Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mMMEjzBqga9ljjDy4-4eJjyXh4Q.roa
File: mMMEjzBqga9ljjDy4-4eJjyXh4Q.roa (raw, json)
Hash identifier: bbrBG1j8fAyYYHJ65thvKIcmcREEbhoJWPJbgYzuTUI=
Subject key identifier: 98:C3:04:8F:30:6A:81:AF:65:8E:30:F2:E3:EE:1E:26:3C:97:87:84
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0BB6
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mMMEjzBqga9ljjDy4-4eJjyXh4Q.roa
Signing time: Sun 07 Feb 2021 06:30:48 +0000
ROA not before: Sun 07 Feb 2021 06:30:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 113.196.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2998 (0xbb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:30:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=98C3048F306A81AF658E30F2E3EE1E263C978784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:e0:40:0b:59:ca:09:fa:8f:8c:97:c6:4e:
79:ed:0a:37:65:cb:eb:5d:ee:7b:db:fc:99:ab:d2:
52:8f:be:97:cf:a2:ba:4e:4b:63:8b:98:f8:de:31:
4e:cb:27:56:3f:72:70:50:ce:45:f5:a2:89:42:83:
33:e4:87:d5:e3:f8:99:99:5a:ed:24:fa:34:bc:c1:
14:c4:da:fb:fc:f3:b6:ac:f9:65:07:9a:6e:2a:73:
bd:ba:07:4e:8c:c0:54:99:df:54:fa:f9:1a:ee:65:
0d:e5:66:48:90:62:a8:2c:3e:be:6a:19:36:5f:10:
94:fb:14:f6:9f:13:89:f7:27:1a:1a:e9:d5:6a:6c:
83:5d:cf:db:a2:eb:68:23:71:1a:32:3c:25:3f:2e:
3f:14:4d:79:8b:16:5b:36:0e:31:97:bc:d4:cd:61:
2b:7d:50:8f:4c:4f:53:7a:eb:4a:68:41:09:52:0a:
e5:d3:48:3f:ac:31:bc:50:27:31:66:c9:9f:0c:66:
80:28:bd:5a:70:49:ec:47:d2:0d:78:76:b2:2f:fa:
6a:be:f8:db:91:48:51:14:c0:14:ef:eb:48:d4:d1:
3d:e2:37:fa:3b:68:aa:25:dc:de:7e:5f:8f:37:b1:
a4:f2:97:8f:65:26:be:b5:65:3c:e1:1d:a0:c7:6a:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C3:04:8F:30:6A:81:AF:65:8E:30:F2:E3:EE:1E:26:3C:97:87:84
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mMMEjzBqga9ljjDy4-4eJjyXh4Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:10:f4:7e:e7:70:a9:b9:a2:88:45:f8:dd:9a:50:a9:6a:00:
5c:75:b9:ab:19:1e:07:33:cb:1e:70:bc:c3:c7:50:34:4a:26:
78:ab:c9:6e:c5:93:83:3c:2c:09:d2:5d:76:1d:88:c0:de:a7:
b5:6e:ca:4b:4d:a1:ae:64:23:33:18:3a:e6:7f:fa:cb:b4:59:
80:1a:5c:21:8e:8a:cf:83:fa:32:b1:92:18:cf:68:c0:5f:b0:
af:63:e8:a2:d1:96:29:42:d3:47:59:8f:5c:22:c4:3a:cb:b3:
55:2c:b9:88:02:12:59:e0:7e:63:18:49:bd:e2:60:9b:07:62:
2f:4b:fb:32:b1:6f:f5:80:49:45:1b:4a:33:1d:0d:34:de:3c:
f9:92:d7:f3:86:bd:d2:db:85:f3:0d:b1:af:55:9b:0b:ea:07:
c8:3a:ad:f1:13:58:7e:7c:c0:1a:5c:0a:07:2d:da:40:e9:27:
a4:fc:be:6b:b0:88:fa:97:86:0b:b7:a7:67:e9:6f:53:5c:05:
67:bd:4f:25:71:64:07:d8:75:b0:fc:07:bf:ea:0d:5e:f6:27:
c3:8a:f5:e3:bb:20:50:0e:37:94:78:fc:0c:53:ea:f4:17:cb:
57:ce:b6:45:ce:63:f3:45:38:9d:f2:f0:03:f5:c3:39:8a:6a:
06:16:4c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org