Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/c-pBBdK2MBbvWdrwhJeqnXzlYpE.roa
File: c-pBBdK2MBbvWdrwhJeqnXzlYpE.roa (raw, json)
Hash identifier: Pkg8Uazo4rE5KsM8h77NZiixgWQjZLcNLxnz5nxbvIM=
Subject key identifier: 73:EA:41:05:D2:B6:30:16:EF:59:DA:F0:84:97:AA:9D:7C:E5:62:91
Certificate issuer: /CN=F72B8D549DE8BBC6DE02456C670D1B1A05AFE80E
Certificate serial: F1
Authority key identifier: F7:2B:8D:54:9D:E8:BB:C6:DE:02:45:6C:67:0D:1B:1A:05:AF:E8:0E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/c-pBBdK2MBbvWdrwhJeqnXzlYpE.roa
Signing time: Tue 07 Feb 2023 08:34:51 +0000
ROA not before: Tue 07 Feb 2023 08:34:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 63893
IP address blocks: 2400:50e0::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F72B8D549DE8BBC6DE02456C670D1B1A05AFE80E
Validity
Not Before: Feb 7 08:34:51 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=73EA4105D2B63016EF59DAF08497AA9D7CE56291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:6c:94:b0:9c:ff:ee:10:dd:cb:88:f0:6c:
30:b3:27:c2:0f:42:cb:fb:ff:0a:aa:b8:97:4b:b7:
55:35:f5:f5:8a:78:85:3b:55:2b:fc:1f:33:7f:b9:
e7:a5:92:de:c1:5c:a2:66:cf:6d:4d:0d:4c:3c:11:
21:3c:5b:9d:04:cd:6f:3c:6d:40:ba:95:68:7e:74:
84:31:a8:59:f1:4e:bb:fe:b7:15:a4:4d:7e:73:b2:
a9:a7:ea:92:72:6a:cd:63:e0:13:c9:f8:a8:d7:9d:
af:e6:d7:29:57:97:a6:c2:c0:53:7c:8e:89:23:28:
c1:ce:ac:0e:69:82:06:03:5b:03:10:13:ac:99:79:
ce:cd:da:08:67:62:79:7e:98:e3:64:52:d3:b2:dc:
f6:e1:d2:42:ab:64:e6:e4:e0:cc:7e:9e:23:70:30:
a2:26:e8:3a:0a:5d:97:bb:1d:02:69:28:38:a3:98:
1f:13:9a:56:88:d3:4d:ec:d0:1c:0d:de:26:f1:e0:
9f:4e:f5:4e:09:51:c2:11:1e:54:cc:4e:48:5d:31:
fc:31:fc:64:10:44:51:f0:03:cf:bf:9a:51:fd:ef:
45:80:ff:6e:7e:b5:44:96:65:25:80:ac:62:47:81:
53:99:c3:be:5b:0d:62:88:d0:e5:31:1e:10:af:97:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:41:05:D2:B6:30:16:EF:59:DA:F0:84:97:AA:9D:7C:E5:62:91
X509v3 Authority Key Identifier:
keyid:F7:2B:8D:54:9D:E8:BB:C6:DE:02:45:6C:67:0D:1B:1A:05:AF:E8:0E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/c-pBBdK2MBbvWdrwhJeqnXzlYpE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:50e0::/32
Signature Algorithm: sha256WithRSAEncryption
ab:f5:52:e8:ce:75:df:d8:af:8e:be:7f:eb:98:bf:17:5f:23:
76:01:cc:44:de:c2:d9:27:1e:5e:35:1e:48:73:af:11:a9:9d:
53:c9:1c:94:cb:0b:73:60:a7:52:89:58:e5:f4:67:df:b9:b6:
a8:67:d9:56:4a:53:a7:2f:12:25:0e:22:4e:41:62:51:7f:bb:
9c:0d:ea:13:cf:b4:9b:da:ba:df:72:54:a0:e6:6a:19:0b:97:
d2:ea:b3:86:b1:b3:ac:59:86:df:6e:87:4f:d6:99:22:b8:4b:
d1:18:7e:f7:73:86:cf:58:a8:94:61:d2:c8:05:6e:6b:2c:67:
44:1f:1c:4c:c2:d6:b9:7a:44:6e:2c:11:4c:bc:22:db:de:38:
35:77:52:0a:a8:52:cc:ed:d5:59:86:d7:bb:b3:29:fd:c1:c9:
70:6c:c1:f2:8a:cd:33:91:ad:51:a8:14:2a:f6:fe:69:e8:08:
ce:72:e0:78:11:d6:6c:b7:90:3a:99:5a:e3:b5:ab:82:91:3e:
06:31:cf:0c:81:00:19:4e:a3:da:cb:77:91:3f:5b:ce:ef:23:
0a:ad:3b:fe:4e:9c:36:df:ff:ef:a4:29:c3:14:f4:dd:8a:98:
65:7c:02:76:14:c0:1b:e8:95:c8:6c:6b:2c:f7:0a:ae:ef:44:
56:94:15:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org