Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/151hSOlY1A0DRCAkuKJ5a0PHveo.roa
File: 151hSOlY1A0DRCAkuKJ5a0PHveo.roa (raw, json)
Hash identifier: kJeT2g9N4HqacIfHnIz5W52RjSCuS2rrdN3G3tqQbDs=
Subject key identifier: D7:9D:61:48:E9:58:D4:0D:03:44:20:24:B8:A2:79:6B:43:C7:BD:EA
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0CEF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/151hSOlY1A0DRCAkuKJ5a0PHveo.roa
Signing time: Sun 07 Feb 2021 11:46:00 +0000
ROA not before: Sun 07 Feb 2021 11:46:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 122.147.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3311 (0xcef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:46:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D79D6148E958D40D03442024B8A2796B43C7BDEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:f5:01:d9:ee:dc:61:7a:5c:0d:c4:e9:a4:
cc:1c:2d:4f:9c:43:1c:34:80:e9:5b:f3:55:83:ca:
ce:ff:5f:24:72:a2:d1:9f:85:70:c4:60:98:9a:6e:
a3:45:0a:57:a4:fa:a5:23:7a:11:11:45:5e:e0:63:
7f:51:e0:be:4f:f7:b4:8d:e9:22:01:b0:79:70:d3:
7d:5b:dc:33:55:6a:a2:86:f5:4d:dc:7d:00:22:24:
b1:00:a7:0b:eb:c9:ab:42:eb:4c:e9:a0:c1:a0:00:
82:e7:61:8f:ae:d3:77:b9:85:89:f8:15:6f:a9:32:
07:ec:aa:79:a0:91:0d:5e:c1:94:b6:da:56:2a:7c:
e7:86:71:08:29:c9:3b:80:ff:f7:fd:08:78:29:38:
9d:62:c3:77:d8:76:52:28:fe:24:86:a5:14:16:bb:
68:ae:50:4f:bd:88:09:18:f2:cc:32:15:e9:f1:b1:
4c:13:e7:f0:f2:08:ab:a4:25:e3:0e:da:fb:93:e8:
9f:ab:5c:97:d5:6f:bd:8f:5b:48:65:2d:37:2f:72:
8b:e2:58:f8:4f:96:d9:9e:77:dc:ba:44:e0:b2:61:
0b:c6:de:21:ac:83:0e:99:2d:8c:32:a7:ae:53:8e:
d6:32:5a:8d:e6:68:66:70:c6:ee:38:b4:09:a8:47:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9D:61:48:E9:58:D4:0D:03:44:20:24:B8:A2:79:6B:43:C7:BD:EA
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/151hSOlY1A0DRCAkuKJ5a0PHveo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.32.0/19
Signature Algorithm: sha256WithRSAEncryption
59:5e:4c:5d:8c:12:a2:0c:55:71:96:0f:69:23:08:74:c3:37:
8b:4e:ff:ce:21:df:b8:d4:ec:c0:d7:1a:31:ce:c9:18:d2:0f:
37:d2:6f:02:f6:9f:e5:23:84:39:ba:be:ee:01:41:89:0a:71:
05:23:06:89:12:dd:a1:92:a2:6b:90:39:47:6e:28:c3:aa:d3:
bf:13:53:b8:bf:67:de:3d:a9:12:22:30:ff:f2:83:08:c0:44:
42:96:b7:62:0b:60:27:f3:b6:bf:80:5e:9e:2c:e4:0b:85:b1:
4a:3f:af:4f:df:b9:28:86:c7:b4:25:90:62:0c:27:d9:45:18:
e1:13:4d:a4:84:23:a3:0c:c9:9b:7a:05:4a:19:01:77:52:3c:
c7:e9:1e:e9:a8:17:40:b3:22:06:52:39:e9:2e:e4:ba:61:0e:
99:ce:7d:40:15:4b:60:e8:b8:01:c2:bd:70:20:b1:6c:1a:35:
c5:00:90:4c:24:2b:f4:e1:b7:21:3f:08:cd:9b:83:99:39:ad:
32:ae:a2:c1:0b:ac:53:d5:34:0e:03:eb:c6:63:e2:9e:50:8d:
86:a0:fa:40:ce:a4:4a:28:ce:b5:3e:03:f4:10:4e:3f:0d:50:
65:3e:a8:b7:fc:89:09:6d:37:ab:b5:29:fc:74:c0:49:d8:a9:
7a:76:4d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:08 2023 by rpki-client on console.sobornost.net