Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/MyKWvep7IXNq8EKzR4gMd0mynBw.roa
File: MyKWvep7IXNq8EKzR4gMd0mynBw.roa (raw, json)
Hash identifier: g2842e6JkcTCTq5JuBHzqvgPE5pjBbGtnx3S4Wes4W4=
Subject key identifier: 33:22:96:BD:EA:7B:21:73:6A:F0:42:B3:47:88:0C:77:49:B2:9C:1C
Certificate issuer: /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial: 096E
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/MyKWvep7IXNq8EKzR4gMd0mynBw.roa
Signing time: Tue 29 Sep 2020 10:03:37 +0000
ROA not before: Tue 29 Sep 2020 10:03:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 64271
IP address blocks: 2404:bac0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414 (0x96e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Validity
Not Before: Sep 29 10:03:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=332296BDEA7B21736AF042B347880C7749B29C1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:24:13:d4:90:5c:9a:90:72:bf:5a:9b:6c:
1d:6d:b4:a1:12:3c:fc:27:d2:b5:0b:43:48:cd:29:
fa:ab:5a:08:d8:17:12:5e:c7:3f:40:92:bd:a9:ed:
36:d6:9a:69:df:da:4a:f5:a8:28:e1:06:fd:fe:40:
64:e5:5a:8b:c0:69:c6:d8:b6:90:2f:67:c5:b1:22:
39:7d:d4:6b:34:5c:57:b6:30:d6:d7:d5:69:a8:b8:
ae:dc:08:e7:a7:a2:5e:e1:ab:4d:38:3d:b8:e1:55:
40:80:0d:a2:c8:71:0e:fb:51:37:b4:3e:68:45:55:
9c:80:9d:5f:c2:7a:d8:d5:98:88:a4:32:3d:bc:83:
8d:c4:d9:a0:f2:da:ba:8c:e1:96:5e:1a:8a:da:40:
21:46:02:89:fc:1c:19:50:5e:0e:d0:a4:49:6d:ec:
f4:bb:8a:7d:29:07:a5:3a:51:9c:80:cc:af:b9:c3:
a2:98:3f:56:e1:f1:b8:8d:5b:10:36:86:df:45:f8:
12:15:b1:e2:72:b7:6e:61:bb:86:04:da:51:3f:5e:
9c:64:46:26:ff:f1:6d:c8:bd:1f:82:5f:91:35:6c:
25:a1:46:44:10:5f:bf:32:b0:6c:b1:c9:1f:4e:a0:
4b:a5:33:6d:22:4f:e2:8f:17:ac:ff:33:9e:94:a6:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:22:96:BD:EA:7B:21:73:6A:F0:42:B3:47:88:0C:77:49:B2:9C:1C
X509v3 Authority Key Identifier:
keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/MyKWvep7IXNq8EKzR4gMd0mynBw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:bac0::/32
Signature Algorithm: sha256WithRSAEncryption
18:9f:aa:98:57:a5:83:1c:2a:75:03:b2:cf:17:16:5a:bf:65:
38:a0:45:1a:16:c0:fb:5f:fa:cf:99:1f:9c:4e:46:74:b2:41:
a9:6a:64:a7:bd:e0:2a:06:e3:c3:ab:6c:42:6d:44:f3:62:ea:
52:e4:e4:35:48:07:dc:d7:d6:15:e4:b9:35:6d:6f:2d:45:de:
ff:f5:f9:f3:63:f7:7d:8e:1c:d4:40:c6:e1:a3:1b:cb:b8:43:
71:7c:d0:97:cf:39:e2:e1:de:33:e1:f9:34:57:83:8f:a9:3e:
3b:2d:49:32:fe:cc:ba:b1:f6:1b:49:ac:46:40:a6:71:ed:76:
d2:27:18:75:ea:97:00:ee:73:60:bd:7e:2f:9a:af:97:3b:1b:
c0:0c:0f:2e:b2:c7:97:74:a9:21:7f:04:0c:95:1f:e0:4f:7b:
cc:74:c2:c5:12:d9:b0:11:8a:c7:52:3d:c3:f1:c3:42:89:ee:
25:d2:ed:81:eb:80:3f:63:ca:21:f1:5e:6a:8d:de:f6:4a:38:
5c:38:34:7d:46:2e:7a:57:c4:8e:e1:6a:1c:b1:79:78:ec:a9:
80:55:a8:f6:f3:ef:c7:6a:f0:9a:4d:26:62:2e:83:3f:2a:04:
df:a6:d5:72:cd:1e:d5:64:9b:7e:9b:50:9c:f1:4d:ce:88:e0:
33:60:1c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org