Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/vf_zqMmz9P6w6fodmEI4wjuiY_8.roa
File: vf_zqMmz9P6w6fodmEI4wjuiY_8.roa (raw, json)
Hash identifier: 98eXCng40QR/3a37mO+gl+sqYl1rYcY+xRRF2NdAb9I=
Subject key identifier: BD:FF:F3:A8:C9:B3:F4:FE:B0:E9:FA:1D:98:42:38:C2:3B:A2:63:FF
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0D2B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vf_zqMmz9P6w6fodmEI4wjuiY_8.roa
Signing time: Sun 07 Feb 2021 11:48:47 +0000
ROA not before: Sun 07 Feb 2021 11:48:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131586
IP address blocks: 175.183.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3371 (0xd2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:48:47 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BDFFF3A8C9B3F4FEB0E9FA1D984238C23BA263FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:f9:ce:c0:98:65:45:b9:ae:1d:0e:e4:35:
fa:fd:69:48:9c:48:03:eb:76:f1:59:df:b6:6b:15:
14:1b:e8:34:94:fc:fb:7d:43:70:c0:de:c4:95:37:
90:9b:25:9f:21:de:39:14:ca:1c:78:a3:a9:76:05:
ad:ff:28:42:d5:68:f2:50:02:8c:ea:78:ad:41:76:
1f:1d:8f:03:86:03:6c:e0:37:27:05:c7:62:04:dc:
8d:a2:d1:ca:91:21:29:c2:56:30:09:14:de:92:b6:
03:2d:7e:79:e5:23:d6:1d:f7:d5:ef:cc:79:0a:dd:
c8:fd:8f:4b:ec:87:06:a4:1d:3a:55:05:ba:32:54:
36:27:ff:ce:88:ad:a0:cc:36:ae:d2:4d:67:7f:58:
da:42:c9:fd:bd:3b:4d:d6:7a:63:ed:89:d3:e7:20:
7e:6d:40:a7:dd:56:97:b9:89:7a:20:21:47:54:e7:
df:89:31:72:b0:f1:37:68:6c:79:f8:4a:04:00:e8:
b9:6b:e1:12:27:c3:bf:e4:8a:ef:c0:ae:f6:3d:7d:
56:c9:ad:1b:95:56:76:ca:5d:42:81:33:19:7c:c7:
bc:4c:2b:c2:fa:b4:87:25:c8:b2:58:32:93:07:9c:
52:3e:33:5d:c5:18:cf:59:f5:78:60:0a:f2:89:b6:
f0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FF:F3:A8:C9:B3:F4:FE:B0:E9:FA:1D:98:42:38:C2:3B:A2:63:FF
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vf_zqMmz9P6w6fodmEI4wjuiY_8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.136.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e1:9b:06:54:5c:42:67:74:43:3c:b9:ac:69:20:76:6e:e0:
fd:03:44:35:a6:4d:a7:b1:36:dd:99:aa:71:87:b1:a7:01:56:
31:5b:5f:65:bc:6a:32:f9:11:7c:df:da:6a:a9:97:6a:c2:55:
5e:9f:d8:a8:a1:ef:c0:59:c1:00:3f:2d:c7:54:76:27:ee:f0:
d3:f5:ad:fd:e6:75:63:26:83:07:34:a7:79:6f:12:f6:aa:3a:
44:1b:66:dc:2e:40:b1:dd:9f:72:4d:91:5a:6a:51:9b:07:4f:
03:a0:45:51:62:bd:27:3c:ed:47:72:92:d5:2b:bf:25:d9:60:
6d:29:77:e5:35:61:e3:f9:92:c0:49:f1:4f:d0:fb:8a:10:bc:
9e:c9:d0:d0:e8:0a:1a:8c:98:49:28:0b:3b:df:38:97:72:99:
bf:45:15:7f:b5:f2:6e:85:74:ce:b0:9d:70:f9:ea:56:fa:67:
17:49:57:6d:2f:9a:52:59:b9:79:1b:23:a8:06:d2:37:93:94:
d4:22:ed:34:71:7d:6f:42:47:3e:1d:4d:f4:a1:6a:e3:d2:a0:
44:a3:e0:5a:e4:3b:92:a9:dd:8d:6b:01:b0:a2:3f:82:2a:82:
63:37:9c:63:14:05:b2:33:49:68:9f:22:ed:48:20:78:dd:eb:
8f:eb:52:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org