Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/L7V8A04_qBY996ZrwXR4U7bYYcw.roa
File: L7V8A04_qBY996ZrwXR4U7bYYcw.roa (raw, json)
Hash identifier: 6NqcYJVwDQ0kWO/p79ib/rGUcUshZjQE52MvEETUbfg=
Subject key identifier: 2F:B5:7C:03:4E:3F:A8:16:3D:F7:A6:6B:C1:74:78:53:B6:D8:61:CC
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 07A3
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/L7V8A04_qBY996ZrwXR4U7bYYcw.roa
Signing time: Tue 29 Sep 2020 10:03:16 +0000
ROA not before: Tue 29 Sep 2020 10:03:16 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9244
IP address blocks: 2403:ee00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1955 (0x7a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 29 10:03:16 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2FB57C034E3FA8163DF7A66BC1747853B6D861CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:cb:33:25:55:f0:6d:ab:d1:7f:a9:5e:f5:
bc:ed:34:a0:fe:56:b4:02:c2:e9:2a:b5:03:0c:97:
4b:b5:1f:8c:74:43:78:f7:a4:32:44:08:7b:8a:46:
0a:ba:a0:44:99:e0:34:c0:4a:cf:b5:67:9e:26:d6:
81:0a:78:d8:0b:31:4e:c6:09:50:ca:78:c3:66:4e:
92:34:be:ab:13:1d:9f:d9:99:6f:bc:3c:d3:fb:31:
72:73:e9:8f:fb:6f:a7:24:51:2c:0c:ae:15:93:ba:
d1:ca:c3:65:fd:40:39:93:99:38:51:4c:86:cc:39:
94:8f:69:9f:05:1f:64:9a:a2:92:2c:90:26:64:d0:
5f:d7:82:dd:a9:b8:e7:6a:2c:1f:74:d8:f4:65:49:
88:cf:7a:ec:cc:cf:14:3a:96:c0:57:45:fd:48:9c:
7c:ec:96:0e:fa:7e:99:ef:c7:7f:62:26:64:a0:ac:
18:b5:db:08:d7:67:33:c3:68:cc:f4:43:8c:62:3e:
83:2c:fd:0a:35:e4:9c:b0:a5:2c:c5:49:ac:0a:a0:
72:68:c7:5d:ba:62:99:e7:ad:d0:d9:b5:ce:c2:9e:
2a:f6:82:a1:f9:e7:2d:f2:23:b1:e7:42:0f:1f:cf:
a5:f2:88:09:26:cb:80:de:34:2b:d9:73:8f:90:c2:
48:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B5:7C:03:4E:3F:A8:16:3D:F7:A6:6B:C1:74:78:53:B6:D8:61:CC
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/L7V8A04_qBY996ZrwXR4U7bYYcw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
79:7f:ec:3e:d8:ed:89:f8:08:b5:4e:45:fe:16:3d:67:e5:0e:
96:2d:40:49:9c:1c:18:17:89:1b:40:f1:4f:e3:7f:7b:cb:2c:
ff:c4:9e:f6:9c:8d:76:ad:ef:9d:22:7f:e9:c7:d0:64:17:08:
bc:e3:04:3b:66:6d:62:53:ae:3a:e2:9d:3c:b8:8a:51:60:a4:
2e:fb:4f:98:ea:3c:66:9e:e8:b6:cf:99:e1:a0:f7:20:99:69:
d8:cd:02:72:e7:04:66:3b:8f:ce:f5:09:44:72:87:e2:f6:17:
46:6a:5c:0b:89:f9:d7:81:88:5b:b9:8e:c6:12:c5:f7:a2:28:
bc:2a:84:ef:06:9c:fb:3d:a0:9f:b1:ea:82:89:56:d6:aa:a6:
a3:c9:da:51:56:83:b5:e4:e3:86:19:79:2b:df:d4:25:26:c3:
3a:3e:be:ba:a0:db:61:ac:4a:72:17:68:b4:0b:df:79:00:f8:
62:2b:17:56:5f:2a:8f:ee:47:fd:85:a6:d5:36:04:b8:62:37:
31:31:85:ca:84:8a:ac:92:22:1e:ef:64:3a:a8:60:0a:01:e2:
87:60:08:8c:15:5b:c4:b9:5f:61:04:81:b2:c6:3a:7f:8a:b4:
bf:1b:70:bc:0b:9e:eb:e6:45:85:ba:f2:09:56:df:c9:f8:11:
a1:7c:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org