Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/JevSSr7xVfG29wGSowyKW_eeQ8w.roa
File: JevSSr7xVfG29wGSowyKW_eeQ8w.roa (raw, json)
Hash identifier: qK/tjWBtEyH9dauFHqiWtwz2QoN71JcYqz8AjQX73aE=
Subject key identifier: 25:EB:D2:4A:BE:F1:55:F1:B6:F7:01:92:A3:0C:8A:5B:F7:9E:43:CC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E48
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JevSSr7xVfG29wGSowyKW_eeQ8w.roa
Signing time: Wed 29 Sep 2021 02:43:23 +0000
ROA not before: Wed 29 Sep 2021 02:43:23 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38851
IP address blocks: 122.147.164.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3656 (0xe48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:23 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=25EBD24ABEF155F1B6F70192A30C8A5BF79E43CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:96:57:e5:85:98:99:47:df:ad:69:b5:f3:
bf:df:a9:70:b5:77:d2:30:4d:e6:c9:aa:5f:e9:fc:
66:25:43:73:21:0c:0b:9d:ca:7f:2b:d3:66:0f:41:
cf:bc:9f:49:0b:d1:2f:3c:3c:59:a7:68:66:21:38:
df:0c:eb:8b:8f:49:25:de:81:0e:59:ab:99:f3:6c:
5c:13:d2:70:96:d2:17:6a:c2:8a:a5:e2:d9:0e:01:
16:72:90:87:4c:df:d1:bf:cf:e2:f0:40:cd:45:50:
01:05:45:8f:36:29:24:d5:d5:6a:b9:4f:4f:eb:7b:
a0:38:11:d2:72:98:5f:14:f6:24:d3:01:b8:5b:ca:
61:d2:aa:10:27:f8:96:e6:fe:ea:12:d3:38:35:91:
bb:ae:45:7b:28:d3:15:74:83:6b:46:92:bf:be:d3:
39:58:b4:be:09:6d:9f:3a:11:44:a9:6c:fa:b8:cb:
82:86:f9:ac:4e:48:3a:33:49:95:76:d9:83:ae:6b:
3b:91:c7:23:0b:15:cc:1d:9e:23:6b:c5:55:a6:71:
eb:a2:76:de:ae:87:27:8d:78:4e:e5:e7:de:62:36:
7a:22:49:d5:85:2c:4d:2e:97:c9:42:61:5c:c7:2e:
07:54:39:ec:4a:c6:44:79:f7:cd:37:2f:bb:6c:d3:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EB:D2:4A:BE:F1:55:F1:B6:F7:01:92:A3:0C:8A:5B:F7:9E:43:CC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JevSSr7xVfG29wGSowyKW_eeQ8w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.164.0/23
Signature Algorithm: sha256WithRSAEncryption
35:13:2f:df:ff:9a:5c:d0:e5:d8:2c:c5:b6:2d:79:80:33:a4:
01:be:6c:54:5b:f2:c3:3e:55:17:d2:5b:2c:ce:cc:36:94:7e:
d7:04:ba:1f:d3:f3:d0:c4:4e:35:85:25:3a:c2:4f:04:6e:df:
ae:2b:1e:19:59:e9:8d:a8:30:c9:d5:19:30:66:3d:c9:9d:a0:
21:9d:e2:2e:1e:1b:05:da:1b:44:fe:33:0a:85:1b:2f:60:80:
2a:b8:47:9b:24:dc:46:53:91:6e:65:ae:df:99:e7:74:ba:81:
64:ea:5b:74:bc:b2:de:78:12:b5:22:a9:76:96:72:c2:73:de:
06:d9:0f:cf:20:28:6f:8a:c6:d5:24:cb:d5:58:3d:62:0c:a4:
60:4b:71:bf:3a:30:9a:b6:45:ef:11:38:ab:50:eb:72:b9:1d:
ed:fb:1b:cc:8e:a7:19:3f:1c:18:b9:d3:53:ad:85:43:c9:25:
7b:ad:8e:1a:a4:8a:17:6d:e0:f4:9a:81:01:20:61:82:70:d1:
ee:27:b8:58:78:8b:04:f2:f9:38:4e:8f:cb:00:a1:cc:e3:a1:
48:b7:a2:9c:8e:b1:9b:e6:c9:7c:d8:8a:14:36:18:1c:db:17:
a5:90:4c:ad:7e:97:09:71:9b:18:35:11:d0:56:1c:44:3d:b3:
5e:70:2d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org