Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wbpx1joSBrP-cArJ0n4gqCsrEaQ.roa
File: Wbpx1joSBrP-cArJ0n4gqCsrEaQ.roa (raw, json)
Hash identifier: rbD7jGjjs3eDq8AGJmOd3KMedLZ7ZlwsWsuef5ITClw=
Subject key identifier: 59:BA:71:D6:3A:12:06:B3:FE:70:0A:C9:D2:7E:20:A8:2B:2B:11:A4
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0DFE
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wbpx1joSBrP-cArJ0n4gqCsrEaQ.roa
Signing time: Wed 29 Sep 2021 02:43:05 +0000
ROA not before: Wed 29 Sep 2021 02:43:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 59.104.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3582 (0xdfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:05 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=59BA71D63A1206B3FE700AC9D27E20A82B2B11A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:97:a6:4b:29:d4:a9:1f:65:ba:e7:27:53:
3c:d8:f0:b0:a1:fd:5d:ad:fb:22:26:65:fb:ab:4e:
09:6b:68:6e:72:a3:8d:52:d1:49:c2:e2:b9:45:36:
38:64:68:2d:f6:5c:63:e3:32:ec:d2:8d:6a:5e:25:
87:04:25:64:45:3b:63:53:10:0e:41:3e:d5:10:e8:
dd:33:9a:87:56:22:84:88:6b:e3:2f:b9:15:d8:d0:
44:47:53:2e:3f:29:e7:e5:7b:af:71:86:18:77:28:
0b:75:cc:7a:b4:bb:29:ae:99:6a:5c:46:5d:f4:2c:
58:0b:a7:ae:30:a7:2f:8c:9a:72:d2:57:ad:48:01:
0d:ca:a8:18:83:8a:cc:54:44:c5:4f:20:5b:06:49:
36:91:9e:49:2a:53:54:46:bc:0f:b3:fc:5c:73:4c:
b1:6e:60:c8:e2:80:57:ac:3d:0a:f0:a8:80:35:20:
99:9c:fa:80:d1:70:30:95:a3:ec:4b:19:fb:db:0a:
b0:30:ca:45:3f:16:14:e6:a8:8d:7a:26:42:e9:9d:
8b:0d:2c:1b:7a:ac:cb:f6:af:c7:b3:08:c2:64:08:
68:1f:e0:10:fe:82:70:8b:ee:41:b5:0f:28:5b:c7:
d3:e8:ba:8e:2f:c9:8e:b9:a4:40:66:20:51:5f:b4:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BA:71:D6:3A:12:06:B3:FE:70:0A:C9:D2:7E:20:A8:2B:2B:11:A4
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wbpx1joSBrP-cArJ0n4gqCsrEaQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.104.0.0/15
Signature Algorithm: sha256WithRSAEncryption
28:d3:59:54:48:19:ca:44:1d:97:d8:3a:6c:8f:ae:7b:05:12:
a9:b9:44:68:5e:90:e7:e1:82:7d:72:43:14:d3:c5:86:ea:ed:
0a:23:b9:a2:bf:6d:a6:f1:40:8c:e7:d7:15:9e:71:89:fd:c6:
49:3b:ce:1b:71:6b:65:0b:81:11:97:59:9d:a4:f5:98:a5:7c:
2b:40:88:5b:bf:9c:22:38:7a:79:b4:81:77:92:df:a1:59:75:
a7:eb:5b:cf:dd:1a:72:4e:7f:88:db:7f:e6:96:14:e0:28:ad:
1e:09:64:73:6d:38:80:15:77:c1:40:72:77:11:35:1a:87:85:
b1:f8:1d:36:a9:a1:dd:31:74:4b:7c:c3:26:4e:44:aa:f1:1a:
55:d8:5a:2d:e6:2e:dc:33:4a:b2:1f:8b:14:0b:c0:42:0e:dd:
e1:5d:70:8d:c6:55:61:3e:ef:d9:6c:d4:26:92:4e:32:01:f4:
72:3d:81:6c:00:58:3a:c9:37:de:11:ae:47:b6:17:d9:8e:05:
ee:25:1f:d4:9a:ec:f3:db:73:84:9d:9e:33:7b:07:c3:fa:0b:
d2:a0:79:69:69:93:d0:92:e4:46:3d:12:bd:75:e0:10:1a:61:
26:5c:09:a1:6d:c0:0a:a0:d3:bc:e5:13:bf:3c:c7:26:a7:33:
b3:1d:55:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org