Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Z49OwKAV-t9VGjOrIozOuvN3EtY.roa
File: Z49OwKAV-t9VGjOrIozOuvN3EtY.roa (raw, json)
Hash identifier: OzR9jXPe6Nf4xFQt7aXJ8+AD3bQsyGE3GmKJb4PyZ1Q=
Subject key identifier: 67:8F:4E:C0:A0:15:FA:DF:55:1A:33:AB:22:8C:CE:BA:F3:77:12:D6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C15
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Z49OwKAV-t9VGjOrIozOuvN3EtY.roa
Signing time: Sun 07 Feb 2021 06:55:02 +0000
ROA not before: Sun 07 Feb 2021 06:55:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 106.105.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3093 (0xc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:55:02 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=678F4EC0A015FADF551A33AB228CCEBAF37712D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:cb:35:58:4b:d1:aa:b1:d7:d4:d3:d8:b1:
2a:e4:fc:b8:23:28:a6:b9:83:d6:0f:c9:24:81:e0:
0e:f3:36:15:f0:0f:86:5b:a5:a7:fa:73:b6:74:05:
6a:f7:c5:1f:17:7f:77:1c:1f:1a:02:ef:4f:9a:85:
93:40:50:d4:99:4f:7d:40:9d:4b:f0:a1:0b:0d:d8:
90:3f:d5:a5:07:d2:e4:7c:ad:1f:d6:af:39:4a:ec:
ae:1f:d4:19:6b:e7:39:b6:21:8a:ac:ad:1a:cc:2c:
34:8e:6e:de:49:8e:c4:30:47:9a:2f:f7:e6:67:8d:
24:5b:f0:06:e6:58:a4:8a:41:82:32:e2:b6:6b:00:
d0:4d:06:de:2e:5b:c9:0d:86:f9:cc:3d:3e:89:df:
7b:37:82:02:e4:4e:e5:d6:1d:80:60:89:86:91:0a:
f8:61:4a:7a:17:e0:5c:e5:fe:35:38:2e:6f:39:d6:
11:99:7d:9c:8c:4b:fe:f5:ef:d9:f5:1a:d9:a2:d6:
32:90:6e:b7:79:ae:f2:75:0a:4a:7e:41:26:29:fc:
c1:3e:d1:cf:15:10:80:00:b5:c8:cb:39:e9:e9:12:
36:57:7b:78:5f:f9:66:57:fd:f7:cc:3f:02:f9:cf:
27:02:99:9e:a5:5a:37:3c:28:08:88:a0:86:01:df:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8F:4E:C0:A0:15:FA:DF:55:1A:33:AB:22:8C:CE:BA:F3:77:12:D6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Z49OwKAV-t9VGjOrIozOuvN3EtY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.104.0/22
Signature Algorithm: sha256WithRSAEncryption
63:fa:bf:1f:bb:cc:64:62:36:5b:a9:48:a4:76:e0:bc:63:2c:
6e:93:94:70:ca:6f:22:74:9c:dc:53:91:49:7e:ac:43:12:1f:
ce:01:fb:3f:52:f0:df:ef:f3:e6:8a:43:0d:fe:1a:26:c9:8d:
5e:9a:c0:a4:99:ba:e3:ba:91:56:59:21:f6:5a:eb:23:ad:b9:
72:14:27:39:79:3b:f6:62:42:4e:d5:f8:8f:ea:4c:68:28:c5:
26:85:7d:06:d8:95:bc:80:2a:0c:de:13:d9:ec:5b:8b:91:47:
a9:58:73:8d:4b:96:3e:c2:b1:a8:c3:64:1f:4b:35:af:86:58:
c2:d3:31:4c:a9:09:55:4d:97:60:26:57:35:e7:fd:4a:af:2a:
6a:83:00:21:5e:3a:f7:1d:a8:bf:7b:73:49:ee:45:5c:d0:90:
93:53:e7:59:81:17:b2:22:7d:fd:7c:d5:45:50:5e:d0:83:ed:
15:0d:96:9d:3b:3b:f3:ce:ff:63:eb:71:c9:28:8b:46:c0:1b:
6a:f1:1a:b7:ee:85:e1:93:46:ff:f9:89:ca:15:23:23:e8:d6:
51:28:d1:36:ca:17:af:75:d2:1b:51:ac:2f:2b:77:a8:d0:33:
7c:36:86:68:0c:37:12:3e:2a:ab:47:b1:3b:42:aa:8f:80:40:
1b:bf:15:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:00 2023 by rpki-client on console-ams.rpki-client.org