Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/SxI1b6T7pIL937epO_OT2lZxuoo.roa
File: SxI1b6T7pIL937epO_OT2lZxuoo.roa (raw, json)
Hash identifier: lNOwqJsdbnpljLOlKRW2d5H0gz6fxTW+mG2lFQ3n9CM=
Subject key identifier: 4B:12:35:6F:A4:FB:A4:82:FD:DF:B7:A9:3B:F3:93:DA:56:71:BA:8A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0D0B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SxI1b6T7pIL937epO_OT2lZxuoo.roa
Signing time: Sun 07 Feb 2021 11:48:01 +0000
ROA not before: Sun 07 Feb 2021 11:48:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 123.205.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3339 (0xd0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:48:01 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4B12356FA4FBA482FDDFB7A93BF393DA5671BA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:fa:e8:2a:74:b6:94:b7:39:7c:79:a8:7a:
70:c1:66:9f:6c:48:e1:60:cd:4c:19:e4:80:1a:f1:
e7:c4:6e:96:31:0a:3a:e8:19:40:99:f4:d1:68:2a:
c1:91:ad:f8:35:97:c3:db:a2:f3:cf:06:15:62:37:
79:9e:4b:8e:09:71:3c:7a:e2:83:d2:66:4f:02:5f:
63:66:8f:ab:26:65:8e:39:40:2d:22:61:84:25:37:
9b:7e:d4:e6:b3:60:33:ac:29:80:31:a3:35:71:35:
53:e9:62:6e:e2:ac:1f:47:62:05:a5:0b:8c:f4:ef:
f3:e3:87:59:2f:4f:9f:88:77:ec:d5:91:68:2e:d8:
ce:23:e0:94:56:af:dd:80:a6:03:cf:86:30:0c:17:
a4:ef:5e:30:0b:ee:c5:db:43:ad:a2:95:12:75:47:
8d:c0:d0:31:a1:76:f3:7e:80:85:a8:67:79:85:a2:
02:90:2e:b7:03:c0:4c:12:51:01:f8:e7:f1:76:ed:
7e:98:bd:e3:52:b6:bd:3c:2a:ee:be:f2:72:7e:35:
a5:41:b1:91:7c:72:14:d8:a3:52:5e:ba:df:91:3c:
50:1e:1f:38:2a:c0:94:79:7c:14:30:df:d3:2f:d2:
3f:97:e0:0b:57:e8:7e:05:d9:43:a9:ae:d8:f5:83:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:12:35:6F:A4:FB:A4:82:FD:DF:B7:A9:3B:F3:93:DA:56:71:BA:8A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SxI1b6T7pIL937epO_OT2lZxuoo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:80:73:b1:2f:b4:05:ec:5e:30:fe:92:c0:4b:de:c2:eb:ad:
d5:e9:4e:48:4b:03:a1:7a:fa:46:62:6e:ad:8b:7a:8a:0b:90:
f1:74:75:c4:47:4b:e6:ac:da:aa:7f:b6:8e:3b:2e:a9:76:06:
1d:f1:a0:84:4f:32:30:6e:5f:a4:09:d1:c2:67:7b:09:4c:a0:
1e:52:66:7f:68:b7:90:db:8b:0a:6f:8e:5b:5d:04:0a:be:7f:
68:9e:6d:2d:ba:b3:d5:4c:c3:a9:d8:fd:db:9a:80:3a:dd:27:
0e:25:7c:10:8b:2b:0d:25:4c:2e:b6:6b:47:8b:56:6b:ff:44:
97:ae:7b:b2:bd:11:52:98:e0:24:60:b9:9a:6c:d6:12:56:22:
ba:f5:08:14:a5:c8:cb:81:2f:0e:09:2f:f0:47:0b:a7:c2:62:
22:ab:ad:15:52:9b:10:bb:2f:a3:38:71:e2:14:71:54:3a:a3:
26:da:97:f2:af:5d:32:32:f1:87:b7:2d:27:32:d2:74:8c:72:
83:fe:35:bc:ec:6a:1f:d1:9a:ec:e5:c1:ea:b8:8e:7f:e8:e1:
f3:83:fc:85:2a:f5:68:76:14:cd:1b:df:6c:05:d8:e3:cd:3f:
a9:89:30:e7:df:85:e7:65:e1:fd:95:15:a4:2d:ac:6b:83:46:
bd:cc:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org