Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/eV4GR-yMQFTJmhnuBf5Bb6MAkec.roa
File: eV4GR-yMQFTJmhnuBf5Bb6MAkec.roa (raw, json)
Hash identifier: A7LBgSr8UVQK/APtzhLD/mib56MLORZVTv7TxflwVrM=
Subject key identifier: 79:5E:06:47:EC:8C:40:54:C9:9A:19:EE:05:FE:41:6F:A3:00:91:E7
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0B6F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eV4GR-yMQFTJmhnuBf5Bb6MAkec.roa
Signing time: Sun 07 Feb 2021 06:19:13 +0000
ROA not before: Sun 07 Feb 2021 06:19:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 122.146.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2927 (0xb6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:19:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=795E0647EC8C4054C99A19EE05FE416FA30091E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:50:1a:d1:36:a7:05:e5:f8:cf:4b:82:ca:
3a:12:f7:3f:fb:04:a4:03:c7:e6:d8:a3:1b:40:9a:
1e:99:2a:61:76:9e:e7:d6:7a:61:cb:0e:de:60:a2:
e5:dc:a7:04:e8:6a:fc:cd:1d:85:75:0c:5d:33:c0:
d4:1c:30:82:5b:a0:8f:ff:a8:1f:fc:da:aa:51:26:
63:e7:97:7b:b1:96:f7:ad:84:f0:93:74:4b:42:e5:
fd:7f:b5:26:b3:25:5b:80:e3:ad:ac:f3:7d:e6:13:
f5:75:cf:1d:45:d4:75:6b:1d:f9:43:cc:ef:ee:48:
7b:98:bd:f1:1d:a5:b2:bc:08:08:62:67:e5:b4:1b:
42:0b:db:3f:68:c7:d6:b8:d2:a8:ce:7f:7b:c9:6b:
a0:df:10:85:48:b1:9b:cf:14:f3:38:17:a2:1b:dd:
05:ac:c0:8b:13:9d:e0:82:f9:49:b3:9d:93:8a:6d:
98:04:ab:88:b9:99:dc:2f:71:07:30:7f:45:bb:db:
01:85:e3:69:b6:93:21:90:60:10:e9:4a:b0:46:6c:
fa:3d:1e:71:f1:19:41:2c:6f:17:68:83:73:fe:d3:
18:35:eb:d4:bc:77:72:e0:25:50:90:e9:e4:53:20:
99:28:31:ec:b3:6e:f2:08:d6:06:ab:53:38:b3:51:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5E:06:47:EC:8C:40:54:C9:9A:19:EE:05:FE:41:6F:A3:00:91:E7
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eV4GR-yMQFTJmhnuBf5Bb6MAkec.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a5:46:8b:fd:e6:6f:bb:68:c4:c5:89:42:38:06:e6:2e:95:fc:
3b:96:c7:28:6a:80:1b:1e:0d:b5:8c:44:10:aa:ca:aa:89:71:
fa:bc:55:fb:b7:fd:7d:46:58:61:7c:fe:d4:e0:53:b3:1d:19:
84:e8:db:6f:36:f2:b1:45:83:22:4d:e5:0a:88:4c:f0:52:c1:
5b:b1:4d:c5:1d:a6:21:72:e8:6b:12:9e:c6:55:f6:75:8a:00:
10:78:15:38:ce:28:4e:ba:0e:4c:68:8a:24:c3:f8:af:bf:15:
ee:a4:f5:53:63:c2:33:c3:a2:28:03:f5:86:6e:64:52:ee:f3:
bd:c8:bc:ef:f1:31:2d:01:a3:dc:05:c8:db:6a:72:9b:93:1e:
8d:45:51:57:dd:d7:cd:8e:48:ae:a3:a4:43:05:33:92:cd:27:
07:48:d9:84:ff:9a:55:a3:3e:8f:d5:7f:e6:91:99:6b:c1:be:
75:f7:74:f5:96:fc:7b:0c:cb:07:1a:c8:d1:8b:a8:58:4b:d9:
b9:f0:ac:3c:28:10:a3:93:dc:6a:5a:aa:eb:ae:96:15:a8:d7:
60:00:16:a5:7f:a4:7b:d8:38:a4:05:59:eb:4e:f5:94:46:a8:
fd:f2:ee:80:86:cf:e6:ee:ff:1d:be:8c:b5:87:aa:82:cd:be:
b7:e6:03:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-fra.rpki-client.org