Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/V4ppOgks-XuGOL41jdUKiM9TvYA.roa
File: V4ppOgks-XuGOL41jdUKiM9TvYA.roa (raw, json)
Hash identifier: GiYZh/2iOA6zPYHWJjiolVCpvkOmxChkie7w8zMkK4A=
Subject key identifier: 57:8A:69:3A:09:2C:F9:7B:86:38:BE:35:8D:D5:0A:88:CF:53:BD:80
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E21
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/V4ppOgks-XuGOL41jdUKiM9TvYA.roa
Signing time: Wed 29 Sep 2021 02:43:13 +0000
ROA not before: Wed 29 Sep 2021 02:43:13 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 218.210.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3617 (0xe21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:13 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=578A693A092CF97B8638BE358DD50A88CF53BD80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:1f:30:5d:72:c9:b4:cc:4a:20:d4:30:34:
3d:c0:0a:ef:94:9e:fd:85:71:bc:cd:d0:d3:c5:ac:
b2:64:46:57:f7:df:4f:1a:c4:d3:da:37:3d:38:dc:
a8:94:63:33:8e:0e:7b:2f:3d:91:21:f7:fd:0f:22:
52:6e:36:de:51:cf:37:5d:41:65:dd:5a:34:d9:b1:
05:05:11:b1:09:8e:3b:85:7b:60:da:eb:12:2f:85:
81:86:25:07:48:4e:cc:0e:e1:ac:39:f7:50:5e:23:
40:07:48:da:cc:b9:2b:cd:73:eb:8d:ef:b2:c5:f4:
38:7a:8e:1f:fb:a5:52:f1:11:0d:44:30:1a:ed:c9:
99:21:56:d0:5d:0e:74:87:31:27:b6:19:46:d0:76:
43:1f:ea:62:5b:14:58:d9:40:d8:ae:c3:24:a6:77:
06:a9:15:61:c8:79:23:70:b9:97:fc:4c:bc:f4:d7:
ef:61:20:e0:dc:ce:bb:6c:24:96:e4:ab:5f:ce:f0:
fc:67:0e:76:a8:f7:0d:a0:ab:45:4b:6e:ba:70:4d:
42:d2:38:d4:14:d8:1e:8a:db:63:8c:e5:76:a4:d7:
05:92:a7:d2:bf:fb:43:f3:e2:1b:7a:07:5f:b8:fe:
15:9f:9b:19:35:7c:f4:7a:c6:0e:ed:cc:53:da:4e:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8A:69:3A:09:2C:F9:7B:86:38:BE:35:8D:D5:0A:88:CF:53:BD:80
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/V4ppOgks-XuGOL41jdUKiM9TvYA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:77:b3:84:e5:ab:87:1d:c1:d4:89:0d:e6:d9:fd:25:59:05:
89:a7:c5:bd:20:fa:cd:24:be:da:10:84:8c:bd:e2:85:9d:f7:
46:c7:76:b3:5f:ee:68:14:6b:5e:9f:f4:ab:5b:7f:82:53:d1:
90:88:da:c0:7a:38:5f:02:7c:41:82:27:35:8e:e7:87:2b:4a:
ba:65:8f:b4:06:44:3c:09:c9:68:b2:2e:00:da:3d:cd:35:c4:
d7:74:a5:14:f8:57:67:87:44:99:d7:d0:2d:be:e1:97:f7:58:
c9:d5:de:2b:a6:aa:d0:bd:64:3d:13:2d:e8:7f:e4:c7:92:d7:
aa:e4:f4:60:21:91:2b:8f:3f:d5:01:6c:cd:c3:cd:40:e0:48:
40:66:13:8a:4a:80:9d:54:d6:0a:c0:cd:85:6a:46:f0:fc:10:
f3:e6:61:00:82:97:fa:cf:e0:d6:a7:8a:2a:c1:cb:51:f8:87:
a8:46:68:d5:19:67:0f:6b:d5:f3:b4:e3:ce:91:25:de:cd:a2:
23:88:19:15:eb:68:a3:22:29:fc:b8:4e:a8:72:98:05:e3:7e:
65:52:d0:59:02:75:30:3f:4e:a5:8f:f6:fe:5e:5b:da:6e:f4:
54:16:f6:a0:75:8b:85:65:b6:8a:c5:f6:71:46:ce:a8:ef:a8:
86:49:2d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org