Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/GSA-sGuDzGGru-kKwjAr7Ibgh6E.roa
File: GSA-sGuDzGGru-kKwjAr7Ibgh6E.roa (raw, json)
Hash identifier: lzM7li2d0RZfx1p8ATtKjeFuJMCshqe/NJe/scCbWZE=
Subject key identifier: 19:20:3E:B0:6B:83:CC:61:AB:BB:E9:0A:C2:30:2B:EC:86:E0:87:A1
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0D1D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GSA-sGuDzGGru-kKwjAr7Ibgh6E.roa
Signing time: Sun 07 Feb 2021 11:48:25 +0000
ROA not before: Sun 07 Feb 2021 11:48:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 122.146.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3357 (0xd1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:48:25 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=19203EB06B83CC61ABBBE90AC2302BEC86E087A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:ce:29:26:00:36:20:4b:50:5e:ac:1f:a0:
d8:4c:f4:8e:43:f1:8c:63:98:3c:7a:66:93:13:6d:
83:cb:48:b7:63:3d:cd:ea:35:5b:71:0b:37:6e:95:
75:c4:44:46:4c:27:fb:45:57:fd:fe:6a:7d:51:da:
ae:28:65:c8:7f:72:d4:1c:57:8c:b7:8e:e4:66:c6:
df:2f:88:74:ae:d9:4a:da:d7:78:ed:bc:d8:4f:14:
25:6f:95:83:a9:7e:20:26:e7:fd:1d:e7:bb:98:f1:
bc:de:2e:cd:2c:5f:aa:48:03:83:6d:3d:99:d8:af:
a3:d7:0c:b0:07:5c:95:53:a6:c8:b0:cc:6d:ad:73:
45:8e:d2:4e:ce:e7:9c:12:a7:60:11:8d:70:23:62:
bc:9c:1f:ba:d6:12:1b:b9:48:da:1e:44:f3:e9:fe:
80:87:a3:cb:d7:95:c8:e6:2b:3b:df:3e:67:23:12:
f3:bb:97:c5:b6:bc:c0:e2:df:4b:9a:16:ba:d7:2d:
47:03:e9:09:e4:8e:ce:02:ea:aa:49:50:f8:02:4c:
b8:9e:cd:d8:70:8a:2c:94:88:d7:eb:37:b1:3b:dc:
1d:e9:68:07:d5:28:84:41:1d:49:2f:b9:b1:7a:9f:
90:ec:26:39:0d:a7:58:9c:85:45:76:45:ae:b4:83:
f6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:20:3E:B0:6B:83:CC:61:AB:BB:E9:0A:C2:30:2B:EC:86:E0:87:A1
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GSA-sGuDzGGru-kKwjAr7Ibgh6E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0d:4e:2b:98:d8:9f:9d:6a:85:b4:6e:44:7f:f2:52:f8:73:5f:
a2:a2:ff:95:b3:b4:28:fd:b0:18:89:19:e0:04:c2:9f:ac:80:
19:9a:ae:61:71:01:fa:e1:db:bd:02:bc:f7:14:bd:61:ce:d2:
51:55:fc:9b:56:30:03:de:b8:2d:98:31:d5:61:a2:7f:63:b5:
19:ce:95:2b:ca:d1:1a:28:43:e6:5a:fb:ab:97:80:fa:6e:42:
bf:79:3f:9e:19:7f:49:74:73:9c:bc:02:26:59:27:23:d6:21:
6a:cf:f4:d2:97:a2:0c:e5:e6:06:9c:23:af:ac:15:57:44:85:
f1:7f:a4:94:ec:3c:59:98:be:b4:4d:87:0c:f8:af:c4:62:40:
fb:4f:11:b2:4b:9c:4e:ef:57:c0:40:0c:27:e6:31:55:75:79:
ae:d9:67:52:ff:0d:fc:bc:92:e7:e5:3b:b3:f7:e6:ad:d0:79:
1e:71:45:23:31:b6:28:3f:34:03:13:43:43:2f:8b:40:21:aa:
d8:46:5f:6f:6e:d9:33:55:44:0e:5b:11:99:f2:03:31:b9:31:
01:9c:c2:45:d6:29:f8:61:ad:f8:72:04:17:a0:9d:e3:3b:8d:
09:6d:90:72:b5:49:a0:d5:d5:e7:bd:56:63:66:03:13:4f:c6:
7e:cb:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org