Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/wK5T84gE-20VbT6GN9eSjSFI3So.roa
File: wK5T84gE-20VbT6GN9eSjSFI3So.roa (raw, json)
Hash identifier: ZA6lz5JkcowSoBjwbn0P7kJfRP0OOzYv+h9YlY07SFw=
Subject key identifier: C0:AE:53:F3:88:04:FB:6D:15:6D:3E:86:37:D7:92:8D:21:48:DD:2A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0894
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wK5T84gE-20VbT6GN9eSjSFI3So.roa
Signing time: Tue 29 Sep 2020 09:52:10 +0000
ROA not before: Tue 29 Sep 2020 09:52:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 122.147.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2196 (0x894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:10 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C0AE53F38804FB6D156D3E8637D7928D2148DD2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:b8:ae:e8:fc:90:0b:c6:82:d6:5e:5e:d0:
65:d1:df:d5:ae:e9:1d:7f:df:0f:b1:ce:2d:62:86:
40:f2:63:15:4a:2b:c6:2c:5a:cd:0b:3a:ff:52:8e:
65:c3:4c:b9:7a:35:22:c1:f5:0e:f6:f0:2d:08:40:
ea:cf:8d:94:b0:d4:98:9c:6f:e5:3b:41:94:94:b3:
1b:50:c4:01:aa:01:93:a6:7d:94:e3:9c:94:23:cf:
fa:53:24:d8:f3:af:02:86:81:54:3f:9e:40:d3:04:
67:98:1b:83:55:9b:9d:a0:32:29:60:ad:7b:de:da:
ac:02:82:26:07:70:55:8c:bd:e2:aa:c1:94:4e:3e:
14:09:89:16:6e:1e:d2:f3:77:8a:7b:c1:e6:a8:20:
5e:be:97:a1:f1:dd:97:db:9c:61:ee:b6:30:99:b1:
ff:df:35:d9:23:20:c1:09:b5:cd:27:e5:d1:aa:99:
d5:f3:2c:a5:35:b1:79:af:2a:77:2d:d0:3e:c8:51:
94:7f:22:ff:3d:77:68:cf:37:59:f8:63:b3:d7:22:
5b:89:a0:f8:f6:6d:1e:43:ca:1b:c1:0d:eb:cd:31:
92:70:c9:31:5c:b7:64:b5:3e:c8:e4:d9:47:3b:02:
50:62:d1:85:7d:cb:c2:68:97:34:81:ae:11:bf:64:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AE:53:F3:88:04:FB:6D:15:6D:3E:86:37:D7:92:8D:21:48:DD:2A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wK5T84gE-20VbT6GN9eSjSFI3So.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.160.0/19
Signature Algorithm: sha256WithRSAEncryption
be:79:9a:c3:69:5c:a8:d9:d7:f4:c9:23:be:5e:ed:dd:03:04:
00:2a:8d:dd:89:46:2b:ec:c9:4a:59:dc:0a:5f:7d:73:6b:f9:
69:fe:70:ea:3b:9c:d8:04:30:fa:8a:2b:ef:c6:12:82:57:f2:
c7:97:72:9a:15:fc:30:59:ef:19:e2:df:26:7a:aa:b3:18:38:
62:b7:f1:05:42:c8:b5:96:9b:96:1a:86:95:6f:6b:90:a2:45:
42:dd:d0:fb:23:88:62:f4:fa:7a:8f:2c:ed:d1:b8:46:f3:01:
08:e1:f0:56:d9:9d:5f:37:46:4c:48:89:34:f5:01:57:0f:45:
21:65:31:eb:77:70:54:86:5e:04:96:78:55:e8:ea:4b:3b:9e:
c4:a1:27:3e:f3:c8:37:06:c1:da:35:bf:5c:1d:18:45:ef:3b:
e9:25:ce:15:77:0c:24:d6:b7:3b:4c:ae:e2:18:54:80:5a:9d:
51:27:3c:c1:24:75:75:20:ca:5d:71:e2:f5:89:a2:a9:94:34:
3c:1a:89:40:7c:a1:05:54:1d:80:44:32:92:ae:8e:f5:dc:d7:
b1:b1:ce:0d:7c:32:ec:08:fd:10:3f:0f:2a:bf:1c:0f:1b:ab:
02:01:03:bb:34:05:71:ea:e7:e4:3d:61:3f:d2:8d:b2:eb:ac:
db:e1:02:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:13 2023 by rpki-client on console-fra.rpki-client.org