Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/vkeyR4-KvYkGYX9WlepkiJSTTF4.roa
File: vkeyR4-KvYkGYX9WlepkiJSTTF4.roa (raw, json)
Hash identifier: n+FX/8fYvBxltTgZrkL1H9xX2wAQobX07jP390n6Itk=
Subject key identifier: BE:47:B2:47:8F:8A:BD:89:06:61:7F:56:95:EA:64:88:94:93:4C:5E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0BBD
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vkeyR4-KvYkGYX9WlepkiJSTTF4.roa
Signing time: Sun 07 Feb 2021 06:33:14 +0000
ROA not before: Sun 07 Feb 2021 06:33:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 115.30.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3005 (0xbbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:33:14 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BE47B2478F8ABD8906617F5695EA648894934C5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:32:2c:da:76:ab:e4:b5:6c:ec:f3:e1:b3:
0e:23:22:78:f7:b0:b4:13:17:ff:92:21:ec:1a:a9:
00:8f:ca:20:40:8d:85:d5:e2:0f:7b:14:49:99:da:
ac:96:ea:05:0b:c7:09:fa:cc:bd:7e:c2:29:d1:9b:
bc:50:68:9e:be:ee:59:34:4e:c2:02:78:13:33:6f:
27:39:c7:d5:48:cb:8b:d6:e6:3a:88:a4:c7:1b:d8:
f1:55:a8:38:cc:ef:af:7b:a5:1c:2d:ce:46:eb:62:
cb:b1:2d:05:38:30:eb:fd:f1:7a:05:ed:d7:cd:35:
9a:39:7a:80:65:4f:85:ed:8b:1e:e9:42:10:06:49:
8e:ca:8a:92:02:08:cc:73:d1:e9:10:de:c7:22:8e:
c9:ea:fa:81:a9:f1:e4:b6:a3:d6:f2:5c:e0:47:73:
0f:70:ae:b7:52:59:82:3d:a7:4f:e8:2c:77:92:12:
94:c1:21:05:1c:20:39:a6:a6:a3:86:d5:48:d4:3c:
f2:d1:97:6f:11:e4:2d:6b:ae:10:73:9c:3b:bc:73:
2e:d0:13:37:15:da:c6:84:56:e7:55:ad:3d:25:8c:
9e:bc:eb:25:47:d6:84:fd:25:65:dd:3c:4f:80:61:
20:89:be:63:68:50:b4:c4:1e:78:f9:d5:48:a7:24:
1a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:47:B2:47:8F:8A:BD:89:06:61:7F:56:95:EA:64:88:94:93:4C:5E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vkeyR4-KvYkGYX9WlepkiJSTTF4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5f:c9:1a:ed:22:6a:88:c0:e6:dc:07:11:b5:f0:bf:9c:1f:ce:
a8:fa:49:21:28:90:ea:1f:07:d7:03:1b:0f:dc:6d:d9:c8:a6:
ee:b6:ad:1e:04:a6:59:6c:cf:ed:16:6d:1b:8a:ba:01:15:46:
4e:12:dc:d2:b5:49:dc:27:56:d6:85:fb:e3:70:f7:54:17:e8:
50:d5:57:dc:c6:1f:ee:8a:6f:28:b2:63:d8:a3:2d:75:cc:09:
35:63:18:bc:f8:42:f8:f3:e5:19:45:35:d5:84:81:1f:63:69:
4c:78:a7:b0:f8:7b:4f:07:bc:4b:30:27:41:64:9f:dd:5c:f8:
7d:06:b8:b1:d2:ac:8b:8c:9e:44:d1:95:e2:de:f4:99:f9:ab:
3a:61:d2:c4:e4:65:2f:0c:32:23:eb:5b:35:55:63:94:b7:89:
8c:27:6b:fc:1b:4c:c8:f5:e5:6b:2a:ac:8c:1e:d4:a4:b3:2e:
3d:30:aa:1a:6d:19:6d:9a:6e:c2:1d:d5:79:a9:23:52:4e:12:
1c:a2:62:a4:d4:d4:77:80:38:a3:48:ca:73:86:fb:09:d1:05:
9f:f2:27:60:9e:1f:0c:4f:ca:fd:e7:d0:d5:c3:06:85:45:8c:
d5:1d:09:58:76:6e:4d:49:a1:ad:c4:78:95:d7:6a:0b:20:ee:
4c:40:c1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org