Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/JzwSUZvktPqc_Sr2CXJdyEPESN4.roa
File: JzwSUZvktPqc_Sr2CXJdyEPESN4.roa (raw, json)
Hash identifier: jNKDz2mJMLop+C+lxJ6WwIyysOtVZXiylTC89O4SjL4=
Subject key identifier: 27:3C:12:51:9B:E4:B4:FA:9C:FD:2A:F6:09:72:5D:C8:43:C4:48:DE
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0B7E
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JzwSUZvktPqc_Sr2CXJdyEPESN4.roa
Signing time: Wed 29 Sep 2021 02:44:16 +0000
ROA not before: Wed 29 Sep 2021 02:44:16 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 192.72.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2942 (0xb7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 29 02:44:16 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=273C12519BE4B4FA9CFD2AF609725DC843C448DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:69:52:27:87:d3:00:c6:a9:38:5f:35:92:
84:d1:08:c4:d6:8d:79:b4:8b:d6:83:bc:e5:a6:2b:
2f:e7:42:d3:9d:16:0d:1f:97:d3:13:a2:ee:18:d2:
43:a6:d5:ef:58:c0:2b:9e:bf:d2:be:b3:2d:f7:52:
7b:80:90:7d:12:e2:af:73:9a:ee:83:af:bc:09:8f:
49:8b:41:df:1d:40:30:f2:8f:0d:50:fd:fd:2b:ef:
f6:cb:c3:47:23:75:fd:14:09:95:37:5c:c2:84:d1:
fc:37:1d:27:14:8b:82:5c:6e:10:9f:5d:cb:4e:ab:
93:ba:2e:31:da:96:38:a7:cc:7c:29:10:91:56:47:
d3:cf:e7:e8:99:87:09:c3:ce:ad:4e:0d:53:13:1c:
5a:72:09:85:27:34:ac:9b:59:58:34:bd:93:2c:bb:
6b:d9:a0:c2:fb:f8:f9:27:cc:80:38:01:0a:d8:6a:
a6:bd:2e:4e:1d:07:fc:78:63:d6:72:2d:3c:7a:b1:
b9:b7:28:e3:bf:7d:65:ee:cc:84:7c:fd:3f:17:1e:
55:f7:c2:12:78:ab:97:d5:11:6e:90:54:8c:e1:7e:
46:e8:ea:e8:1b:da:d7:06:35:9f:f7:d1:5b:11:36:
d1:a2:fa:d4:fc:8b:94:8f:ce:26:ed:56:84:e1:ab:
08:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3C:12:51:9B:E4:B4:FA:9C:FD:2A:F6:09:72:5D:C8:43:C4:48:DE
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JzwSUZvktPqc_Sr2CXJdyEPESN4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.224.0/20
Signature Algorithm: sha256WithRSAEncryption
98:3f:14:55:ea:82:f6:b3:f3:85:62:f4:92:19:b5:dd:42:45:
b2:49:50:fc:de:c6:4a:f6:a1:46:bc:e4:bf:9c:62:76:9d:8f:
0c:a3:48:89:e5:b6:3f:29:a7:a4:08:fb:a9:93:ac:37:ec:6b:
77:7e:57:bb:29:40:0f:5e:c9:8c:e5:99:58:da:35:b0:57:02:
54:69:41:66:8c:65:b9:74:48:3b:f3:b0:94:82:96:3f:2f:14:
df:09:24:99:4e:79:9f:6b:5b:47:1f:59:c4:a4:52:71:e6:d9:
66:0d:c7:41:ef:4d:eb:bb:f3:82:ab:42:fe:f8:27:f8:2c:c6:
64:d6:61:8b:45:99:cd:76:37:61:a7:44:ad:8f:7c:3a:81:51:
f9:d0:d3:3a:f4:24:8f:26:8a:5c:f4:64:e6:c7:48:55:ce:63:
19:a6:11:04:af:79:e4:33:1a:ca:e3:98:86:f6:6f:60:7b:5d:
36:e4:7d:ee:d5:4f:a7:89:3f:da:e6:59:60:14:25:da:f0:62:
a0:89:1b:67:d0:42:5d:b0:e0:6e:51:08:70:ac:49:44:d0:d3:
0a:9b:11:da:91:7e:53:26:22:89:76:f6:15:9e:34:74:44:76:
98:b4:73:e8:ec:36:31:53:f4:ff:bb:b0:73:0f:f4:90:4e:ba:
ac:7a:c9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org