Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Tas44eI6W-p7qn_rXSlmdLcakzo.roa
File: Tas44eI6W-p7qn_rXSlmdLcakzo.roa (raw, json)
Hash identifier: nMi9kOWR4QLAaNFjQjpAFe0lWRAvoadzckRMf8xvlRI=
Subject key identifier: 4D:AB:38:E1:E2:3A:5B:EA:7B:AA:7F:EB:5D:29:66:74:B7:1A:93:3A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0CBD
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Tas44eI6W-p7qn_rXSlmdLcakzo.roa
Signing time: Sun 07 Feb 2021 11:44:52 +0000
ROA not before: Sun 07 Feb 2021 11:44:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 220.229.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3261 (0xcbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:44:52 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4DAB38E1E23A5BEA7BAA7FEB5D296674B71A933A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:00:79:8f:df:50:ca:0b:9b:31:85:9e:c0:
32:60:1f:2c:fe:f6:60:02:c2:7b:e3:a7:cf:5c:e0:
2b:38:84:a5:19:02:28:97:30:53:8f:aa:e2:dd:7c:
5f:92:a8:c8:1e:46:5b:d5:10:8a:e8:d6:a0:db:49:
b3:54:9b:e9:b0:4d:8b:7f:a7:60:bc:65:43:95:dd:
2a:fa:db:ed:26:10:cc:ca:0f:f7:18:e2:3c:6e:9f:
de:30:b9:fd:f7:46:fe:68:b7:d9:d0:44:05:21:ee:
7a:e4:29:35:e6:b2:49:1c:5a:b3:f6:5c:ae:dd:8b:
db:02:09:b2:ad:ae:83:16:7a:90:44:3d:bc:fd:4a:
76:22:ee:3b:26:65:86:68:67:36:b5:4d:a1:a6:02:
16:f6:2d:80:ca:90:6a:b8:f8:ad:5b:63:f4:a6:f7:
5e:25:34:2e:79:5a:d7:e5:67:0c:3f:0b:b5:91:c6:
f7:2c:8d:55:67:5b:75:91:60:ac:8e:51:3a:22:ab:
13:da:3e:84:cb:a4:95:56:8d:0c:0f:69:9d:1f:2c:
9c:9f:cb:e1:54:f3:64:ca:86:0f:bc:ac:d7:29:d7:
b0:ce:3a:8a:1f:0d:93:02:63:69:71:33:1e:36:0f:
2e:83:00:cf:b6:a2:a3:c5:ac:5c:f3:aa:62:e0:d1:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AB:38:E1:E2:3A:5B:EA:7B:AA:7F:EB:5D:29:66:74:B7:1A:93:3A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Tas44eI6W-p7qn_rXSlmdLcakzo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b6:b2:a5:67:50:a5:78:e8:0a:9c:dc:82:29:b5:2b:d2:57:
ae:c9:8d:e2:51:69:ba:24:95:ad:a2:da:bb:6d:ce:23:dc:71:
77:dd:8e:55:ae:6e:4e:5d:c3:07:05:9b:b3:77:3a:05:f4:ed:
60:f4:d8:90:60:2f:9c:a6:03:11:94:49:88:11:28:89:99:5e:
c7:75:a2:8e:c6:31:e9:12:57:e3:0e:1a:7f:68:d8:5f:29:7f:
70:68:1b:b9:e6:84:be:ea:08:2f:ae:01:1c:99:65:f3:94:f5:
69:a3:f5:1b:c7:5b:be:e9:eb:f4:f9:b5:c9:17:4f:3a:15:33:
77:61:24:24:f6:08:82:dd:ed:8e:ae:a1:5d:0c:29:c6:85:15:
bf:9c:c4:42:ca:ed:7d:5f:1a:90:6b:92:d2:6c:53:c4:d0:df:
60:10:a3:5f:96:c6:8f:e6:67:46:8f:1b:f3:ab:c6:a4:48:5b:
46:03:5e:c8:2a:79:a0:5a:f9:1b:ba:90:c7:65:50:5b:de:78:
2d:ec:8e:64:61:1b:91:64:09:af:a6:63:0a:68:84:a8:28:f6:
dd:2c:81:85:d7:0e:75:4c:37:cb:1a:cc:c0:85:42:ee:8a:c2:
fc:4e:ce:cc:45:9b:f7:27:fe:16:33:45:4e:32:6c:6c:75:6d:
d8:6f:2f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:59 2023 by rpki-client on console-ams.rpki-client.org