Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ETIME/7Vhqg5gZOU9qSqUVU8z5TVRxGFQ.roa
File: 7Vhqg5gZOU9qSqUVU8z5TVRxGFQ.roa (raw, json)
Hash identifier: IDro1e2hDdRFVlByyPeB2P0sbxtxuChndTvaThxpSuA=
Subject key identifier: ED:58:6A:83:98:19:39:4F:6A:4A:A5:15:53:CC:F9:4D:54:71:18:54
Certificate issuer: /CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Certificate serial: 01C5
Authority key identifier: E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/7Vhqg5gZOU9qSqUVU8z5TVRxGFQ.roa
Signing time: Thu 15 Sep 2022 02:34:53 +0000
ROA not before: Thu 15 Sep 2022 02:34:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 134823
IP address blocks: 2406:c3c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Validity
Not Before: Sep 15 02:34:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ED586A839819394F6A4AA51553CCF94D54711854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:8d:b1:ab:63:92:f1:7a:76:c3:80:12:ba:
b7:3c:df:bb:cf:36:03:79:de:7e:d5:de:0f:41:3a:
da:c7:50:cf:fc:9f:a4:52:97:e4:2f:cc:81:2c:b6:
0a:87:82:c7:2a:61:c4:2b:25:5e:c3:f4:45:dc:80:
34:2a:9e:06:76:46:d3:6b:39:fb:85:ab:90:04:1a:
fe:16:33:d4:e8:d4:74:f6:96:39:76:ab:03:3c:13:
f5:c8:c2:d8:10:7f:3a:02:5f:f1:60:5a:71:e2:6e:
65:66:e8:f4:a4:29:53:88:78:6b:53:e3:72:d3:0a:
e4:74:41:bf:9b:4e:09:19:0a:66:d1:33:ef:95:47:
16:94:60:73:e6:2d:52:ff:9e:92:df:5c:27:4b:58:
52:10:e8:f0:51:c0:ad:e0:1b:02:4b:03:58:ba:3b:
39:8c:8e:df:14:68:31:6b:96:1f:8a:b8:cb:b4:fa:
48:9b:7e:e9:fc:bf:c8:7c:e7:1c:1c:ee:9f:c7:37:
70:38:e1:da:de:5f:e7:ea:af:c5:5e:bd:43:67:14:
65:91:ce:83:5c:a8:59:7c:d3:bd:55:09:66:7b:5c:
52:18:55:ae:b0:c0:9e:ce:a5:76:b4:cf:a3:57:67:
84:58:93:7a:00:1a:c9:35:13:45:8a:00:12:98:86:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:58:6A:83:98:19:39:4F:6A:4A:A5:15:53:CC:F9:4D:54:71:18:54
X509v3 Authority Key Identifier:
keyid:E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/7Vhqg5gZOU9qSqUVU8z5TVRxGFQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:c3c0::/32
Signature Algorithm: sha256WithRSAEncryption
67:c4:de:b9:7b:f6:56:75:8c:00:ca:25:f3:82:42:0a:fa:e8:
37:57:76:a4:10:a0:0b:0e:6e:ee:d2:37:a1:bc:fb:db:24:79:
24:8c:f0:88:9e:95:a0:08:6b:21:9f:c1:04:7a:6c:59:42:74:
76:77:72:5b:e2:23:09:83:0f:1f:90:b5:44:18:5a:5b:f0:c7:
c5:d3:2d:29:29:e5:3c:50:f0:14:6a:d2:7f:5e:76:f6:08:9a:
85:41:dc:b1:8e:f9:41:d2:6a:80:bd:f5:5a:35:6d:ea:d9:be:
af:92:92:75:4a:8e:f0:53:f5:37:33:7b:2a:61:5e:ca:48:b7:
2e:f8:82:2f:a2:68:6b:45:51:bd:fa:95:26:d6:85:89:73:fa:
40:dc:7d:b5:23:37:2a:72:91:b9:3d:48:d8:f3:e3:b8:04:36:
67:a9:aa:36:ea:f5:36:c1:8f:df:d3:d2:af:77:bc:86:86:2d:
7c:68:df:db:a9:57:d4:9a:9f:bc:fe:d0:8f:00:32:10:de:18:
76:fd:70:c0:8f:db:fc:b4:64:21:34:0f:7b:ea:90:cc:7c:1c:
56:fc:9d:57:8a:0f:a3:1f:99:fb:aa:da:8f:8b:68:ee:1c:99:
3c:96:41:04:85:bd:7b:39:29:76:3d:3b:48:b7:f6:79:9a:d8:
c8:55:88:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org