Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/PLGpw4hHAZtJlabh38lxJA7LCII.roa
File: PLGpw4hHAZtJlabh38lxJA7LCII.roa (raw, json)
Hash identifier: D9MdNfRJ8xncfv9zrJiGGdJw17I8kGnI+Ij8CuNFa6w=
Subject key identifier: 3C:B1:A9:C3:88:47:01:9B:49:95:A6:E1:DF:C9:71:24:0E:CB:08:82
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C25
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PLGpw4hHAZtJlabh38lxJA7LCII.roa
Signing time: Sun 07 Feb 2021 07:05:03 +0000
ROA not before: Sun 07 Feb 2021 07:05:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 106.105.0.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3109 (0xc25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 07:05:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3CB1A9C38847019B4995A6E1DFC971240ECB0882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:b3:6c:3d:88:49:b3:5e:f1:01:85:b8:19:
c7:ac:c6:6e:af:a6:db:77:d5:1b:2d:99:58:9f:d7:
d3:86:c2:aa:93:86:00:d5:bc:85:34:4e:28:46:24:
a9:c6:f4:81:a9:40:d1:eb:df:94:49:fd:3f:09:2b:
94:3a:11:5a:ad:86:8d:03:96:2e:19:3d:6d:77:7f:
7d:ea:10:30:0a:7b:d0:90:b9:f8:89:db:fd:d0:c3:
62:5f:22:23:95:12:a6:c6:4e:ec:e3:5f:ae:03:60:
75:7b:da:4c:bd:39:05:49:38:e6:3e:a6:a7:79:38:
0c:61:ad:93:9d:3f:af:81:32:fa:2b:fc:0b:5e:d3:
a9:9e:05:1f:94:59:85:d4:12:15:d7:87:c1:dc:94:
ee:4f:08:a9:31:1c:7b:66:d5:d7:6e:22:e1:ae:b1:
1d:56:36:fd:93:1f:9f:aa:bc:04:43:64:a5:e8:f7:
cf:89:b5:d5:51:a5:10:cb:51:e5:92:74:60:77:77:
34:16:d9:d9:05:48:16:8a:46:dc:a5:dc:32:0e:c5:
ab:e7:7b:7b:30:d8:d1:71:78:c2:fe:26:e5:56:1c:
8c:25:d5:bc:2f:17:c2:12:03:5b:6d:ef:da:0a:d3:
f6:8b:83:28:0a:91:35:c4:49:98:a3:57:ab:3f:11:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B1:A9:C3:88:47:01:9B:49:95:A6:E1:DF:C9:71:24:0E:CB:08:82
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PLGpw4hHAZtJlabh38lxJA7LCII.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.0.0/21
Signature Algorithm: sha256WithRSAEncryption
26:3a:5d:bf:85:e4:0f:b9:ca:41:53:34:84:71:83:ed:19:69:
e6:0f:a6:87:fa:1b:21:a5:3a:ad:a8:ea:d1:8e:3c:f8:96:1e:
83:f8:75:82:da:1a:0f:47:be:ab:0c:84:ab:71:35:38:14:83:
40:7f:dc:26:98:51:f0:d2:ad:91:28:71:44:47:fd:be:0f:ea:
42:c4:7c:62:bd:b7:97:e2:bb:dd:12:1e:76:9f:d1:38:53:f2:
b5:99:47:ef:7a:7f:77:2f:0d:22:42:c9:ae:a7:64:27:e7:8c:
e1:0e:cc:ad:8f:fc:76:db:e1:de:da:46:03:3a:b6:5d:15:d0:
66:e1:de:9a:4d:e4:5e:b3:37:90:a8:b9:3c:ac:1f:96:b9:2f:
52:72:69:f7:e9:48:5c:d4:d3:64:ba:64:2d:6c:54:28:2f:52:
f8:56:3f:d7:07:fe:dc:7a:85:ec:67:9f:30:44:71:12:69:5f:
ab:bf:da:14:88:25:22:7b:a2:85:ef:6f:00:b4:b2:4a:10:67:
e8:91:3b:96:ac:cb:8d:d1:56:b2:37:e5:e5:3b:33:a6:18:1e:
72:97:90:ea:93:8c:7c:6e:69:bd:c4:78:3f:71:0b:ba:d1:2e:
ae:28:52:70:50:55:30:d2:b4:76:ee:1e:31:f4:a2:dc:55:a2:
d8:c5:b7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org