Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/cS6jW8YGsRpiN5VWzz6QjRAwlwA.roa
File: cS6jW8YGsRpiN5VWzz6QjRAwlwA.roa (raw, json)
Hash identifier: oL7rbiJFIdgfTsADsZxfCO+Wi/S941WC33F3PL2Z/H0=
Subject key identifier: 71:2E:A3:5B:C6:06:B1:1A:62:37:95:56:CF:3E:90:8D:10:30:97:00
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C45
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/cS6jW8YGsRpiN5VWzz6QjRAwlwA.roa
Signing time: Sun 07 Feb 2021 07:25:49 +0000
ROA not before: Sun 07 Feb 2021 07:25:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18419
IP address blocks: 106.105.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3141 (0xc45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 07:25:49 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=712EA35BC606B11A62379556CF3E908D10309700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:97:03:9d:e0:df:90:85:fe:56:49:27:62:
37:18:13:c8:bd:40:ba:3f:73:53:12:f7:38:6b:c2:
98:1f:ba:ed:cd:f0:36:d0:7f:e6:04:34:1d:e1:a0:
5a:48:d3:cf:9d:e7:22:a0:61:73:f6:37:36:24:5d:
8e:cc:4d:24:65:48:93:d7:e2:87:bc:5e:84:e5:d4:
f1:69:57:52:4a:39:41:7f:48:7a:96:0f:1e:aa:05:
d8:ea:cd:d0:eb:be:d6:6a:46:f8:f6:53:67:27:8e:
a9:c3:77:ee:3e:de:c7:c8:b0:7d:a9:c9:ef:da:e5:
48:7b:c0:10:0a:67:06:8f:b2:3e:a8:17:6b:eb:68:
e3:29:73:ee:92:72:ba:3b:71:b0:68:3e:d4:05:5e:
33:25:e7:82:c5:5e:7e:ce:25:e8:7e:04:8d:93:ff:
0d:9e:50:b3:96:4b:59:9e:2e:3d:ea:10:9b:41:9b:
ab:88:aa:31:6e:98:5b:35:54:b1:a4:ef:a2:e5:02:
63:30:7a:49:fc:96:be:82:77:8a:07:d7:9d:41:d1:
d1:e0:c2:0e:0f:7b:5b:c9:a1:3f:e7:c4:86:22:24:
95:b5:94:d0:fa:6d:9d:6e:de:cd:a1:69:46:eb:7a:
41:76:0a:6e:73:40:9c:39:5e:4a:10:4b:2b:c1:2b:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2E:A3:5B:C6:06:B1:1A:62:37:95:56:CF:3E:90:8D:10:30:97:00
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/cS6jW8YGsRpiN5VWzz6QjRAwlwA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.24.0/21
Signature Algorithm: sha256WithRSAEncryption
30:b9:7c:28:51:fc:41:6e:9c:70:11:10:ef:c4:94:a7:d9:d9:
40:8a:05:07:fb:90:17:fe:35:35:2a:e8:88:77:79:06:2f:7a:
b2:c3:59:5f:48:b6:76:b1:dc:bb:29:06:db:63:4a:eb:b6:2b:
ef:e4:75:e1:1c:98:16:33:c0:2d:d7:67:a7:18:f2:46:80:7f:
57:80:96:98:71:60:ea:78:b4:be:b8:65:f9:13:fa:40:95:54:
c5:58:26:02:da:55:50:bf:50:b9:be:c4:3f:8b:d1:de:65:65:
c0:5e:97:cb:8e:51:bc:a2:d5:93:f3:3e:7d:1f:37:97:f1:99:
b0:82:39:6f:f6:a3:77:88:79:10:10:87:a7:1d:3e:cb:99:b8:
f5:ef:11:7c:e1:2e:44:84:66:a1:fe:0b:ea:e4:60:4c:b4:d2:
9d:8e:9a:29:86:ee:46:39:de:7d:37:4e:2e:79:6b:5d:48:78:
c6:90:05:10:b5:36:ab:48:b1:a3:98:49:c1:41:3c:ac:46:82:
6b:97:af:64:29:eb:d7:af:96:b1:cf:89:db:47:10:19:de:73:
92:17:71:fb:61:07:85:af:32:c6:5f:42:6c:77:59:7d:33:7a:
46:c7:80:00:65:7a:d3:34:52:17:69:7d:52:19:df:13:ee:d9:
89:a6:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-fra.rpki-client.org