Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/OPQVgbvXet2wfPPLOCKx62NRtiM.roa
File: OPQVgbvXet2wfPPLOCKx62NRtiM.roa (raw, json)
Hash identifier: 3wRjTxXFSZJSaTqLSvjxF/UmEEuzT0HrDnXe2Ej0lWw=
Subject key identifier: 38:F4:15:81:BB:D7:7A:DD:B0:7C:F3:CB:38:22:B1:EB:63:51:B6:23
Certificate issuer: /CN=578183A0FE5DA4A0F3C0546FB6EC26CBD1232F99
Certificate serial: 23
Authority key identifier: 57:81:83:A0:FE:5D:A4:A0:F3:C0:54:6F:B6:EC:26:CB:D1:23:2F:99
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/OPQVgbvXet2wfPPLOCKx62NRtiM.roa
Signing time: Fri 08 Apr 2022 12:58:49 +0000
ROA not before: Fri 08 Apr 2022 12:58:49 +0000
ROA not after: Tue 21 Feb 2023 08:34:33 +0000
asID: 63893
IP address blocks: 2400:5060::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578183A0FE5DA4A0F3C0546FB6EC26CBD1232F99
Validity
Not Before: Apr 8 12:58:49 2022 GMT
Not After : Feb 21 08:34:33 2023 GMT
Subject: CN=38F41581BBD77ADDB07CF3CB3822B1EB6351B623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:c9:9a:b4:f1:8b:04:6b:bf:64:69:da:cb:
89:2d:88:07:fe:6c:42:da:c8:fc:34:6b:62:40:20:
b4:b5:c1:83:03:62:06:0c:69:bf:76:e5:3e:c8:a8:
62:48:7b:79:ce:4d:fe:d8:8a:6f:19:c2:fa:92:f8:
56:a8:d8:b9:62:55:a9:81:14:30:20:11:61:5e:93:
ea:48:6a:5a:aa:a0:f2:02:6a:37:0f:fd:a6:23:83:
bc:78:ff:1e:66:0a:91:18:a4:96:ba:10:b5:1b:e7:
fd:f3:25:8b:88:5b:d0:1f:45:f5:2b:03:3e:9a:8a:
3a:43:0b:6c:93:67:46:09:10:de:a2:62:16:fb:eb:
ad:b0:ca:51:89:b9:0a:00:14:a3:67:4d:d9:06:a5:
51:e2:35:a8:41:1c:c7:17:39:65:a7:67:4c:a3:cb:
0d:46:b0:bc:67:8e:06:2c:49:b5:d0:07:0c:f9:f6:
79:b5:c9:58:7d:ef:14:44:52:21:34:82:6a:39:e3:
aa:cc:59:9d:7e:57:8f:08:be:82:56:c3:bf:fe:c5:
80:50:d8:06:5b:0e:bb:25:24:8f:e1:9c:d9:46:bc:
5f:e5:68:4d:28:e7:6e:8f:e6:12:9d:d9:dc:9e:39:
ee:cc:dd:d8:47:f2:25:ff:7f:65:5d:fa:d1:cf:91:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F4:15:81:BB:D7:7A:DD:B0:7C:F3:CB:38:22:B1:EB:63:51:B6:23
X509v3 Authority Key Identifier:
keyid:57:81:83:A0:FE:5D:A4:A0:F3:C0:54:6F:B6:EC:26:CB:D1:23:2F:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/OPQVgbvXet2wfPPLOCKx62NRtiM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:5060::/32
Signature Algorithm: sha256WithRSAEncryption
86:29:f9:dd:16:4b:b0:3f:c3:ba:83:4c:b8:28:67:da:03:aa:
4e:5b:53:64:42:1d:29:1e:b7:14:d1:e2:18:16:25:b1:95:28:
29:14:ab:b1:80:80:33:91:d7:67:fe:21:b9:23:91:33:b3:f2:
1f:64:7c:61:97:9b:4a:34:4c:45:58:58:30:6d:85:52:9e:c1:
eb:3b:11:d9:b0:51:82:33:d4:70:94:c8:05:21:9d:ed:ad:5d:
2c:d7:1a:b5:15:31:e9:14:95:c1:f4:2b:08:8f:25:91:40:be:
b6:62:67:f3:37:3a:e8:55:96:51:27:6d:1e:1e:5e:45:6a:eb:
97:b6:39:cd:e3:0f:0f:1f:86:9e:e7:19:76:39:69:51:bf:da:
dd:56:ad:0a:c8:59:b9:6a:6c:d7:51:ed:18:cc:c5:32:4a:c5:
49:32:69:39:1c:ad:05:db:71:f5:ae:be:1b:6d:81:29:99:bd:
70:dd:d8:48:cd:de:5e:b2:f8:b4:cb:d0:f7:dd:4d:e8:29:ac:
88:85:8f:3f:3c:e0:6c:f5:2b:6c:58:f0:f0:e4:f9:d2:71:a3:
21:24:50:3d:23:4c:99:97:51:05:b4:b0:dd:89:29:5c:57:71:
55:10:b5:3b:1e:30:87:41:c4:42:6d:f0:5e:ea:a0:b0:09:c6:
13:75:db:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org