Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/T1fabx1p6-WKmEsfdmYhBmQVAjo.roa
File: T1fabx1p6-WKmEsfdmYhBmQVAjo.roa (raw, json)
Hash identifier: qWh2+FWB1ka7WtmXVAOcqS9tRu1bY+pTRbHZ/ogrHnA=
Subject key identifier: 4F:57:DA:6F:1D:69:EB:E5:8A:98:4B:1F:76:66:21:06:64:15:02:3A
Certificate issuer: /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial: 0953
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/T1fabx1p6-WKmEsfdmYhBmQVAjo.roa
Signing time: Wed 29 Sep 2021 02:51:30 +0000
ROA not before: Wed 29 Sep 2021 02:51:30 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24167
IP address blocks: 2400:4500:0:2::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2387 (0x953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Validity
Not Before: Sep 29 02:51:30 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4F57DA6F1D69EBE58A984B1F766621066415023A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:e2:9c:60:39:86:66:c3:f9:a9:31:ed:d2:
d6:7a:9d:51:1e:10:bd:c7:f0:32:f5:0b:e8:70:8b:
89:15:c4:40:45:3a:b1:0a:21:f0:f2:eb:20:ef:92:
2c:83:9f:a8:96:20:f3:85:7d:a5:37:20:35:41:4b:
c1:66:37:ca:99:29:d0:71:7a:cd:48:00:01:3b:8b:
25:fa:18:10:f7:0a:00:b8:b0:4a:26:81:fd:32:cc:
81:76:ce:38:a9:e7:48:0a:51:3f:b4:c3:c6:61:72:
2f:fb:c6:06:c9:ad:79:b1:da:b1:8a:de:ba:0b:e9:
97:de:ab:74:0a:8a:8e:8d:cb:64:cb:20:38:ae:c6:
12:d7:fd:05:f9:16:0c:4b:c8:02:09:ba:7b:c7:ed:
40:bb:d5:1d:de:ba:90:8e:71:94:7f:05:c7:f9:32:
85:3d:f3:0d:4c:87:df:07:b7:90:2e:d5:6f:3c:6b:
f4:03:a9:25:1f:b0:45:fa:fe:f7:75:0b:12:77:b3:
dc:2c:bc:68:63:0a:d0:56:bf:85:67:4a:79:26:66:
c6:46:07:2d:28:92:a6:05:e1:ca:b9:b0:a1:1b:91:
a5:89:e4:79:c9:79:0e:94:b2:85:1d:b5:d3:0d:4c:
f6:34:a5:63:f8:21:ce:62:8f:83:53:66:b1:ac:1f:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:57:DA:6F:1D:69:EB:E5:8A:98:4B:1F:76:66:21:06:64:15:02:3A
X509v3 Authority Key Identifier:
keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/T1fabx1p6-WKmEsfdmYhBmQVAjo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:4500:0:2::/64
Signature Algorithm: sha256WithRSAEncryption
93:8c:68:1d:57:22:06:e2:45:27:f5:c0:25:0b:15:6c:d3:82:
80:3a:a0:ed:56:d5:9b:5d:9d:f6:2b:92:09:90:61:50:0d:e4:
05:89:ce:fb:93:d8:63:7d:a7:e5:23:85:31:a7:0c:9c:12:04:
f3:b0:1c:0b:22:17:8d:01:17:35:8e:f4:27:15:44:47:eb:b3:
9b:74:02:22:dc:7e:e6:e0:7f:f4:73:15:bb:fe:d1:dd:d1:ae:
0c:32:85:60:6a:64:de:cc:74:0b:37:cd:ba:8c:4a:0a:26:32:
c7:ed:71:61:f0:71:e7:0d:15:18:6c:e7:73:fb:e6:ef:c8:6e:
e0:c2:59:5f:5a:64:f9:73:46:2e:36:7e:18:f6:9d:37:4b:3f:
13:39:3c:15:3d:d7:07:31:71:cd:2d:4f:0a:b6:65:c6:cc:18:
99:b3:1d:75:49:a7:26:0b:98:5b:f1:69:6e:de:9d:9c:41:db:
bb:a8:2a:65:fa:fc:64:5a:2f:d1:a9:fb:a4:4e:5c:32:03:34:
92:06:e0:c2:d5:8f:0f:06:fe:5f:48:cd:19:eb:0d:39:af:7c:
a8:54:41:25:7d:6b:22:a0:05:20:4b:b9:e2:f3:d1:ec:5f:d2:
9e:11:a6:a3:28:4c:8b:85:57:18:ea:e0:51:2b:59:e5:65:e1:
40:d3:95:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org