Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/-Ve31zcQjrrLBYCoT8mYkvOQebU.roa
File: -Ve31zcQjrrLBYCoT8mYkvOQebU.roa (raw, json)
Hash identifier: FKuTup3Ko0DO9lOiuCJDT3h6/GFuGyEf3rJm8b8Vp3w=
Subject key identifier: F9:57:B7:D7:37:10:8E:BA:CB:05:80:A8:4F:C9:98:92:F3:90:79:B5
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 016D
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/-Ve31zcQjrrLBYCoT8mYkvOQebU.roa
Signing time: Sat 20 Feb 2021 06:47:22 +0000
ROA not before: Sat 20 Feb 2021 06:47:22 +0000
ROA not after: Tue 05 Oct 2021 04:04:36 +0000
asID: 212057
IP address blocks: 2406:8dc0:2251::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Feb 20 06:47:22 2021 GMT
Not After : Oct 5 04:04:36 2021 GMT
Subject: CN=F957B7D737108EBACB0580A84FC99892F39079B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:8d:42:fd:1b:a7:c0:fb:b9:84:1e:f6:4b:
34:e7:69:e5:39:d9:a0:42:d6:06:66:4e:77:da:e6:
de:25:11:3d:e2:c5:84:86:cb:45:62:1e:0b:10:60:
b0:3b:09:3f:b9:84:01:c9:ee:c6:c0:6a:1a:22:ad:
34:2c:ab:b1:33:b8:df:b0:a0:15:d4:63:ea:e6:6e:
58:d6:a9:d6:40:ee:e1:36:e3:4a:89:ea:9a:bd:98:
fa:c4:d3:ac:df:04:8d:5e:b6:7a:90:25:cf:cc:44:
24:ff:7e:4c:0a:a5:a4:c0:7f:92:9d:e4:da:75:36:
cf:c5:e6:4e:13:60:9d:ff:57:62:84:c6:d5:22:40:
3f:9d:c0:94:f0:57:57:ca:ce:32:9f:b5:78:81:69:
28:1f:aa:3e:9e:80:3d:0f:e4:dc:29:d2:fe:e4:78:
f5:bf:63:6e:af:2f:ad:3c:e6:88:b8:0e:aa:b9:11:
25:30:88:98:07:57:15:44:6f:23:b2:fc:ad:18:36:
07:b8:df:c8:54:f8:71:59:13:c7:a2:54:9f:67:63:
53:02:26:4d:ac:a6:d7:bc:aa:22:98:31:9e:28:9d:
3c:ba:ee:71:d7:ef:e8:ba:83:0f:4e:b8:b5:d4:e2:
8f:d8:ff:5e:cf:fa:83:c6:44:d8:5b:4d:80:6a:ca:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:57:B7:D7:37:10:8E:BA:CB:05:80:A8:4F:C9:98:92:F3:90:79:B5
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/-Ve31zcQjrrLBYCoT8mYkvOQebU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:8dc0:2251::/48
Signature Algorithm: sha256WithRSAEncryption
80:e6:91:62:2a:c8:59:70:91:97:49:80:c6:1f:2b:34:64:fa:
99:37:ce:3d:7f:1a:ea:4a:a2:0e:22:fe:7e:52:75:9b:22:fe:
19:35:0e:bd:dd:73:30:51:7b:72:e4:4a:97:5c:43:17:61:44:
be:02:74:43:6d:cf:36:b6:d7:d2:f4:88:85:2e:b8:bf:86:32:
3c:88:c4:50:05:8b:9e:9f:95:19:b6:47:76:c7:d8:66:a2:4a:
34:06:b3:dc:7d:81:86:39:d8:3e:e4:e2:c5:db:a8:27:9d:8e:
31:81:2e:9c:54:7d:ee:51:3b:33:5a:a8:60:85:22:c8:3a:55:
88:8a:f2:8a:47:cc:be:7c:c1:10:1a:6b:5c:1c:44:af:91:ed:
37:86:93:d9:62:76:81:4e:17:32:91:85:35:fb:18:75:ab:54:
ad:fa:4c:14:e0:f1:65:81:f7:c7:d8:01:f0:03:aa:1f:8b:4e:
01:e7:b3:e2:f8:39:79:6f:a7:ec:79:67:5f:8d:4a:f6:96:c6:
7b:8d:42:ef:91:29:20:da:da:86:a2:fe:99:bc:47:f6:fd:fd:
19:fc:00:7a:00:1d:e9:78:ee:30:bc:c0:f7:ac:a0:53:52:cb:
5f:d4:02:e7:4f:e7:cf:70:65:84:fe:db:2b:3c:48:36:18:e0:
9a:86:3e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:58 2024 by rpki-client on console-ams.rpki-client.org