Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/algcE2iRyfw1wv1IqPiBv6nC9BA.roa
File: algcE2iRyfw1wv1IqPiBv6nC9BA.roa (raw, json)
Hash identifier: Tkk3U5jYIHTy69Hu3MXug9ahTbMyk8/fBjMpenOTeXs=
Subject key identifier: 6A:58:1C:13:68:91:C9:FC:35:C2:FD:48:A8:F8:81:BF:A9:C2:F4:10
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C77
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/algcE2iRyfw1wv1IqPiBv6nC9BA.roa
Signing time: Sun 07 Feb 2021 11:43:31 +0000
ROA not before: Sun 07 Feb 2021 11:43:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131584
IP address blocks: 106.105.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3191 (0xc77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:43:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6A581C136891C9FC35C2FD48A8F881BFA9C2F410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:59:20:c1:c6:b1:5e:f7:33:9b:4a:9f:78:
4a:61:72:6d:d8:81:cb:e2:2a:c2:20:46:dd:76:dd:
6a:58:56:74:b7:b3:9f:83:ba:a6:ff:13:ea:c5:4c:
93:a8:fe:7b:dd:8d:19:61:68:5b:e8:eb:94:5d:f9:
bc:55:79:d1:6f:a7:2e:2a:dc:ea:fc:c4:f3:4a:7e:
39:e5:a1:b6:fe:f5:aa:df:17:3d:ab:d3:95:18:00:
0f:ad:6c:eb:39:37:fc:32:8d:f3:e6:1a:02:6e:40:
b6:f2:65:41:42:b9:a2:28:26:da:8b:47:aa:00:b8:
38:ab:48:12:07:81:cc:66:b3:4a:5f:74:4a:0f:45:
53:93:4f:72:80:1c:d6:3d:3c:ae:79:85:3b:97:b1:
72:6a:8a:10:ad:4e:4a:58:0a:9c:5c:99:b7:99:f1:
64:ba:98:a0:bb:11:42:46:5d:8d:e2:e0:b6:3e:aa:
72:36:f4:d2:f0:55:af:4d:37:6e:e2:ae:21:95:0b:
40:b7:57:eb:aa:22:48:e8:11:17:c8:7d:1c:9e:bd:
52:d8:6b:7a:b0:8d:01:21:80:59:5b:6a:86:be:41:
54:b2:c4:bc:4a:8b:b2:85:6b:a8:5c:e0:80:60:fc:
ac:76:fb:98:67:5d:ee:5c:8c:eb:76:d0:05:65:83:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:58:1C:13:68:91:C9:FC:35:C2:FD:48:A8:F8:81:BF:A9:C2:F4:10
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/algcE2iRyfw1wv1IqPiBv6nC9BA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.178.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:db:4b:a3:f5:2f:22:f0:7c:4e:c1:a2:cd:0a:dc:e0:67:8e:
9c:54:7f:eb:45:12:34:b3:d9:9e:56:41:61:4e:e9:fc:1d:06:
60:d0:a8:c5:d9:df:29:f4:71:c8:0b:17:a1:e4:12:15:0e:56:
36:66:cb:63:50:4d:c1:54:f8:dc:3e:c6:76:2b:56:27:0e:e1:
0e:6b:83:07:99:63:79:c1:23:82:13:77:49:28:3e:10:2b:8b:
20:0d:5a:ec:0c:70:29:7c:ac:74:16:46:8e:e0:44:3a:a3:83:
4c:3e:3d:7a:5f:70:51:2d:bb:2b:3e:bf:81:e1:05:24:40:36:
c1:94:84:52:5f:43:bd:89:03:ba:5c:db:b7:4a:12:0a:21:ed:
ec:f1:d1:49:d9:f0:ce:6d:56:50:09:16:ad:eb:cc:cf:a1:41:
41:9c:89:a8:60:89:38:23:10:ea:93:23:c9:da:ff:94:20:cf:
a4:b5:a4:5f:7b:f9:fb:3e:ea:d8:85:77:2d:3e:3a:9a:06:56:
82:41:9f:4b:10:f4:73:04:66:02:5f:17:65:9e:43:fb:f5:13:
e2:75:49:93:78:2b:5a:39:a3:da:d9:a6:78:da:51:30:3a:99:
0f:07:cb:5d:ad:0e:c4:1e:8b:7c:e2:6f:55:22:80:82:a1:8d:
fa:c6:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-fra.rpki-client.org