Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/uzQxZotcFpzAhGyzcR3focnzrEI.roa
File: uzQxZotcFpzAhGyzcR3focnzrEI.roa (raw, json)
Hash identifier: 9BuMENhGZSzKdiT34YDJQWOUcoWVkr/Sb7iAIdWIjcg=
Subject key identifier: BB:34:31:66:8B:5C:16:9C:C0:84:6C:B3:71:1D:DF:A1:C9:F3:AC:42
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0D15
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/uzQxZotcFpzAhGyzcR3focnzrEI.roa
Signing time: Sun 07 Feb 2021 11:48:13 +0000
ROA not before: Sun 07 Feb 2021 11:48:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 122.147.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3349 (0xd15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:48:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BB3431668B5C169CC0846CB3711DDFA1C9F3AC42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1c:67:2a:8a:74:2d:aa:16:4a:00:cc:03:96:
27:c3:76:f5:f2:29:a5:76:dd:33:46:6e:7b:ca:dc:
df:6c:15:b0:d5:48:1c:0e:e4:f6:8f:cc:44:97:0d:
fe:d4:5d:fe:ce:35:aa:02:80:33:b0:87:aa:b9:65:
ef:3e:59:ce:37:90:15:ba:b4:6c:29:7f:e1:72:96:
16:05:52:de:06:a4:9d:60:8c:92:1f:2b:e9:47:60:
38:8b:3d:47:72:e2:4b:1b:24:e3:f2:ab:63:fd:7c:
7f:67:89:9e:6b:89:71:5a:59:ea:bc:00:98:18:8b:
3d:55:c6:5a:01:5e:54:5e:e0:b1:34:59:e4:bd:ee:
9a:09:1a:89:28:3b:fc:29:81:a7:77:85:88:77:d5:
25:70:c3:6a:14:59:c5:ff:e0:34:1d:8b:77:81:01:
66:e0:9d:60:8c:81:87:5c:9c:37:d4:8a:c7:b7:04:
1f:8d:23:70:70:5c:ec:b9:6e:9b:77:8e:a0:1b:f1:
db:6f:77:fb:fb:49:0d:bb:7a:55:bd:6b:4d:ad:1e:
68:7d:4e:ec:a4:a9:21:58:8d:58:42:1e:d1:d8:7e:
ab:5b:95:52:ef:a4:e4:67:49:35:7a:52:0d:28:9a:
fb:11:9d:23:a6:8c:7b:58:fb:8b:be:73:22:20:a1:
54:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:34:31:66:8B:5C:16:9C:C0:84:6C:B3:71:1D:DF:A1:C9:F3:AC:42
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/uzQxZotcFpzAhGyzcR3focnzrEI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.128.0/17
Signature Algorithm: sha256WithRSAEncryption
72:5c:a4:eb:cb:5c:15:5e:1e:02:a1:b5:fc:90:d3:f5:82:08:
da:37:4f:5a:cf:31:ec:50:c0:e5:62:50:2d:c0:0d:6f:50:0f:
45:83:f5:45:36:07:ef:5a:d9:ed:00:df:4b:e5:9f:fc:1d:c0:
ec:85:19:ff:e8:fc:6d:86:63:b2:87:a8:e5:da:eb:f9:21:b6:
d0:ee:04:e7:ad:96:51:2a:1e:73:59:8e:73:30:a3:3c:11:3e:
9e:17:33:1d:f2:c3:15:ad:fa:22:57:36:7a:d7:cf:7b:e7:5e:
08:e4:6a:c3:b1:ef:72:33:48:1a:79:3d:42:94:88:05:f7:d9:
45:b8:cb:3a:d6:8b:4b:21:99:72:dc:9a:5c:61:a8:1a:5a:8c:
e0:1b:51:83:5a:48:8d:08:5d:18:77:dd:1d:c2:8e:88:46:f1:
ae:37:d4:58:e9:55:48:b6:a2:ac:fb:ba:fc:63:f1:dd:5d:ff:
96:70:c9:7e:a4:49:7c:2d:45:11:e2:89:fb:5a:70:2e:54:c7:
36:70:fa:01:a9:66:72:20:81:38:81:f5:14:1c:91:5d:f1:54:
18:dd:99:1c:c5:78:36:ff:b7:a1:61:dd:98:fa:f1:05:de:a4:
41:b7:84:d5:87:d7:2f:52:a9:cb:03:ce:3c:00:92:7a:e2:34:
c4:6e:07:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:13 2023 by rpki-client on console-fra.rpki-client.org