Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/Oooc1sCwPmjjfl36h8EXw3JzWzU.roa
File: Oooc1sCwPmjjfl36h8EXw3JzWzU.roa (raw, json)
Hash identifier: 92jcHMPIo7BJfpY8IstFIdna5rbWm5MmeYMwq8netgM=
Subject key identifier: 3A:8A:1C:D6:C0:B0:3E:68:E3:7E:5D:FA:87:C1:17:C3:72:73:5B:35
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0B5D
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/Oooc1sCwPmjjfl36h8EXw3JzWzU.roa
Signing time: Thu 15 Dec 2022 02:57:03 +0000
ROA not before: Thu 15 Dec 2022 02:57:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 2407:4900::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2909 (0xb5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Dec 15 02:57:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3A8A1CD6C0B03E68E37E5DFA87C117C372735B35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:b0:e1:4a:f6:81:ff:19:d9:41:d1:b5:31:
96:fe:a2:38:04:02:09:b6:39:9c:b4:de:fa:a9:57:
d6:68:83:43:35:5c:2b:e2:6b:7b:3f:c8:89:3f:6a:
95:e3:5e:c3:dc:e3:43:3b:ff:8e:4d:6d:a3:5c:34:
ac:44:4f:c4:90:f4:ee:13:a0:86:b8:3b:7c:62:ca:
1f:5f:1d:0f:2a:97:8f:44:e2:be:8f:2c:40:5b:3e:
ff:3f:84:e5:5d:93:53:7a:ec:e5:cc:db:ac:73:72:
19:eb:66:4c:d9:9c:fa:84:51:e4:fd:7e:21:ec:1d:
db:c5:c4:25:91:44:9c:fb:a1:4e:9e:0a:83:66:2a:
3d:04:38:29:15:e0:d7:f9:7a:2f:77:e1:9d:bf:30:
cb:4e:89:96:28:77:da:79:72:18:36:54:04:18:a2:
75:b3:ef:af:13:fe:d7:88:47:c1:62:72:07:04:fc:
2d:76:22:0d:14:05:13:02:56:1f:c4:c3:0b:9b:2f:
6f:cf:a9:2d:74:a0:4a:af:b2:cf:5f:82:9d:1e:33:
1f:25:74:0a:f2:19:55:37:7c:46:06:8a:17:84:81:
18:a4:22:43:f2:cd:76:f9:d3:b8:98:7a:6d:42:9d:
0d:5d:1a:75:41:e7:e2:86:05:de:6e:68:4d:ba:46:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8A:1C:D6:C0:B0:3E:68:E3:7E:5D:FA:87:C1:17:C3:72:73:5B:35
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/Oooc1sCwPmjjfl36h8EXw3JzWzU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4900::/32
Signature Algorithm: sha256WithRSAEncryption
80:1b:c4:19:db:96:e2:1f:69:d5:6e:0f:94:ce:7b:1a:16:ac:
c3:e4:ec:32:84:ba:cd:6f:87:53:96:1b:d6:a2:60:51:6c:12:
56:cf:b1:f3:da:8c:24:24:f9:b6:c6:8d:71:35:eb:67:0e:60:
78:43:f3:db:17:cc:b3:fd:42:d8:7c:47:f8:82:f2:d5:3b:5d:
4f:db:c0:bf:3a:b5:de:1c:06:b8:96:cf:97:db:46:40:4b:22:
b0:16:2b:e2:53:ff:a5:d4:17:b2:c7:77:c3:ed:f6:5b:2e:b6:
06:6f:c6:84:a2:26:ea:8b:ae:04:4f:59:ea:24:2b:07:f7:ab:
3c:3d:19:4c:bd:d7:b2:62:e3:9a:dd:72:30:4a:3e:3c:4f:0a:
68:6d:99:ee:34:f0:68:a0:b4:dd:96:c8:d5:2d:28:2d:79:1a:
c9:ea:c7:32:f0:78:ac:20:a3:ab:08:60:a1:d5:63:02:16:af:
52:43:a7:6c:0c:31:4f:17:4d:63:a1:02:61:75:74:4e:ab:21:
9a:5e:65:5a:ab:9f:ff:5a:9b:91:5a:c7:22:69:13:55:8f:ca:
cf:c9:f9:fd:33:db:76:28:6e:29:58:fd:6c:43:3e:84:66:86:
5e:59:c9:48:0e:31:f4:a1:9e:ce:ee:b1:e3:70:63:a7:47:23:
a6:39:e9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org