Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/_AhN5HuonzsNIgyruT91BaatIXA.roa
File: _AhN5HuonzsNIgyruT91BaatIXA.roa (raw, json)
Hash identifier: r5HQohAmhSrz7UU2/HORsu9R6TSKFTiRgWojBeULcyk=
Subject key identifier: FC:08:4D:E4:7B:A8:9F:3B:0D:22:0C:AB:B9:3F:75:05:A6:AD:21:70
Certificate issuer: /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial: 0A47
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/_AhN5HuonzsNIgyruT91BaatIXA.roa
Signing time: Thu 15 Sep 2022 02:38:49 +0000
ROA not before: Thu 15 Sep 2022 02:38:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131588
IP address blocks: 2400:e480::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2631 (0xa47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Validity
Not Before: Sep 15 02:38:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FC084DE47BA89F3B0D220CABB93F7505A6AD2170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:71:f7:ed:8b:d8:cf:e5:18:48:1a:a9:45:
6c:84:25:84:57:32:22:c2:b9:12:e6:18:0c:eb:92:
f6:ac:82:5a:fb:80:93:32:69:3b:fe:4f:33:9a:74:
cd:f4:6b:37:3c:9e:b0:96:47:78:c5:30:26:a4:56:
a2:d2:27:96:c3:86:68:7e:b2:c5:c4:4c:82:d9:ed:
1a:0c:88:37:00:26:f5:d4:a4:ae:37:4a:7d:a7:a6:
31:32:11:df:f0:6e:bb:3c:83:4f:87:61:cb:8c:6d:
72:57:03:2c:2f:34:a2:4c:85:08:0d:d7:44:cd:a3:
08:4f:f5:0f:c4:fe:93:18:68:04:8b:47:0d:9f:58:
f5:07:a7:29:0d:1b:45:23:f3:13:9d:65:bd:74:2b:
38:b0:6f:7e:e4:c5:01:1f:a0:d8:21:9c:fb:94:91:
5d:bd:af:b7:81:6a:06:74:aa:00:7c:e3:7a:23:53:
82:c6:3f:96:66:52:aa:f0:ce:6b:e9:9a:3e:eb:ed:
e0:f1:a9:89:e0:1c:4c:c5:51:3a:ec:c4:ad:86:d8:
79:d2:1b:d0:5c:cd:16:67:3c:be:c2:1c:33:9f:05:
b5:61:79:5e:74:b5:30:09:7a:49:82:40:d1:aa:11:
43:65:f1:21:51:1c:64:60:e0:a9:c3:9f:0f:d0:bc:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:08:4D:E4:7B:A8:9F:3B:0D:22:0C:AB:B9:3F:75:05:A6:AD:21:70
X509v3 Authority Key Identifier:
keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/_AhN5HuonzsNIgyruT91BaatIXA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:e480::/32
Signature Algorithm: sha256WithRSAEncryption
b3:41:93:e5:19:26:d1:c3:89:c7:08:bb:0a:93:df:98:46:48:
12:a4:09:a0:3f:73:bd:0f:49:52:8a:a3:af:14:d6:61:a2:2d:
11:3d:56:57:07:1f:80:e7:85:88:55:4e:6a:3d:00:c9:26:c3:
8a:53:6e:cd:95:7a:9a:75:fc:a6:2f:7b:7d:5c:85:a0:5e:5c:
02:6f:b9:c5:20:0b:7f:ee:3b:69:15:3d:e8:79:fa:c3:8c:c7:
e1:74:87:e4:c9:63:be:a4:a5:53:03:e2:4c:67:12:1a:97:87:
b6:98:e5:db:13:8c:2c:e9:e0:24:bd:85:d9:68:49:3e:55:23:
bf:18:2d:3b:1c:a8:03:0a:0c:67:14:72:61:fd:eb:91:15:38:
6d:45:44:e4:8b:6e:de:61:2a:f3:38:d9:83:1d:70:3d:c9:02:
7a:28:ce:3a:d4:25:4a:93:25:14:39:26:3f:c6:40:e1:7f:3f:
25:8b:4a:43:e3:46:ff:d8:c8:9e:20:14:b1:3c:6b:6f:2f:1b:
18:ad:68:25:3a:57:02:3e:cd:ee:53:00:96:b0:d3:4d:ee:98:
92:c6:0d:e7:d4:75:71:fb:35:77:29:ab:20:be:1d:b0:8d:5e:
70:c1:a0:df:a8:24:9c:87:eb:2e:a2:21:09:00:38:a3:ad:06:
c3:96:cd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org