Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Qx1_UbAHPxNDxbTYFszykgveumc.roa
File: Qx1_UbAHPxNDxbTYFszykgveumc.roa (raw, json)
Hash identifier: xT8+2V5x+01LRZi9hknyW29QgKGnCSK9i2+MMevgNyU=
Subject key identifier: 43:1D:7F:51:B0:07:3F:13:43:C5:B4:D8:16:CC:F2:92:0B:DE:BA:67
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E10
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Qx1_UbAHPxNDxbTYFszykgveumc.roa
Signing time: Wed 29 Sep 2021 02:43:09 +0000
ROA not before: Wed 29 Sep 2021 02:43:09 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 112.104.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3600 (0xe10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:09 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=431D7F51B0073F1343C5B4D816CCF2920BDEBA67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:9b:08:0d:ab:10:44:18:c7:07:a0:c0:ac:
57:7e:0a:22:d7:ab:bc:30:0e:81:18:e1:fc:c3:e9:
ab:0b:22:af:1a:61:fc:0e:21:58:50:29:5c:83:15:
f8:00:c2:60:0f:c2:14:55:8c:ad:f1:bb:d7:29:d8:
ab:01:cd:20:9c:08:e4:51:39:ea:0b:a0:f5:bc:f3:
05:df:4a:24:ef:0e:cd:98:a6:8a:d5:10:4a:9f:1c:
52:9e:20:dc:29:66:38:6c:3e:58:99:42:90:f8:d9:
e5:05:64:dd:a1:33:e2:f6:1a:d5:39:0b:f2:d8:cc:
ff:1a:ed:05:8a:0b:69:3f:41:53:7f:d6:96:27:ce:
e0:06:53:1a:24:49:3c:f8:c8:4d:cf:79:a5:3a:ca:
16:a1:86:70:51:60:2a:31:e7:5f:61:01:52:e5:60:
12:4b:98:77:80:50:2d:6e:86:86:6c:90:e7:cd:0b:
94:41:83:c3:bd:d4:5c:ae:84:0c:6a:51:52:ac:fe:
0c:fc:e1:4b:5c:77:50:17:c4:72:12:d4:5d:90:d3:
39:08:34:b4:3a:ce:07:2f:55:4c:9c:cc:6f:57:50:
9d:58:48:81:12:70:55:ec:bd:27:6a:9f:f2:d0:05:
2f:56:b2:60:c9:a0:22:b7:ed:42:4e:3b:47:9a:0b:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1D:7F:51:B0:07:3F:13:43:C5:B4:D8:16:CC:F2:92:0B:DE:BA:67
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Qx1_UbAHPxNDxbTYFszykgveumc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.104.0.0/15
Signature Algorithm: sha256WithRSAEncryption
6a:28:9f:33:3e:69:ca:37:66:c1:79:19:8d:6f:1d:8e:8c:3e:
e5:b5:d5:2f:de:20:04:b6:98:34:b1:23:93:7b:13:1a:55:f0:
6c:b7:bc:6c:e3:20:ff:c1:ac:b4:d3:f5:6c:3a:e0:c8:6f:c6:
77:8d:0d:e9:7d:19:17:2d:5e:f0:89:41:a6:04:73:3a:74:4c:
53:3a:71:6b:bb:be:09:df:30:b1:9e:56:0a:ba:93:6d:96:1f:
1d:bb:f3:ab:8e:79:65:14:e0:b0:9c:4c:5e:d1:9b:a0:b9:e1:
52:c5:4d:7b:08:44:41:0d:4d:57:69:66:51:b7:c3:93:94:2b:
69:2c:ec:39:a1:a6:59:51:eb:95:09:35:85:44:2c:85:e4:14:
71:1a:c5:96:4f:ad:90:31:47:7f:ee:7e:5d:ce:3d:b9:cc:c6:
7f:5e:48:4d:41:1e:a7:5a:83:26:9c:44:18:0f:92:a5:25:1f:
37:49:19:2b:31:8f:ee:d0:43:32:94:7a:4b:95:ff:2f:68:fa:
da:01:b8:48:60:e4:a5:3f:77:8f:56:ac:ff:3d:33:fd:49:ab:
3c:6d:f9:28:9c:4d:a7:b0:29:8c:7a:e4:8d:fc:da:dd:a2:87:
cc:b1:44:05:a3:f1:06:c1:23:b6:bb:6c:ae:1b:6a:04:5c:96:
5c:a7:9e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org