Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/YoBfy3yFmVC5bPlIRVFS_-jMGYo.roa
File: YoBfy3yFmVC5bPlIRVFS_-jMGYo.roa (raw, json)
Hash identifier: Wh/rYls98tm0Q6fqYx4xo1ntDFi9rH2TgCipD4DiFbo=
Subject key identifier: 62:80:5F:CB:7C:85:99:50:B9:6C:F9:48:45:51:52:FF:E8:CC:19:8A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C1D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YoBfy3yFmVC5bPlIRVFS_-jMGYo.roa
Signing time: Sun 07 Feb 2021 07:03:28 +0000
ROA not before: Sun 07 Feb 2021 07:03:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 106.107.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3101 (0xc1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 07:03:28 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=62805FCB7C859950B96CF948455152FFE8CC198A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:c0:5b:bd:57:ca:13:f1:f0:9d:8d:78:dd:
ab:7f:20:b4:e7:b7:c2:18:1c:55:85:bf:af:95:7e:
c3:5e:b8:fc:34:a7:bb:1b:61:6f:25:f2:5f:fb:eb:
c9:57:f3:83:fd:ab:05:19:b9:81:1d:f5:bc:c5:c2:
05:63:5f:a8:2c:7a:82:1f:81:35:d3:5f:b6:c5:77:
7a:f8:57:77:c4:87:3f:a5:e6:29:d6:34:28:85:c9:
af:ab:24:c0:67:73:2c:17:60:7e:56:0e:00:63:fa:
ca:19:73:79:56:8d:1d:a4:4b:64:44:85:eb:f5:ea:
1c:c5:78:96:32:9d:54:fd:df:27:46:60:ec:b1:82:
34:60:94:c5:5e:57:a1:c4:42:fa:b3:c4:96:3f:4a:
29:7e:4e:32:b4:19:37:c5:bd:a3:aa:73:34:b7:e4:
f5:77:9f:48:00:81:85:23:4a:d8:49:a0:03:49:4f:
4f:19:93:0e:0f:c6:45:23:35:54:78:94:29:aa:4f:
8a:ac:af:8c:e8:d4:0b:f8:3b:3f:b4:f0:04:0a:c7:
88:a6:61:b7:79:a1:98:c7:f0:34:68:4c:16:15:aa:
31:f7:a9:22:7f:5d:74:63:89:17:29:fc:b3:2a:85:
a7:fe:ef:c5:16:b8:88:28:c6:ec:67:29:fc:60:43:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:5F:CB:7C:85:99:50:B9:6C:F9:48:45:51:52:FF:E8:CC:19:8A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YoBfy3yFmVC5bPlIRVFS_-jMGYo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.192.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:b8:6a:f2:06:01:7e:de:86:33:fc:b6:89:74:b9:d5:ff:5a:
8d:cf:4b:b8:71:31:1c:30:04:09:a7:39:db:b2:d6:1e:20:4b:
7a:96:33:42:c7:5b:02:24:c0:a5:14:6f:7d:5e:fa:23:0f:59:
4b:e5:6c:08:2c:91:6b:4b:27:b2:a6:dd:de:95:79:63:de:76:
c1:bd:fe:cd:5c:d0:fc:bc:66:5d:f4:43:4b:63:b7:04:b3:ab:
40:34:50:b3:2c:69:63:4b:28:b5:c1:d1:40:58:0d:3a:f3:64:
35:13:f6:0f:26:46:68:a7:f9:66:2d:ad:c2:c6:25:b9:11:20:
5e:5d:45:f8:b6:a4:e9:74:0b:bd:c9:76:dc:14:e3:12:b4:e1:
a2:af:c5:6c:a9:98:5f:5d:66:1b:e1:d8:09:88:ff:5b:73:fc:
16:5d:46:fe:bb:ad:25:0f:ff:29:db:1e:e4:72:38:a5:8e:13:
64:51:98:74:54:bb:e5:8d:72:9f:df:37:cb:bf:1a:8f:9e:1d:
7a:5b:fb:5e:ac:58:51:c1:ba:6b:3e:96:d2:9b:56:24:4e:1e:
3d:61:b0:68:5d:d1:fc:06:b0:86:10:e6:50:5b:f5:60:40:50:
ea:c8:f1:8e:79:63:d0:5c:e9:b9:c1:36:bd:f2:17:79:e7:54:
49:80:14:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org