Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/whXYSTOrrb9gNbkIIxOh-Fq11YQ.roa
File: whXYSTOrrb9gNbkIIxOh-Fq11YQ.roa (raw, json)
Hash identifier: sTFfJMmcJZbAhkb7oTER7UMWxyLe+xxSrtjVE8kIOW8=
Subject key identifier: C2:15:D8:49:33:AB:AD:BF:60:35:B9:08:23:13:A1:F8:5A:B5:D5:84
Certificate issuer: /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial: 096D
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/whXYSTOrrb9gNbkIIxOh-Fq11YQ.roa
Signing time: Tue 29 Sep 2020 10:03:37 +0000
ROA not before: Tue 29 Sep 2020 10:03:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131658
IP address blocks: 2404:bac0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2413 (0x96d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Validity
Not Before: Sep 29 10:03:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C215D84933ABADBF6035B9082313A1F85AB5D584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:0a:db:b8:68:bd:cc:fe:83:44:a4:ff:3c:
42:ab:05:4d:a1:9f:60:3f:60:2f:e7:f0:54:71:04:
16:e4:88:32:bc:49:78:e2:d3:0a:ce:c5:70:92:5a:
93:ba:af:00:a1:51:36:b8:c5:77:b7:2d:a9:96:b0:
ac:53:1b:d4:fc:d5:bf:44:41:81:19:9c:94:06:da:
49:1d:35:ba:97:9c:6f:87:bf:81:96:0e:53:cb:fa:
17:5d:7d:b5:fd:5b:b6:35:d6:e0:26:bb:c4:4f:e2:
14:52:38:2f:55:78:52:ed:31:76:f1:d6:9f:15:62:
52:e7:1f:4c:eb:b7:9e:ef:f6:e9:43:6d:4a:40:1e:
b9:fc:b7:27:45:f9:8b:e1:2c:b7:7b:0e:b7:2b:02:
b3:59:30:b3:64:7f:28:3a:1e:01:71:ab:78:d4:23:
06:64:88:7f:bc:7c:65:a1:95:b6:6f:99:28:b3:a7:
86:85:ee:4b:11:a8:05:df:e0:be:2e:0b:8a:be:c7:
57:a2:4d:15:92:55:51:e5:4a:3e:0d:9b:92:68:4b:
91:0d:1e:ff:f9:50:44:9b:7f:9d:22:58:f1:d0:63:
d7:e6:f4:b8:e0:ed:44:99:75:2f:90:3b:c1:16:b9:
ba:e6:0a:a8:f0:f4:a7:ac:1c:b4:97:90:a4:28:d6:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:15:D8:49:33:AB:AD:BF:60:35:B9:08:23:13:A1:F8:5A:B5:D5:84
X509v3 Authority Key Identifier:
keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/whXYSTOrrb9gNbkIIxOh-Fq11YQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:bac0::/32
Signature Algorithm: sha256WithRSAEncryption
c8:b5:aa:44:20:ac:50:c3:4e:f4:16:16:76:33:67:26:b0:47:
ce:67:e0:e1:ee:60:6a:80:7d:2f:7e:ff:33:5a:39:a8:26:1e:
28:e8:cc:59:8c:8c:f7:5f:27:34:96:5a:a3:8a:62:90:8d:34:
39:78:fa:b9:54:4e:01:9e:58:6a:e0:54:3a:dd:27:c0:b6:7e:
fe:63:b5:d9:87:f4:b0:bc:15:92:93:93:26:12:cf:8f:9a:19:
86:da:dc:0b:5d:6a:fb:53:10:cc:72:01:69:e4:ce:57:2a:c7:
d5:4b:b6:dc:b9:51:23:88:62:d4:83:86:35:d5:69:30:21:a7:
3c:d0:ff:29:94:f9:91:91:58:ab:2c:60:9c:01:e1:16:c3:ae:
aa:5f:d8:50:bc:52:c6:39:fb:4e:19:04:c2:3d:70:f6:8c:d0:
57:13:05:d5:eb:6e:12:5a:dc:75:fc:11:43:d7:e8:d0:ed:7b:
e8:fd:c1:93:73:b1:c8:8c:ef:16:c5:d7:cb:76:ad:de:42:27:
07:a2:e8:ed:40:64:24:53:db:78:f2:06:8a:59:77:06:78:32:
54:c2:68:1c:f3:f7:83:1c:cd:31:dc:86:5e:da:0f:77:46:d5:
de:8d:cc:92:b7:7e:93:2c:3c:b3:b4:0c:cd:76:0a:80:d9:a9:
aa:ee:3b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org