Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/T_qvH_F9EYqWBiF6XQdtxJgaArE.roa
File: T_qvH_F9EYqWBiF6XQdtxJgaArE.roa (raw, json)
Hash identifier: DgLXElcghyHnaj/L5qijDtPYRucL4Gv87Y1r4d9Bb7g=
Subject key identifier: 4F:FA:AF:1F:F1:7D:11:8A:96:06:21:7A:5D:07:6D:C4:98:1A:02:B1
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08E6
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/T_qvH_F9EYqWBiF6XQdtxJgaArE.roa
Signing time: Tue 29 Sep 2020 09:52:34 +0000
ROA not before: Tue 29 Sep 2020 09:52:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 112.105.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2278 (0x8e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4FFAAF1FF17D118A9606217A5D076DC4981A02B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:83:45:20:20:07:44:90:73:7c:64:9e:12:
8c:b6:fb:f3:30:56:88:7b:10:80:08:a8:ea:83:9b:
39:2b:39:98:85:8e:86:e9:1f:16:52:12:c0:d7:dc:
cd:c7:32:27:6d:5e:43:08:40:a1:ce:75:e6:88:85:
5c:b5:1f:09:f7:2b:1d:06:6f:0a:5c:f0:43:2b:35:
32:15:8b:88:aa:df:dc:1c:32:c7:e9:d4:52:13:86:
9d:f1:73:f2:07:79:2e:c0:14:5f:9a:22:89:19:fb:
72:b1:2b:7a:78:d3:e0:5c:24:fa:8a:a9:0e:ad:5e:
94:91:85:ec:00:ce:3a:17:c8:db:a3:27:c2:c1:20:
09:9f:f4:4e:6f:47:cb:a6:3f:16:30:6d:68:d3:94:
b5:ec:9a:9e:de:93:cd:79:d2:08:c3:91:23:cb:19:
19:f3:fc:ec:23:ef:85:6b:6f:12:50:e0:09:08:d8:
fb:e5:e8:5e:e7:4f:e0:ad:ae:06:7f:8b:f7:d8:61:
d7:ca:f1:28:1e:c8:de:69:c5:9c:54:ca:f1:13:d6:
ff:5a:ad:47:6a:93:32:15:bf:eb:e5:23:52:78:96:
a7:17:71:0f:34:ae:d6:b4:a7:46:ea:72:59:9a:6e:
12:bb:e3:04:0d:93:18:0b:8c:98:1a:14:a8:48:e0:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FA:AF:1F:F1:7D:11:8A:96:06:21:7A:5D:07:6D:C4:98:1A:02:B1
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/T_qvH_F9EYqWBiF6XQdtxJgaArE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.0.0/16
Signature Algorithm: sha256WithRSAEncryption
37:7b:86:a4:6c:15:7d:d7:06:ed:65:75:63:0a:75:6b:5a:04:
e6:c8:19:22:95:39:f8:31:a9:fa:7e:2d:5b:ce:da:17:96:2b:
69:c0:fc:4b:2c:98:4b:cb:8f:fe:78:fb:a2:0a:6a:80:e5:cb:
df:70:9b:29:1f:c6:90:23:bf:f1:83:78:bb:15:13:89:55:0f:
0a:c5:85:90:2f:5c:f5:96:3d:b4:36:8e:1e:56:47:69:a0:6d:
2f:b1:f1:12:eb:42:83:96:a0:19:09:15:02:8b:cc:c2:36:98:
28:cd:0e:7c:c1:33:39:20:cf:fa:a0:20:b4:b4:a1:4f:be:2d:
9f:35:4f:80:18:e9:02:5e:33:bc:f1:72:5c:1c:ed:dd:26:54:
f7:88:83:0f:66:9b:56:5c:e2:b7:26:85:4d:00:f9:e7:bb:47:
c3:cb:9b:45:9c:04:9c:9f:84:22:b9:ae:79:cc:21:44:01:66:
ca:05:0d:32:ee:41:6c:bc:4a:c9:d8:20:d1:88:8d:ae:c4:dc:
8c:b8:66:dc:bc:80:0a:21:a6:db:7b:53:61:14:db:b7:3a:7d:
26:d1:2a:e6:33:02:fa:61:b4:0f:88:29:54:7e:46:7c:fc:64:
db:a1:82:29:35:48:2a:c8:cb:9d:68:c7:86:ad:6e:45:2f:b0:
82:b8:e1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org