Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIH/g_8HAUinNAg7scNK0Qj5MsXrIcs.roa
File: g_8HAUinNAg7scNK0Qj5MsXrIcs.roa (raw, json)
Hash identifier: NZ+IcmW+ewWzoLuDknGFy/jv/AeoGEFZ+FRVwgZSp1c=
Subject key identifier: 83:FF:07:01:48:A7:34:08:3B:B1:C3:4A:D1:08:F9:32:C5:EB:21:CB
Certificate issuer: /CN=2D7204617354D70523B6F65A270712B6B19D815E
Certificate serial: 0967
Authority key identifier: 2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/g_8HAUinNAg7scNK0Qj5MsXrIcs.roa
Signing time: Wed 29 Sep 2021 02:53:11 +0000
ROA not before: Wed 29 Sep 2021 02:53:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 211622
IP address blocks: 2403:7f40:e000::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2407 (0x967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D7204617354D70523B6F65A270712B6B19D815E
Validity
Not Before: Sep 29 02:53:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=83FF070148A734083BB1C34AD108F932C5EB21CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a4:e2:c6:9a:3f:b0:aa:56:7c:35:a7:02:4a:
60:ac:a6:18:82:4e:db:a1:9e:09:6e:46:d4:d2:fe:
b5:38:67:ef:68:1f:cf:d6:8c:78:ab:a7:9e:06:d5:
21:e2:19:92:9d:0b:c6:28:69:c4:80:1f:41:67:df:
7c:a6:ad:b7:4b:57:a4:bc:d6:85:fe:7a:b0:74:0f:
f3:10:0c:94:3c:53:fe:92:be:5f:3a:ce:07:89:91:
03:9f:42:08:31:be:47:ac:2b:65:dd:24:2a:dc:cc:
8b:70:8a:a7:96:95:21:8b:b1:84:ab:70:f2:a5:18:
aa:c0:14:70:28:0b:fd:ae:6f:56:4d:c3:8b:93:16:
34:8a:e3:63:4d:5a:15:3f:ed:e1:85:c4:4a:b2:31:
2f:20:ad:c3:de:87:4e:13:a8:64:ee:a4:a7:c5:98:
92:49:b5:2a:0b:ae:a4:26:6c:b5:bd:0a:cc:a0:d5:
10:7d:87:70:21:6b:37:ad:b8:71:b5:4e:78:67:23:
55:3b:d2:0f:f1:63:c8:8b:b3:2b:f7:7c:bd:55:3f:
78:c0:79:9b:4a:be:a3:c8:56:e6:1d:3e:a2:0e:d7:
73:cf:9e:a8:36:54:fd:48:68:87:c4:f6:9f:cf:d3:
82:c3:68:bc:d3:81:09:92:53:76:b8:ca:c6:75:13:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FF:07:01:48:A7:34:08:3B:B1:C3:4A:D1:08:F9:32:C5:EB:21:CB
X509v3 Authority Key Identifier:
keyid:2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/g_8HAUinNAg7scNK0Qj5MsXrIcs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:7f40:e000::/48
Signature Algorithm: sha256WithRSAEncryption
2c:40:d9:d3:2f:5e:66:00:5c:ff:5c:8e:9c:e5:c1:cf:2b:27:
12:c8:23:44:63:84:c1:41:37:b4:df:de:b8:5f:d1:88:46:ab:
fa:a6:85:c8:70:32:4b:d3:98:b3:62:c2:34:9b:16:58:0d:f1:
de:e3:8c:4e:aa:4c:ce:9e:2f:67:b4:da:c0:88:25:bc:98:fe:
75:e8:63:e5:d1:76:a8:41:c1:82:4d:da:db:34:29:19:be:03:
09:f9:56:0c:97:dd:b0:ed:95:07:d7:3b:93:3d:c4:6c:a8:e6:
f7:6d:8c:ca:81:ed:19:02:4b:9f:26:bc:3d:9f:3f:3b:d4:29:
17:8a:a0:cd:c5:96:ca:c0:62:e8:56:03:25:e1:0b:a9:5d:60:
5b:df:2f:f1:30:bf:ba:c0:ad:4f:1b:00:1a:00:fd:87:66:ac:
0e:eb:9b:5b:64:6c:b4:cc:6d:12:8b:69:2d:13:74:09:c6:2e:
0c:b5:f3:41:f7:88:5e:5f:b9:d0:4d:11:fd:1b:ec:e3:e2:e3:
08:4e:32:6b:a1:87:e9:c3:cf:69:9d:e1:fe:2a:b3:c5:e6:64:
70:9b:5a:d5:96:82:08:4b:75:38:79:d4:17:a9:d4:b1:31:b5:
57:da:da:59:c0:ab:c8:65:03:b8:e7:44:3d:87:97:3a:93:99:
f9:7a:45:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org