Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/p3KT30u9j5cfTTFHkPMr7kqHS0A.roa
File: p3KT30u9j5cfTTFHkPMr7kqHS0A.roa (raw, json)
Hash identifier: tLR0Xgvfd+5gzuHVSgVet04ACaF+A/SFFMN5IcO9Tq0=
Subject key identifier: A7:72:93:DF:4B:BD:8F:97:1F:4D:31:47:90:F3:2B:EE:4A:87:4B:40
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0D0D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p3KT30u9j5cfTTFHkPMr7kqHS0A.roa
Signing time: Sun 07 Feb 2021 11:48:04 +0000
ROA not before: Sun 07 Feb 2021 11:48:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 123.205.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3341 (0xd0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:48:04 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A77293DF4BBD8F971F4D314790F32BEE4A874B40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:df:ed:ef:84:af:af:96:5f:3e:98:26:89:8f:
2d:93:d0:31:58:27:6e:4c:2b:da:8a:dd:4f:a1:95:
e7:8f:1c:9f:26:05:b0:05:5f:3d:52:5d:33:c4:ab:
45:73:7a:a4:06:9c:b7:6c:ae:dc:56:61:9f:6c:9d:
fd:b4:9a:c5:89:b0:08:16:10:57:e3:cb:27:a5:e7:
9a:aa:06:e2:16:6d:e4:17:d6:89:c1:71:8d:35:cf:
8e:29:dc:f5:c6:07:50:9c:63:e7:a2:81:53:9f:16:
d7:2d:03:e8:51:49:85:a1:33:f7:7b:e0:31:d1:91:
e1:ac:00:1a:be:0a:e9:fa:43:e5:bf:07:54:c5:82:
86:e1:17:19:0c:0d:ab:d0:d1:b0:bd:98:a6:92:3c:
3e:e6:6a:26:44:6e:65:0c:29:88:63:3b:a9:cc:80:
9b:34:da:16:a7:e4:0c:d1:6b:f1:66:37:a9:cf:57:
b5:c9:1b:16:dc:ff:6d:42:b6:ad:3a:95:cc:5c:9c:
6a:f9:6a:16:1f:87:71:cd:48:ed:23:c5:54:bd:af:
5c:69:8e:c4:a5:39:e0:4a:55:98:19:44:df:70:59:
31:55:f7:e1:fb:cb:2d:99:91:60:66:73:d1:90:72:
98:8e:8b:e1:55:6f:11:9f:28:8d:aa:6a:ea:09:ae:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:72:93:DF:4B:BD:8F:97:1F:4D:31:47:90:F3:2B:EE:4A:87:4B:40
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p3KT30u9j5cfTTFHkPMr7kqHS0A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:0e:29:9a:4c:d7:82:b7:e2:c6:98:9c:27:5f:b7:f5:ec:28:
80:8b:bc:c5:4e:2e:bf:fe:5c:0e:66:6c:4a:b7:c5:fc:09:14:
f1:da:3c:0d:30:18:99:28:ca:d2:02:03:41:8a:d1:17:d5:3a:
e3:bb:1d:e3:5a:53:10:01:60:05:00:1e:f6:06:4e:42:c3:ed:
e6:a5:d5:06:eb:86:00:23:71:bd:45:0a:5a:8f:ca:0b:1a:e9:
89:f0:c2:12:4c:7a:bb:96:3f:d7:fb:a6:42:70:c2:31:98:e6:
26:dc:a7:56:5d:0f:8a:5c:3d:bb:1a:35:17:77:e2:70:b7:8a:
3e:ce:1c:eb:7f:32:81:e7:b0:62:f6:9a:ee:01:81:0a:04:b2:
9b:68:34:29:e3:9d:87:a3:c7:7d:51:8f:00:b7:41:24:01:3a:
53:30:83:ef:10:21:21:03:76:5b:8f:11:d1:f0:92:59:2a:25:
0a:23:87:72:a8:7b:0d:20:00:6a:a4:00:62:48:c7:88:55:77:
b1:88:ca:65:53:bf:1f:5a:5f:2b:c6:0a:f2:96:88:f1:0b:a4:
f4:cc:28:7c:8b:31:01:c7:ef:c1:b0:73:af:86:e9:c1:ff:52:
89:13:a7:5c:8e:0f:02:79:0e:e5:b9:f0:c5:2b:e2:02:25:35:
63:bb:16:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:13 2023 by rpki-client on console-fra.rpki-client.org