Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/peKiZnZU-TWmh1gKpRyRqnoDdYo.roa
File: peKiZnZU-TWmh1gKpRyRqnoDdYo.roa (raw, json)
Hash identifier: hSr47ndJCsjLcbKR8ejRs2HpQI+ItGTAw7eYgI8ecgA=
Subject key identifier: A5:E2:A2:66:76:54:F9:35:A6:87:58:0A:A5:1C:91:AA:7A:03:75:8A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0B9E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/peKiZnZU-TWmh1gKpRyRqnoDdYo.roa
Signing time: Sun 07 Feb 2021 06:27:00 +0000
ROA not before: Sun 07 Feb 2021 06:27:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 221.169.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2974 (0xb9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:27:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A5E2A2667654F935A687580AA51C91AA7A03758A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:74:4e:7c:b8:c4:e5:ce:ea:67:ec:0d:cb:b4:
3c:cc:0b:50:7a:df:a2:d8:e5:a3:1d:f0:98:c2:68:
85:c9:6d:2f:9f:9b:51:0f:96:f3:00:5f:7e:b0:15:
36:bc:05:3e:b5:81:5c:e3:9a:65:10:93:ec:59:f8:
da:e7:5a:e4:2c:2a:2a:a5:7f:22:1f:1c:c8:00:59:
ed:5b:06:e4:e4:18:af:6e:a7:f2:ed:5b:7c:d2:77:
f6:af:d0:fd:e0:1e:62:79:bb:ad:c1:2f:0a:79:e3:
ae:2c:2e:b4:ba:88:83:28:8a:a0:ae:e7:b7:54:03:
79:63:64:8d:80:37:7a:84:02:37:01:68:d5:7b:5d:
7f:44:a9:27:bd:08:0c:21:e2:5f:0a:35:ab:b7:8f:
7a:31:ac:8c:e0:e2:ac:4a:a8:ed:f2:3c:0b:40:68:
e1:ce:37:3a:1b:85:22:fe:5b:a0:9e:79:78:0a:55:
05:1e:b6:18:3e:55:86:cd:8a:85:4b:72:6a:56:56:
f9:ca:9f:7d:7e:cc:e1:0c:fe:40:93:e2:3c:aa:33:
0a:97:9b:c4:c0:5c:af:4c:b5:87:b7:bd:ff:be:a3:
6b:0d:66:1c:79:76:81:a6:90:8b:60:9c:e2:e7:70:
6a:09:94:29:4e:79:e2:ac:07:a2:8e:97:3e:33:c1:
af:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E2:A2:66:76:54:F9:35:A6:87:58:0A:A5:1C:91:AA:7A:03:75:8A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/peKiZnZU-TWmh1gKpRyRqnoDdYo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
221.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:91:c5:36:16:48:02:31:62:29:0f:e5:48:ad:10:48:77:85:
3b:77:59:ff:66:40:f9:a3:a7:90:27:45:73:17:52:04:52:dc:
6f:ca:47:e2:dc:34:2c:d8:a1:64:76:5f:5b:b3:a5:5e:91:7f:
95:47:b9:39:41:df:e5:26:64:b7:05:39:a4:23:e6:00:b5:f3:
b9:82:a1:0d:40:ef:c7:a3:ba:d1:dc:8f:13:c4:5d:a1:5e:c9:
7f:01:93:62:5c:70:fa:e0:22:1e:92:b7:61:2b:95:9b:28:e7:
16:09:22:0f:46:09:fc:58:ce:27:2b:d7:d4:03:7d:50:84:f6:
8b:15:e3:2b:3a:d8:40:15:ef:bf:8b:f2:6f:23:f1:5b:92:f6:
9b:d0:53:b5:bc:d4:c3:25:9e:f1:6c:96:89:68:89:ea:9c:36:
a2:13:03:0c:f1:a8:72:1f:21:75:9d:9d:20:56:57:65:ca:c1:
b5:ac:1e:aa:92:d2:cb:ec:54:8d:e8:ff:66:f3:d6:1f:60:c7:
e4:8f:81:98:95:e3:1a:6e:16:31:80:f9:f3:a6:a4:59:8b:aa:
ce:e1:6e:98:d0:1f:c1:91:6b:3d:9e:a3:19:ab:01:ad:24:91:
b7:74:d6:32:44:1e:b9:b8:5e:bd:14:0a:e1:1d:69:55:14:a9:
93:af:8e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org