
Subject key identifier: 15:6A:51:07:21:D0:9A:5B:3C:D1:F5:79:ED:A5:8C:0F:56:3F:CD:A8
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0849
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FWpRByHQmls80fV57aWMD1Y_zag.roa
Signing time: Tue 29 Sep 2020 09:51:52 +0000
ROA not before: Tue 29 Sep 2020 09:51:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 113.196.144.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:51:52 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=156A510721D09A5B3CD1F579EDA58C0F563FCDA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:37:33:0d:92:46:5e:a6:c0:82:90:2e:db:
66:6b:24:6a:68:54:03:db:e3:c5:a8:3b:36:42:cd:
91:c3:94:15:7e:08:01:da:d7:4f:f8:3e:59:64:bd:
68:ae:3e:8f:93:56:c5:90:08:7a:41:60:b8:08:d4:
e8:ad:be:ed:bd:59:32:e2:be:50:44:22:ae:7b:0e:
57:43:70:8a:fd:0a:bc:e3:a5:ae:a2:83:82:f7:d1:
b8:2e:7e:39:18:9a:83:98:c8:6f:fb:5a:c1:48:9f:
a9:ad:4e:05:1e:09:e0:3d:fe:06:d8:28:70:d7:ef:
20:85:84:9b:59:53:46:c4:88:98:16:c7:98:d3:d9:
45:d5:e0:5c:fb:a5:aa:f4:0e:ea:47:6b:ef:a4:06:
56:59:f7:47:5d:a4:72:99:d3:e4:e3:33:64:16:dc:
37:82:de:39:e0:94:d1:ef:d5:c6:a5:d2:23:6b:21:
82:cb:a4:1b:eb:05:18:7b:f8:fc:9d:35:8a:a6:af:
a4:bc:b8:88:37:d1:ea:e5:fe:f8:e3:44:b1:39:a9:
9e:75:6b:9c:bc:ea:ac:37:7a:56:12:80:29:6f:cb:
85:9b:c7:5b:15:de:b8:1c:33:42:81:63:f1:7b:6d:
c9:32:c6:79:b8:6c:9e:49:a5:64:b6:8b:fb:e4:e6:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6A:51:07:21:D0:9A:5B:3C:D1:F5:79:ED:A5:8C:0F:56:3F:CD:A8
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FWpRByHQmls80fV57aWMD1Y_zag.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.144.0/21
Signature Algorithm: sha256WithRSAEncryption
71:f7:96:e5:f1:07:81:ed:9d:c3:8a:78:f1:31:55:7d:3e:e7:
7d:e2:38:35:93:4a:b1:c3:c3:f2:0b:43:16:04:f1:45:46:b5:
7c:ab:f4:a0:51:38:e4:f1:f1:54:55:bc:9e:65:19:67:87:c6:
44:08:fd:23:e4:8c:29:bd:46:eb:37:28:26:48:fd:34:3f:6f:
7a:6e:40:a5:ca:9e:6a:dc:fb:fa:67:cb:e3:b9:b7:05:3d:23:
6c:18:10:cd:e1:96:f0:34:b9:42:a3:07:3e:1a:72:ef:7d:9c:
88:b7:85:d4:c9:c8:4d:37:5f:89:b4:67:d5:5e:04:bb:4b:71:
94:b9:da:db:e6:d8:fa:d3:e3:e9:3c:b6:ba:1e:24:fa:8c:d7:
fa:db:38:28:33:e9:c8:f9:ba:f7:07:6f:2d:44:f1:aa:e8:3e:
95:aa:67:5d:e8:c3:80:cd:18:64:93:0f:10:7b:db:46:a5:d9:
ee:8d:27:4a:e8:9f:ba:35:b6:c6:57:8a:0d:a1:68:5f:5a:a4:
92:83:12:e0:7f:33:57:27:35:a5:56:16:ea:35:48:9f:4e:b6:
b4:56:d0:c9:51:69:8c:a4:17:ca:d7:09:f0:28:cc:12:a3:48:
89:2f:a7:e7:54:49:6d:c9:d7:d6:7e:2f:f2:56:c3:2e:e5:30:
33:69:86:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org