Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/PxDg-qqOs4b_9gzINwd2o2hIaU4.roa
File: PxDg-qqOs4b_9gzINwd2o2hIaU4.roa (raw, json)
Hash identifier: 92/Vo8wa00TscYz9ww72waJq7Bp6Gq9pqCPvnAvXH0U=
Subject key identifier: 3F:10:E0:FA:AA:8E:B3:86:FF:F6:0C:C8:37:07:76:A3:68:48:69:4E
Certificate issuer: /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial: 0A3D
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/PxDg-qqOs4b_9gzINwd2o2hIaU4.roa
Signing time: Thu 15 Sep 2022 02:48:49 +0000
ROA not before: Thu 15 Sep 2022 02:48:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24167
IP address blocks: 2400:4500:0:1::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2621 (0xa3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Validity
Not Before: Sep 15 02:48:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3F10E0FAAA8EB386FFF60CC8370776A36848694E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:5d:05:7f:e3:ee:e2:4e:dd:51:bf:e1:3d:
77:b0:bb:13:9e:84:84:01:ae:94:ad:21:d7:2c:b5:
da:5d:10:6d:df:84:19:e1:19:19:a6:c9:8f:9a:de:
86:20:b6:3a:19:2d:3b:53:ac:67:a7:f1:6d:1b:bd:
e6:cc:84:cd:6c:d7:10:ce:b7:10:39:49:0c:cc:10:
b5:e9:87:ab:1b:37:59:72:85:e1:35:28:fa:59:6d:
26:f6:c9:76:70:59:91:09:cb:7a:be:ce:5b:37:2c:
34:02:ee:46:d8:55:72:26:4c:c3:4f:cb:cd:f7:09:
2d:c1:ac:8f:d3:15:49:38:5c:4f:ad:10:ea:46:32:
5d:71:39:80:a7:59:e2:20:29:a0:00:62:22:c6:71:
7e:c6:19:e5:47:d7:31:d3:a6:a0:63:50:62:60:2b:
21:db:62:1f:fc:7c:20:ff:44:fc:56:3e:1c:28:f7:
53:ff:9c:20:ee:6b:58:e5:19:ec:c3:f5:f0:80:0a:
11:65:37:87:65:47:ae:a0:2d:4d:12:3d:70:92:ca:
1c:a4:22:b1:43:f6:b2:ec:20:39:9c:1b:de:a2:a3:
c9:66:27:2b:a1:f3:8a:6e:eb:d5:14:e5:b0:fa:62:
e3:01:93:ef:37:27:49:f3:fe:9c:e2:25:e0:de:7e:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:10:E0:FA:AA:8E:B3:86:FF:F6:0C:C8:37:07:76:A3:68:48:69:4E
X509v3 Authority Key Identifier:
keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/PxDg-qqOs4b_9gzINwd2o2hIaU4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:4500:0:1::/64
Signature Algorithm: sha256WithRSAEncryption
d6:9b:85:22:b1:57:d7:06:7f:3e:dd:90:8c:9d:1d:31:7a:4b:
28:ff:a9:01:db:83:b2:77:d7:a3:b2:54:52:c5:fc:9a:73:6d:
05:42:3d:c8:59:4f:52:26:98:88:b6:5a:3e:e3:32:8f:76:0f:
c9:23:3b:3a:ae:02:e0:13:8d:ab:3a:f6:a7:18:f0:10:84:f6:
52:28:44:9d:cc:6a:18:ff:02:12:8d:31:62:d7:a6:b0:d3:22:
fb:27:0f:48:df:cb:1b:5c:bc:ea:7b:9f:8c:b7:24:28:9f:5c:
a9:48:bb:b8:44:ac:de:f9:4c:95:5a:37:9e:51:71:69:4e:1b:
e0:24:c3:a8:36:ac:72:a9:2c:78:03:b8:99:88:8e:ae:aa:90:
72:91:7f:0f:24:bd:6e:7b:02:40:99:be:c8:12:30:3d:9a:1b:
83:f6:9d:da:5c:2c:aa:28:0a:02:6f:1a:23:6d:c6:9c:f8:94:
0f:c8:88:1c:c8:25:91:62:36:10:15:f9:a3:b6:7c:ac:a6:c1:
6f:24:aa:24:45:09:57:f8:c0:bd:26:b8:ba:21:ab:37:95:f4:
f3:f5:3f:f4:20:82:e1:ce:8c:a9:00:f2:3c:57:ae:95:c8:5e:
2b:07:c9:9e:06:be:c5:78:2b:9c:a2:01:4f:c9:a7:f9:fe:2c:
35:ba:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org