Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/IR5OBrhjwBsCoM4slyxsaGHQr54.roa
File: IR5OBrhjwBsCoM4slyxsaGHQr54.roa (raw, json)
Hash identifier: iqqunAcVemvhJDyAAYRqlOplZG4Xr8xDVc5Z+3973ec=
Subject key identifier: 21:1E:4E:06:B8:63:C0:1B:02:A0:CE:2C:97:2C:6C:68:61:D0:AF:9E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E95
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IR5OBrhjwBsCoM4slyxsaGHQr54.roa
Signing time: Wed 29 Sep 2021 02:43:46 +0000
ROA not before: Wed 29 Sep 2021 02:43:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 60.245.112.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3733 (0xe95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:46 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=211E4E06B863C01B02A0CE2C972C6C6861D0AF9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:05:31:f7:dc:3e:6f:3d:55:ca:b8:89:b2:b6:
09:18:69:ce:a7:89:67:a3:27:13:f1:c2:d8:1d:f7:
85:be:37:a6:ce:ea:61:a8:99:73:72:96:fb:ad:dd:
2d:2e:26:06:cd:a0:54:bc:c2:a6:cb:05:b5:52:c4:
60:ac:81:1e:9b:de:14:e8:6d:54:51:77:73:8c:3b:
11:75:f6:fb:72:c4:84:85:2c:a9:f1:99:ad:ce:29:
ef:3f:fa:2d:5d:aa:e1:ba:66:bc:9c:f1:e6:04:41:
6f:6e:04:74:8c:7b:f5:c0:66:cc:04:7d:7c:99:64:
2b:75:67:5f:80:ca:10:51:af:97:c8:07:c2:64:91:
65:3b:64:24:82:f3:8e:47:c9:ea:5f:bb:9a:d2:28:
21:48:22:e2:7c:fb:86:58:c1:22:03:e1:15:f3:ad:
d3:ce:f3:ee:0f:31:26:d4:ce:fe:7b:0e:74:ca:4c:
29:11:24:ca:cb:b3:ab:e0:f9:66:c3:de:d5:f4:de:
0a:4f:45:82:7d:63:8c:e4:80:67:21:c0:dd:94:ae:
a4:56:4f:d1:6c:14:3b:aa:89:6c:f0:5d:3a:64:09:
03:0a:f7:be:c0:7d:91:65:75:0e:3e:98:a4:93:8f:
fa:38:f9:d3:b6:79:03:51:47:76:2a:bd:c5:e2:df:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1E:4E:06:B8:63:C0:1B:02:A0:CE:2C:97:2C:6C:68:61:D0:AF:9E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IR5OBrhjwBsCoM4slyxsaGHQr54.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.245.112.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:6c:9d:18:76:01:fd:ad:4f:56:11:b4:a6:16:03:4d:4e:3f:
df:ac:95:c0:63:ba:da:10:0c:6a:48:23:2b:30:1d:8f:85:a6:
cd:30:fd:28:ee:62:27:32:e6:44:7c:ca:61:4b:c1:40:76:d2:
ed:95:74:c6:79:12:3b:28:f3:9b:60:75:4a:2c:97:ce:8e:8d:
c7:87:35:ae:be:3a:d3:1a:0d:a0:aa:29:38:34:55:aa:96:b8:
8c:07:cd:a0:de:e2:43:4d:ec:64:3d:53:cb:a7:7b:37:c7:15:
26:67:66:b3:57:1d:4a:a8:d8:6c:1f:4f:59:0e:21:28:ca:78:
d7:68:70:3b:75:23:a4:e6:60:67:09:6a:c9:08:96:4c:2f:0a:
bc:ca:e6:1f:47:4e:78:b8:06:f5:23:67:da:09:12:44:54:fd:
00:b0:4b:df:c0:0b:3a:53:af:37:1d:b8:6a:73:23:db:b4:3c:
84:28:65:88:be:1e:53:74:8f:2a:08:7b:5a:dd:dd:27:52:f1:
3e:25:8d:97:10:32:65:cb:5e:51:b0:7e:19:6b:81:0c:69:4a:
03:84:31:ba:f9:e7:aa:1c:64:7c:75:e9:27:d9:e3:d0:d6:88:
92:70:66:39:c5:b7:62:34:b2:05:3b:ff:57:ce:66:34:81:5b:
4b:94:aa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org