Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/jpsXVlTygsMHdXr4phUqD8UO6Sg.roa
File: jpsXVlTygsMHdXr4phUqD8UO6Sg.roa (raw, json)
Hash identifier: rbNXxVMnhTzPY7qh6+7kuOCIQ8bsBSYsmHkHNmZcyDI=
Subject key identifier: 8E:9B:17:56:54:F2:82:C3:07:75:7A:F8:A6:15:2A:0F:C5:0E:E9:28
Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Certificate serial: 0AE4
Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/jpsXVlTygsMHdXr4phUqD8UO6Sg.roa
Signing time: Thu 13 Apr 2023 00:18:17 +0000
ROA not before: Thu 13 Apr 2023 00:18:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131662
IP address blocks: 2403:a2c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2788 (0xae4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Validity
Not Before: Apr 13 00:18:17 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8E9B175654F282C307757AF8A6152A0FC50EE928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:65:19:35:1a:86:00:f7:c5:77:b0:40:55:
6b:3d:42:a2:02:ec:a1:b8:0c:dc:c6:cd:8a:5d:30:
bd:5a:aa:c8:f0:96:64:b9:a4:30:d1:1c:58:f5:32:
fb:5f:0b:c1:d4:fa:55:b5:25:54:0b:9e:f9:d3:35:
73:2b:b5:4d:c3:20:6d:96:b4:cd:ca:f4:77:fa:0e:
76:e2:12:40:a9:52:43:29:76:42:bb:57:91:01:d0:
f7:f5:50:9e:02:97:d8:65:f5:ca:07:de:18:bd:4e:
91:14:ca:9c:23:e2:b4:8b:61:53:a4:31:82:66:08:
11:d8:9b:15:b9:26:15:31:3a:b7:4b:c5:95:96:69:
8d:48:6c:0e:a0:73:6a:8b:61:b9:5a:27:fe:da:1c:
2e:73:7a:2f:be:a2:83:e3:a2:fd:b2:65:82:13:64:
25:38:7e:c3:24:de:6b:12:b1:66:6e:7a:6a:b5:fc:
09:70:97:bb:cf:fb:92:f6:54:53:6e:18:c7:9a:03:
42:f6:ee:81:3f:fc:f3:df:66:68:2f:00:fd:4b:44:
98:39:51:c3:fe:bc:60:3b:75:f3:51:44:b5:32:52:
22:5e:a8:5c:76:7f:4c:dd:1f:b8:50:19:7c:a7:36:
41:cb:af:a6:3a:47:cf:9c:d3:06:d7:0f:b0:f6:c8:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9B:17:56:54:F2:82:C3:07:75:7A:F8:A6:15:2A:0F:C5:0E:E9:28
X509v3 Authority Key Identifier:
keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/jpsXVlTygsMHdXr4phUqD8UO6Sg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:a2c0::/32
Signature Algorithm: sha256WithRSAEncryption
a7:6d:db:ce:3c:ac:ac:6b:1d:f0:ad:3a:6d:24:5a:c3:71:90:
ac:9a:0c:08:14:75:ef:4e:b0:60:ab:ab:95:ae:4f:7b:e9:53:
01:50:c3:6b:c3:20:96:1e:24:ed:86:91:08:36:ad:7f:5e:f0:
a5:6d:d0:48:0e:43:95:fe:9a:f0:ec:73:d6:71:7b:32:4b:12:
f2:86:bd:bc:4d:d8:17:2d:ff:5f:70:d9:d7:0e:20:4e:db:59:
36:1b:e4:cd:9c:ec:e1:52:2a:d3:b6:0c:5e:fe:d3:9a:2c:e7:
d7:9e:ea:4c:3e:9b:93:01:60:7f:5e:c1:fd:ed:f6:b4:37:f4:
65:7b:f9:71:bc:d3:12:f9:fd:5f:8b:eb:4d:b7:c3:29:38:d1:
c0:02:40:d0:5f:ea:89:07:00:43:fd:7b:aa:33:42:59:81:1f:
c7:9d:3b:21:46:73:73:7f:67:a7:25:45:f4:70:d5:82:b2:ef:
36:e9:9c:0d:fb:c3:ff:f0:4b:a5:4b:fe:9d:b0:41:df:d3:40:
c4:e8:3f:02:12:da:0d:2d:f9:19:2b:2d:c2:df:09:71:4e:ef:
e3:06:6f:5a:f6:ef:84:46:4b:d5:13:f9:8d:b5:10:c8:80:fc:
34:a0:48:cf:7c:55:c9:96:5b:50:f2:a7:6c:08:99:f1:a1:45:
40:0f:90:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org