Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/eF5r-tmQnG9RUfce6EH5Y82ZwpA.roa
File: eF5r-tmQnG9RUfce6EH5Y82ZwpA.roa (raw, json)
Hash identifier: xYyErbCY+eAs51kpuJOBe6KZnZHMYknyBtrsYsj56ZI=
Subject key identifier: 78:5E:6B:FA:D9:90:9C:6F:51:51:F7:1E:E8:41:F9:63:CD:99:C2:90
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C7B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eF5r-tmQnG9RUfce6EH5Y82ZwpA.roa
Signing time: Sun 07 Feb 2021 11:43:35 +0000
ROA not before: Sun 07 Feb 2021 11:43:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131584
IP address blocks: 106.105.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3195 (0xc7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:43:35 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=785E6BFAD9909C6F5151F71EE841F963CD99C290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:3b:70:b0:68:14:3e:2d:d8:d8:22:49:88:
5a:9e:15:75:c4:22:aa:9c:98:6b:a6:16:0a:7d:cb:
4c:33:46:70:4c:d2:9a:69:ee:a8:a1:3b:e7:90:c4:
bd:a5:2c:f5:e4:d0:0e:4a:b3:45:ae:67:f3:66:89:
f1:09:d2:f5:3c:82:a4:f4:07:78:f9:43:75:ed:6b:
9e:91:1f:6f:06:4f:12:50:bc:93:6d:50:32:03:77:
05:e1:b5:b4:04:a4:95:45:07:1b:36:05:a3:86:bf:
b2:f6:39:9c:cc:be:eb:6f:54:4a:c7:b3:d2:42:c1:
dd:eb:d4:79:85:63:7b:eb:b3:ea:eb:71:12:02:09:
ae:a0:5c:05:ab:a8:31:a1:53:85:eb:1f:6a:c1:82:
0e:73:b0:e4:fd:4f:08:a1:21:de:b1:fd:c3:9d:76:
9d:33:dc:82:33:f6:be:02:ef:a2:08:41:40:bf:5d:
a9:64:1d:4f:06:38:75:47:62:43:4c:c7:7b:8d:81:
04:d8:07:64:db:cb:bf:67:d3:2f:70:99:6b:02:32:
d8:a6:54:95:cd:ec:be:0e:a7:3d:a3:e5:e0:2d:0f:
b5:9c:fd:64:dd:57:cf:0f:37:38:ae:37:dc:16:0b:
3a:69:ef:28:6e:dc:05:71:7e:d3:3c:20:69:42:82:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5E:6B:FA:D9:90:9C:6F:51:51:F7:1E:E8:41:F9:63:CD:99:C2:90
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eF5r-tmQnG9RUfce6EH5Y82ZwpA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.180.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f1:1e:5b:ed:87:16:7c:bc:6a:55:54:92:24:9a:b7:5a:20:
59:71:1c:c1:89:25:42:ac:77:48:87:5b:7b:15:b6:dd:3a:e6:
66:03:ea:65:39:08:42:be:55:87:2c:39:57:ae:a6:36:f5:83:
0a:54:5e:b2:23:d5:33:05:67:11:de:8d:fe:22:4d:8b:71:5d:
02:52:25:f3:ea:27:39:80:70:c3:d7:fc:7e:08:e8:0e:da:73:
fb:84:6f:30:a3:73:28:e4:8b:fa:40:ce:9a:66:78:cc:0b:fe:
95:75:bb:8f:1f:8d:45:90:49:bf:3e:74:a9:b5:cc:fe:a4:75:
61:0e:ff:57:06:60:79:48:4c:7d:fe:db:fb:60:0c:93:ce:a3:
d3:94:c0:d0:0f:64:67:13:a4:3b:85:a7:f9:1c:99:c6:26:36:
4c:7e:50:03:a5:a6:5e:bc:8b:2c:b1:d1:dd:51:b0:1f:52:23:
2b:35:36:16:b7:2a:31:01:e7:e8:69:96:f2:33:5c:bb:6d:2e:
96:80:4f:72:22:2e:2b:aa:38:ba:4e:74:19:07:46:23:7d:c3:
76:33:fd:44:4f:cf:02:dd:40:dd:c1:45:17:54:39:62:54:69:
50:91:64:64:8b:71:5c:90:67:e9:d7:09:27:34:d4:9d:62:88:
24:c0:f8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-fra.rpki-client.org