Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ETIME/YmcUZmspUyweR18aanDBR9AD2-U.roa
File: YmcUZmspUyweR18aanDBR9AD2-U.roa (raw, json)
Hash identifier: x+UlBdNdgKQCU1wWgG5u9XNTQsKOIubtifOOOW37vOk=
Subject key identifier: 62:67:14:66:6B:29:53:2C:1E:47:5F:1A:6A:70:C1:47:D0:03:DB:E5
Certificate issuer: /CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Certificate serial: F5
Authority key identifier: E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/YmcUZmspUyweR18aanDBR9AD2-U.roa
Signing time: Tue 09 Nov 2021 09:57:23 +0000
ROA not before: Tue 09 Nov 2021 09:57:23 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 134823
IP address blocks: 2406:c3c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Validity
Not Before: Nov 9 09:57:23 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=626714666B29532C1E475F1A6A70C147D003DBE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:0b:3c:d2:d5:63:5d:3f:7b:fd:3f:e2:67:
32:98:d5:3c:28:50:2f:07:58:68:76:84:bf:13:9e:
9b:0d:b8:bd:9e:a8:84:22:29:c8:36:63:a9:2f:9a:
0e:f2:26:2c:fb:5e:a1:80:c2:51:47:21:63:4b:f8:
b7:18:2f:2a:b5:e6:d8:1b:53:74:5e:77:0d:ed:14:
9e:60:8c:95:d2:f3:83:cb:60:10:0e:63:87:c7:90:
9f:63:98:ea:1c:cb:e3:67:6c:da:09:57:c4:2e:44:
1b:17:65:3d:ab:5b:eb:64:c5:25:9f:1b:92:31:4b:
27:ef:ba:4e:4a:53:5c:17:e4:d3:22:a4:58:70:88:
44:38:91:27:be:b3:c1:17:1c:e5:0f:a7:21:f0:8d:
2f:49:ce:e9:e6:97:38:a6:bf:0e:68:ed:f8:65:6f:
95:6e:21:4a:db:00:b2:0a:96:1d:7e:b9:6e:30:87:
df:63:23:d6:53:e0:ee:cc:c3:aa:e0:14:ce:e0:fe:
c6:29:53:62:10:9a:65:3c:45:d8:24:ec:eb:0d:82:
8c:0c:59:f6:d7:fc:c1:1f:85:09:6e:1e:f9:e4:36:
62:ad:db:59:0e:0e:9d:c6:e8:8a:57:9c:fb:bd:91:
a7:1c:1c:72:97:be:2c:c2:16:02:df:56:ed:5b:2f:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:67:14:66:6B:29:53:2C:1E:47:5F:1A:6A:70:C1:47:D0:03:DB:E5
X509v3 Authority Key Identifier:
keyid:E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/YmcUZmspUyweR18aanDBR9AD2-U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:c3c0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:7e:be:18:22:93:b1:38:85:cb:6f:9f:e5:cd:4c:29:e5:db:
69:dd:5e:e5:77:6d:ae:b5:ca:e3:49:dd:5e:bb:db:53:da:c6:
eb:1d:24:c8:1e:72:7d:7f:09:83:99:cb:37:36:88:c1:b4:a0:
a7:e0:c4:7c:7e:de:ee:d3:63:21:23:87:c1:10:0e:28:80:a5:
86:57:f4:a7:49:a3:e7:ab:07:ab:44:f9:a6:60:70:a1:2e:ae:
f1:98:8f:2c:67:e5:4a:49:6b:b0:7d:99:13:4f:c8:b7:4d:d9:
bb:9d:d8:02:79:7b:6f:d1:91:65:c3:32:d0:b6:ae:ca:d9:8c:
be:ac:55:29:2b:52:7c:08:45:24:8d:34:98:ba:89:ac:76:f4:
1e:7e:44:38:cd:63:51:6d:cd:21:4d:46:d2:84:66:7f:cb:3a:
a6:d0:95:cb:0a:e6:69:de:f0:97:99:c9:19:0a:7c:88:7d:0f:
5e:5c:ce:d8:88:3b:6c:08:1e:20:df:2f:b9:24:09:48:21:f4:
37:4c:8c:fb:2d:10:a3:94:ae:99:ba:b4:ec:44:a9:86:d8:70:
bf:6f:0a:22:b3:17:28:86:0f:d7:4f:34:79:8a:07:a1:55:b0:
e8:a5:46:8b:64:ab:fa:40:e1:60:57:7f:f9:db:96:2d:37:65:
04:57:97:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org