Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/MkzGIwiQIfjrj8F8DZwcPyMaNXs.roa
File: MkzGIwiQIfjrj8F8DZwcPyMaNXs.roa (raw, json)
Hash identifier: CBZPI4OvJDm68P3qZB/S6mubZLqfT8wqWRTqupwhjOM=
Subject key identifier: 32:4C:C6:23:08:90:21:F8:EB:8F:C1:7C:0D:9C:1C:3F:23:1A:35:7B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C71
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MkzGIwiQIfjrj8F8DZwcPyMaNXs.roa
Signing time: Sun 07 Feb 2021 11:43:25 +0000
ROA not before: Sun 07 Feb 2021 11:43:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 106.105.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3185 (0xc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:43:25 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=324CC623089021F8EB8FC17C0D9C1C3F231A357B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:d5:3c:bd:fb:00:e9:46:e3:8c:87:e7:d8:
f3:5a:11:eb:da:2b:6e:af:41:93:4d:c2:ba:75:b2:
29:a0:28:cf:26:0e:df:58:60:96:c1:3b:c8:57:26:
38:08:a6:9e:66:ff:0a:a5:c7:9e:85:42:e9:eb:01:
a1:8c:fa:cc:ea:2f:d8:30:eb:6c:89:f4:43:2f:f0:
fd:bc:02:24:16:dd:3d:67:c3:78:f2:a0:b0:7c:f6:
6d:61:dc:73:4b:08:90:38:ff:f9:7a:70:c0:08:fa:
6d:a9:cc:c3:96:25:7c:e3:80:21:7f:f1:cb:3b:71:
60:ca:3b:4f:a7:cd:75:07:45:a5:bf:c3:64:f1:74:
b2:a2:5c:d2:30:e6:b0:bf:05:78:08:e0:0b:19:55:
5d:ad:e3:ea:f0:3e:2e:3e:9c:77:47:03:a9:ea:89:
b9:2d:f9:d5:23:dc:7c:6f:2c:d9:0d:f0:ba:01:f8:
53:bb:de:4a:22:fe:12:5c:4c:66:99:60:63:6f:d5:
69:22:d8:ea:3f:07:26:18:5e:26:61:2b:0c:3f:30:
51:35:32:63:35:26:72:77:36:51:39:dd:91:a0:92:
2e:68:9a:a0:d0:95:ce:91:1f:5e:24:22:9d:04:e1:
f7:9e:8b:a4:13:17:68:e6:bf:49:9b:67:d6:ff:c6:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4C:C6:23:08:90:21:F8:EB:8F:C1:7C:0D:9C:1C:3F:23:1A:35:7B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MkzGIwiQIfjrj8F8DZwcPyMaNXs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.128.0/19
Signature Algorithm: sha256WithRSAEncryption
60:33:69:63:d1:fb:62:b0:1a:75:5b:f6:5f:c3:90:b3:94:eb:
91:c6:ac:24:a8:8a:1a:50:ea:d8:7d:c0:27:35:fa:c6:33:94:
d6:07:5d:c0:47:d2:3d:8e:3f:d6:b1:e1:89:4f:fa:25:86:a3:
bd:d6:60:c0:2c:c3:af:10:72:ed:5e:18:a9:42:7e:46:44:e9:
15:be:bb:de:4d:29:3f:c4:fa:3d:66:f8:f4:7e:da:de:03:9a:
8b:86:61:04:35:c8:5f:8a:f3:21:e3:5a:b5:33:bd:69:0b:bf:
2b:04:d1:8c:81:c1:7a:b4:3e:3d:a8:be:c5:49:ef:d6:15:21:
c2:e9:a3:c4:15:f5:75:4e:eb:74:4a:26:13:6c:e3:84:75:b3:
c6:88:09:7a:70:df:16:7c:5c:b5:57:dc:f0:f2:77:fc:2a:31:
4e:cc:75:86:2d:80:8e:e5:cd:5c:07:12:6c:b1:ff:f2:d9:4f:
7e:b2:84:54:5b:47:8b:2a:da:d7:4e:31:84:f1:71:6e:0e:90:
e6:2e:48:78:68:9e:49:c6:e4:20:44:b4:e9:1f:62:c9:e3:9b:
b0:31:72:21:a3:0e:2f:48:6e:ec:ea:8b:df:15:8c:9f:e7:f1:
40:7b:da:3b:65:c8:da:ef:ff:eb:e7:13:72:86:6c:98:95:af:
03:eb:f0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:59 2023 by rpki-client on console-ams.rpki-client.org