Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/G8Fy0ADkgXAIIEm12sp7G46-Yfw.roa
File: G8Fy0ADkgXAIIEm12sp7G46-Yfw.roa (raw, json)
Hash identifier: xaaNXiafqq4HrelFdsI2c/8vXjw+SqzNMhjaqyZonFk=
Subject key identifier: 1B:C1:72:D0:00:E4:81:70:08:20:49:B5:DA:CA:7B:1B:8E:BE:61:FC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0CFF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/G8Fy0ADkgXAIIEm12sp7G46-Yfw.roa
Signing time: Sun 07 Feb 2021 11:47:46 +0000
ROA not before: Sun 07 Feb 2021 11:47:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 123.205.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3327 (0xcff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:47:46 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1BC172D000E48170082049B5DACA7B1B8EBE61FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:23:ed:f2:a5:81:bb:84:ca:3a:a9:6d:88:78:
3c:34:e6:21:5b:82:c1:bb:2e:b3:8d:c2:a2:58:4c:
c3:05:40:88:3d:4c:67:2c:45:77:fa:89:74:d7:94:
60:a7:b7:3c:a1:19:3a:07:cd:ab:98:5f:1d:51:aa:
71:b1:2d:e1:c4:d1:59:32:34:07:52:0e:2b:58:f5:
1c:1b:73:5b:18:d3:c9:3e:a8:da:7d:cf:e4:1d:46:
90:02:d1:3a:ea:9d:7d:6a:f2:6a:f5:fd:af:39:ba:
93:42:b9:2b:fe:3f:2b:17:cf:a3:8c:df:36:72:d5:
c2:29:d4:9a:5e:8c:2b:ac:d7:7d:e7:5c:34:03:ac:
a6:c1:a3:c8:1f:6a:79:62:e1:7d:1d:83:f2:a2:d4:
b7:1e:b7:c4:de:78:04:29:e5:7a:57:51:e9:b4:fe:
fa:cc:c2:31:0f:24:43:1e:8c:f9:89:57:98:74:93:
52:34:05:23:a5:a7:a7:c0:52:ca:1b:81:89:10:9c:
54:df:bd:48:b5:03:f0:93:c1:5c:e0:c8:3c:7a:d7:
1d:c0:71:cb:28:5a:48:e4:f4:81:51:6b:ef:b9:fe:
34:81:d6:30:13:51:42:de:3e:a8:c7:5b:32:be:63:
f0:98:6b:34:b9:e5:a9:0b:cf:42:eb:61:11:8f:c0:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C1:72:D0:00:E4:81:70:08:20:49:B5:DA:CA:7B:1B:8E:BE:61:FC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/G8Fy0ADkgXAIIEm12sp7G46-Yfw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:c5:28:69:bf:ee:4c:e8:82:66:a8:58:b7:6d:37:45:4f:d8:
f1:d4:4e:2c:0d:e0:d3:e8:8b:1b:bc:f8:70:28:d1:a5:99:8e:
62:10:e4:46:bc:ba:0e:c7:e8:0a:96:9c:1b:0d:57:d1:47:aa:
b3:5f:25:16:65:aa:66:a1:50:29:5a:0e:61:40:50:03:53:57:
cd:00:94:f0:7a:b1:c3:94:2a:25:c4:8a:e2:0f:82:05:3a:70:
b9:f9:8e:b8:e6:d4:2b:d7:0a:93:7c:70:06:a9:b2:c8:46:79:
75:af:53:48:8a:29:1b:d5:72:35:af:9a:b9:c0:39:a4:15:1f:
72:ab:78:b4:ab:47:c6:7e:cd:9f:f1:24:8d:e2:b7:cd:fd:6d:
f1:a0:c5:27:e7:89:34:11:59:69:24:93:dd:90:3d:cf:d4:10:
77:17:30:a0:bf:33:28:63:12:9a:bd:d0:60:42:fc:aa:2a:ae:
59:29:16:b4:d3:0e:f2:2d:d1:46:03:ff:a4:11:9f:17:ba:04:
38:10:d5:b9:8b:4a:2b:5b:4c:3a:35:37:97:a9:b0:40:cc:a7:
d5:f1:dc:b1:bd:82:d3:9a:0b:79:85:e0:af:66:c0:81:66:52:
17:6e:8c:a8:ea:3f:d4:e4:bd:be:27:9d:c7:6c:c3:a4:d1:f3:
97:c7:a6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org