Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mtDBO4haKxr1zp9cnYpvxg0C1is.roa
File: mtDBO4haKxr1zp9cnYpvxg0C1is.roa (raw, json)
Hash identifier: MGw94WSvMT3YKOdrkZEkHuphaAVRd28ETUn2MScaqdY=
Subject key identifier: 9A:D0:C1:3B:88:5A:2B:1A:F5:CE:9F:5C:9D:8A:6F:C6:0D:02:D6:2B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0B5F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mtDBO4haKxr1zp9cnYpvxg0C1is.roa
Signing time: Sun 07 Feb 2021 06:03:06 +0000
ROA not before: Sun 07 Feb 2021 06:03:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 123.205.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2911 (0xb5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:03:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9AD0C13B885A2B1AF5CE9F5C9D8A6FC60D02D62B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:be:30:0e:40:5c:00:06:05:67:44:88:23:
8e:45:4e:90:76:ab:6c:0e:cb:42:04:73:d6:5d:aa:
a9:f1:ab:2d:08:ed:13:78:c2:5a:d3:5b:f1:45:f3:
4f:a8:79:fe:83:27:82:6c:1a:77:90:6b:b8:a3:c2:
1c:6e:34:7e:a5:87:97:91:70:2c:f0:19:77:b0:c5:
3d:78:f6:45:b3:b4:84:3b:33:16:a4:1c:f1:c1:f3:
fb:38:4c:3d:8a:fb:2c:37:62:a8:ba:a9:8e:bc:50:
39:b4:5d:74:ef:09:ab:6a:a3:93:32:be:be:bb:86:
4b:c6:86:77:5b:1e:03:9a:4b:4c:68:d5:0d:6f:1b:
ea:c8:28:04:e5:a3:15:c0:f2:9a:2f:b1:ba:bd:40:
0d:98:88:8f:e9:f8:55:73:23:f8:47:aa:ac:7a:d4:
1c:e4:f8:f2:74:99:95:0c:2e:29:55:ef:a6:1b:d9:
07:ee:da:07:61:93:4b:50:59:6b:39:24:0f:ee:e7:
0e:7d:87:0e:dc:6b:42:a3:ed:84:39:6f:71:6a:09:
4a:a3:c2:42:87:ac:cf:b5:9a:98:19:bd:dd:5f:54:
81:57:71:53:a8:de:19:43:bd:0d:35:9c:25:44:f5:
60:a2:74:3d:b8:43:0a:09:98:28:2c:ca:48:a3:10:
c3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D0:C1:3B:88:5A:2B:1A:F5:CE:9F:5C:9D:8A:6F:C6:0D:02:D6:2B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mtDBO4haKxr1zp9cnYpvxg0C1is.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.0.0/18
Signature Algorithm: sha256WithRSAEncryption
43:cb:e6:07:7b:0f:93:8a:92:dd:71:55:8d:cf:0a:1e:32:35:
b2:47:c4:c7:4f:97:45:75:6c:7d:af:24:96:52:b1:5f:03:e9:
dc:be:30:5a:e9:00:8d:7e:34:6d:09:5f:a1:03:89:96:61:b4:
95:57:92:4a:ab:2b:eb:53:c7:ac:b4:6e:1e:70:32:45:d7:89:
5a:0c:a0:26:3f:d3:1c:9f:c5:96:6b:63:96:24:c7:17:6a:17:
57:57:7b:25:19:53:1c:30:59:27:ae:8e:01:05:89:80:bf:27:
9e:72:92:d3:92:82:fa:ab:28:e6:95:7f:86:70:5b:1b:e9:f0:
3c:1f:f1:ee:42:18:04:79:54:ed:cb:94:a7:7c:be:a5:d0:a0:
50:30:2a:fd:a1:fb:65:4a:34:1f:13:f3:e9:92:ac:05:87:23:
29:8d:4e:fc:4a:0f:37:c8:50:91:a9:2f:38:7f:2c:f5:66:45:
c0:17:f7:6a:e6:18:76:57:b4:66:8d:74:9f:f5:36:c2:dc:0f:
44:0e:d0:09:d1:6d:8d:ab:c5:b6:2e:d4:03:58:b8:67:51:ca:
2d:db:5f:c9:d6:31:88:6a:8d:b7:c2:dc:b3:b8:26:65:13:ee:
ce:a5:7c:da:6b:fd:dd:90:d7:31:ad:73:4c:fe:9f:0f:e0:4a:
22:b0:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org