Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Z44jXWmwwaZNespmG1AS-GNAnGk.roa
File: Z44jXWmwwaZNespmG1AS-GNAnGk.roa (raw, json)
Hash identifier: wm+TiSenTlGa6SUH5f6Jsb7QsuTXZ1SRCn+YGBD66go=
Subject key identifier: 67:8E:23:5D:69:B0:C1:A6:4D:7A:CA:66:1B:50:12:F8:63:40:9C:69
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D14
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Z44jXWmwwaZNespmG1AS-GNAnGk.roa
Signing time: Mon 15 Jan 2024 21:24:37 +0000
ROA not before: Mon 15 Jan 2024 21:24:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 2404:0:2000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3348 (0xd14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:24:37 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=678E235D69B0C1A64D7ACA661B5012F863409C69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:44:c4:f6:3d:58:0b:96:41:45:9e:40:e1:
de:1b:0d:d1:1c:74:78:39:f2:97:a1:23:cb:98:11:
26:17:b0:3d:a8:51:81:f9:38:32:86:0e:0b:3c:cd:
a6:83:37:1b:ca:b4:85:1d:02:81:97:29:43:c9:e1:
55:0c:c2:f6:d2:64:fc:aa:02:6a:18:5e:2a:ce:16:
3f:2e:b4:e4:7e:e0:f1:2c:7d:fc:fe:b9:2a:11:ec:
ff:65:1d:5d:11:0e:4c:86:96:40:f3:89:dc:c2:d7:
d5:98:1e:e6:4e:a1:7c:2b:2d:01:61:4b:65:73:a4:
8e:c0:85:91:24:ef:9e:77:fe:91:ea:b5:d8:53:68:
53:4e:51:c5:75:4f:dc:8b:ad:7f:a3:e6:9d:7f:8a:
a3:55:02:79:b0:ff:76:87:87:2d:8c:b0:73:ba:21:
6b:d3:74:ea:de:00:9d:62:c6:5d:be:84:92:25:de:
95:e3:24:49:00:d6:62:44:94:3b:b9:ee:03:46:8e:
3a:59:05:db:8d:6f:91:ff:03:5c:38:c8:87:25:ad:
42:f9:7c:3a:b2:e4:93:26:be:0d:b9:57:93:c2:5f:
3f:44:b7:c4:5e:ee:4d:3d:11:b9:58:a6:ef:22:1d:
49:b9:b8:79:7f:64:09:9f:a8:c0:57:7b:96:fb:5d:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8E:23:5D:69:B0:C1:A6:4D:7A:CA:66:1B:50:12:F8:63:40:9C:69
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Z44jXWmwwaZNespmG1AS-GNAnGk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
34:4c:c6:b1:b7:09:f5:44:b0:26:e8:12:db:50:d0:86:9b:e0:
f5:5f:83:d8:42:da:9f:ad:8b:d0:cf:fd:38:8d:b8:66:47:fe:
9c:f7:cc:31:c4:1f:b2:21:17:2f:b2:c9:f5:b6:57:ef:64:b2:
a9:d8:a4:05:3b:d4:3e:b2:44:df:5f:2c:64:b7:2c:41:a5:76:
1c:c5:6f:98:49:fe:f1:9a:86:6d:a0:76:92:52:08:6b:42:a4:
4f:9d:4d:2b:4f:65:60:76:0a:ec:af:46:3d:40:eb:04:18:40:
57:bd:8b:f6:96:73:b5:a8:dc:2f:e3:47:77:b3:a4:5e:d5:65:
41:6b:cf:f5:ce:61:b9:18:9c:71:75:48:af:3d:be:16:2b:61:
a1:ba:fe:71:d3:ee:32:d5:33:20:f5:76:3f:dc:06:a2:af:71:
e5:4b:bb:92:18:7f:1e:06:9e:dd:6c:e4:61:21:3c:b8:a8:71:
d8:e7:ed:ad:e1:b2:55:d9:74:32:7d:fd:39:a3:af:78:3f:65:
7e:31:51:38:59:95:d1:e7:eb:7e:f2:47:4e:7a:05:29:4d:d8:
76:65:c3:32:65:2d:cb:d9:5a:e3:5a:a8:52:c2:0d:65:63:2c:
68:ac:d1:20:35:68:7b:fa:07:de:e0:e3:77:17:a2:0f:1e:a7:
4a:43:10:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:40 2025 by rpki-client