Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/paBf9B9_HRg0Fe6_StDcXa_a46A.roa
File: paBf9B9_HRg0Fe6_StDcXa_a46A.roa (raw, json)
Hash identifier: A+Q3QqAY2vamdWWyLBG4AJWXu55EXW404h000C71hSE=
Subject key identifier: A5:A0:5F:F4:1F:7F:1D:18:34:15:EE:BF:4A:D0:DC:5D:AF:DA:E3:A0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C0B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/paBf9B9_HRg0Fe6_StDcXa_a46A.roa
Signing time: Sun 07 Feb 2021 06:45:26 +0000
ROA not before: Sun 07 Feb 2021 06:45:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 218.210.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3083 (0xc0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:45:26 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A5A05FF41F7F1D183415EEBF4AD0DC5DAFDAE3A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:70:a2:8b:0a:d6:11:64:4d:27:62:6f:cd:
23:7d:4b:88:32:56:97:2e:41:89:bc:19:4b:86:10:
f1:12:5a:4a:3c:a5:8a:ea:9e:99:3a:89:f9:06:e9:
8b:d3:c6:c0:2c:e6:e2:df:c5:95:18:97:61:1e:ea:
72:a3:01:d2:4f:da:2d:04:fd:60:c5:ab:ca:90:10:
2d:58:77:0f:89:c2:2e:c3:7c:8b:9f:c6:62:74:bd:
eb:c2:32:39:c6:8e:06:98:4d:cc:46:56:cd:89:e4:
44:a0:ca:35:d0:5c:b5:14:0e:50:d7:bc:c5:bc:55:
a7:07:9c:ff:c4:4a:b4:d8:c7:5c:19:31:7a:3e:09:
4c:92:75:c1:a9:bb:5a:64:1d:a4:c3:03:61:e8:8a:
17:0a:9c:ca:ae:97:ef:99:2e:18:65:5e:d5:df:d6:
25:95:0d:61:01:9a:37:3c:f8:bf:30:91:3b:73:d5:
40:9d:0a:97:94:1f:54:86:e5:05:9c:e7:75:4d:27:
f6:5c:cd:ff:a2:19:63:fb:26:d7:da:a6:1f:59:2d:
52:c6:95:28:3c:51:94:54:66:c5:7a:73:1a:1a:d5:
65:28:f4:ab:27:64:63:7c:3f:fb:86:18:88:09:3f:
80:22:29:e6:28:d2:81:93:45:c6:8f:bd:21:8d:52:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A0:5F:F4:1F:7F:1D:18:34:15:EE:BF:4A:D0:DC:5D:AF:DA:E3:A0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/paBf9B9_HRg0Fe6_StDcXa_a46A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/15
Signature Algorithm: sha256WithRSAEncryption
4a:2e:45:1a:2b:30:51:d4:a6:02:04:af:ae:32:4a:f3:1d:27:
f0:c4:c8:9c:8e:4a:62:90:f5:b6:dc:3f:72:c2:d6:6f:3b:b6:
9d:02:31:8c:60:01:6c:42:43:fd:c2:c3:a2:e0:5b:08:cc:59:
f0:38:8b:a0:7b:bf:f1:fe:0e:18:65:5e:62:72:4c:cc:cb:f2:
7a:0a:54:5c:ff:87:00:38:c8:d8:a2:9d:6f:3a:50:50:3f:29:
45:c4:ca:45:a4:e4:18:3c:ea:22:8a:b1:12:bc:7d:e6:c6:92:
65:8f:7a:43:9f:91:07:c9:91:26:99:f6:10:a8:69:57:e0:f0:
dc:63:74:2e:ca:ad:e9:1c:59:19:1d:6a:48:44:9b:ff:f8:b9:
6b:2a:e2:94:85:18:23:07:e3:e0:d1:36:ce:f2:6d:cc:3e:b4:
92:3a:69:e5:38:b6:ee:72:56:f5:ab:d0:6c:78:9d:3d:72:93:
db:d2:a1:72:f2:5c:31:e8:82:64:aa:66:9a:b2:34:f8:4b:4d:
75:12:12:3a:77:ca:49:2c:b5:8f:02:c3:f4:ff:22:03:67:55:
47:9e:ee:e5:7f:eb:36:69:18:b2:0e:fc:21:ca:68:31:11:4c:
fa:36:73:ad:d6:7a:b4:ad:bd:c8:17:b4:cd:54:fa:ad:dd:24:
34:7f:a5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org