Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fUJaFFOwAlt2x75TEv39X4Ba1g4.roa
File: fUJaFFOwAlt2x75TEv39X4Ba1g4.roa (raw, json)
Hash identifier: Uv1nJmjcut/+11QTjv7EKKn/ImCYbZ5vDWfJ8G3kovU=
Subject key identifier: 7D:42:5A:14:53:B0:02:5B:76:C7:BE:53:12:FD:FD:5F:80:5A:D6:0E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0CB3
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fUJaFFOwAlt2x75TEv39X4Ba1g4.roa
Signing time: Sun 07 Feb 2021 11:44:40 +0000
ROA not before: Sun 07 Feb 2021 11:44:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 112.105.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3251 (0xcb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:44:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7D425A1453B0025B76C7BE5312FDFD5F805AD60E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:79:4a:31:51:30:19:ae:17:99:45:d8:87:
01:f4:fc:33:96:51:af:fc:b6:0c:24:46:d5:f6:cb:
91:57:29:ed:76:79:1b:86:cf:ed:1f:60:e9:93:08:
29:b2:a6:bc:62:ce:ab:fe:e2:97:36:5c:7a:45:e8:
b5:5e:90:f9:ea:8d:11:24:6a:fe:c3:3b:b5:9d:7e:
8b:a8:9f:d9:f8:55:de:97:af:19:74:42:f1:11:77:
85:e1:c4:10:07:d5:8c:36:26:17:73:d1:64:25:c0:
75:68:f7:9a:3b:ea:1a:fe:cb:af:58:cb:75:eb:96:
46:62:6b:4a:af:ae:6b:41:9a:22:71:08:96:77:f9:
3a:b5:ba:ff:02:f2:18:4a:85:09:3f:2b:7a:e9:96:
20:5b:b3:08:64:df:6a:67:3b:40:70:80:8d:99:42:
6e:00:a2:65:34:24:d9:fd:78:72:ba:f8:a7:e9:02:
6b:57:7f:89:9e:85:18:99:66:18:e6:98:bc:e9:ef:
8a:21:dd:5d:78:03:1c:50:6f:8f:fb:13:2c:7b:4f:
aa:59:23:ad:32:96:e8:ca:12:fb:94:79:c7:88:0b:
9d:6d:7a:22:26:c2:d5:67:c6:43:68:9a:57:ec:78:
20:5c:df:56:82:cb:0a:c0:36:82:12:55:7e:54:a0:
a5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:42:5A:14:53:B0:02:5B:76:C7:BE:53:12:FD:FD:5F:80:5A:D6:0E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fUJaFFOwAlt2x75TEv39X4Ba1g4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:09:0c:b8:5d:5f:22:cf:2f:f5:08:68:d7:bf:f8:a5:7a:f1:
5d:6a:76:9e:5f:e8:d9:f6:0d:df:e7:13:49:dc:93:b4:3d:72:
ec:31:91:4f:33:23:e2:8f:0f:9d:f1:cd:ba:3a:5e:7b:07:5b:
44:76:58:aa:c8:67:80:e7:bb:be:30:8c:a1:8c:94:b1:a5:fb:
b7:5d:38:59:87:31:ed:31:83:54:3f:16:2e:5c:c7:c4:ea:38:
63:57:80:01:05:ba:b0:8e:0f:f8:6d:1b:a8:af:92:4f:b5:6d:
aa:c9:35:12:66:d2:ed:03:6c:2e:32:d8:41:34:c8:6b:e3:a6:
93:0f:c5:48:fe:5e:a0:11:3b:35:41:da:bd:9c:5a:ce:4d:8a:
e5:c3:c8:18:91:cc:00:48:af:aa:8b:77:6a:60:2d:c4:df:3d:
05:bc:75:c6:18:eb:4c:e1:47:bb:c6:0c:8d:bf:60:08:d6:2f:
37:51:67:5e:fc:34:21:d4:fe:0c:d2:ea:26:84:2d:51:72:48:
73:d2:fb:6a:a0:55:cb:c3:d3:ff:7e:e5:47:ea:5a:36:70:ef:
76:f1:c3:ef:f4:be:2c:31:3d:3a:20:65:95:ed:7b:75:9a:ae:
91:ad:ff:bd:3e:09:94:1f:a1:c4:e2:40:41:80:6c:5d:0b:9a:
c9:5d:a6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-fra.rpki-client.org