Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/BGMqRnwGhx-shZpCGDWE3_h4i7g.roa
File: BGMqRnwGhx-shZpCGDWE3_h4i7g.roa (raw, json)
Hash identifier: rAtviyXIQkDOHUGv50GhYOPwz7CcSlm9Yg4LBPYej9M=
Subject key identifier: 04:63:2A:46:7C:06:87:1F:AC:85:9A:42:18:35:84:DF:F8:78:8B:B8
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 0469
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/BGMqRnwGhx-shZpCGDWE3_h4i7g.roa
Signing time: Thu 15 Sep 2022 02:34:58 +0000
ROA not before: Thu 15 Sep 2022 02:34:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131657
IP address blocks: 2406:48c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129 (0x469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Sep 15 02:34:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=04632A467C06871FAC859A42183584DFF8788BB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:27:a9:80:e2:ea:c8:17:9d:d0:e6:ef:76:
34:37:59:d8:37:11:36:94:7e:06:f5:04:ce:f7:e4:
14:f1:20:49:0b:0c:99:74:ea:e4:ed:40:84:34:eb:
bf:a5:d0:43:cd:ad:f8:f1:20:ea:19:a9:83:f3:cc:
d7:d3:3f:5f:07:24:4c:f0:7e:8a:dd:3f:ac:d3:48:
60:5c:8a:53:d8:cf:7c:5b:00:cb:39:cc:6f:34:f4:
b2:51:4c:09:74:fb:8b:1c:a4:40:78:bb:c4:bb:a8:
c5:20:4e:41:7a:b2:dc:2d:37:b3:05:3d:85:35:fa:
00:0e:2a:67:9d:fc:99:a4:29:8a:bc:b0:0e:71:d8:
88:43:c3:93:36:40:6c:40:ed:37:a5:67:3b:26:ec:
bc:66:b3:cc:85:10:01:af:bb:fe:bb:8b:67:82:68:
16:d0:eb:b1:21:8f:09:39:62:12:05:67:20:b9:2d:
c9:0d:ce:f0:5d:bb:df:66:e6:5e:1a:7f:2c:45:21:
79:c2:fd:30:27:34:db:82:d4:d9:97:60:a2:cb:34:
d1:b0:0c:74:30:22:c0:9d:bc:c0:14:c0:ba:d5:ea:
7c:ac:12:23:0c:9b:1c:2c:9e:9a:e5:3d:13:45:cc:
52:34:5a:78:05:60:6b:ae:70:77:e7:15:a4:0a:40:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:63:2A:46:7C:06:87:1F:AC:85:9A:42:18:35:84:DF:F8:78:8B:B8
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/BGMqRnwGhx-shZpCGDWE3_h4i7g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:48c0::/48
Signature Algorithm: sha256WithRSAEncryption
84:79:d3:6e:f4:ed:e7:3f:85:56:4b:69:75:8c:58:2b:53:5d:
62:3c:56:55:7f:ae:ff:7f:11:bb:4c:e3:07:bd:3b:96:7e:22:
c9:9e:9c:be:85:da:9d:a6:12:81:73:28:3f:d6:14:d2:d9:47:
f8:1a:ad:08:5c:34:e5:6b:61:c2:16:a6:39:c5:51:6d:55:f1:
80:63:72:49:1e:a6:b3:e2:d1:ad:23:e0:5e:09:f3:df:ba:0e:
3a:d5:6b:25:4b:fd:36:53:1c:59:c2:99:9c:08:09:96:74:ab:
ce:2f:d8:9c:2c:bc:3b:4d:60:a9:ad:71:3f:ad:8a:80:4f:75:
99:75:f4:92:da:0f:1d:9a:43:68:e3:ff:0c:03:02:97:8f:e0:
c5:b6:f9:3e:98:03:d8:46:01:7b:2a:4e:e4:cc:fd:b2:e1:61:
73:10:41:0c:3e:93:04:49:39:28:75:10:7d:96:91:1b:ce:08:
fb:8e:69:32:5d:31:d2:21:c8:82:fc:8e:8d:af:08:2c:7d:3c:
f8:a0:c8:9b:29:f4:98:79:7f:ea:fc:72:d4:7a:ca:05:ed:a6:
1a:00:dc:6a:1b:a5:bd:59:b4:22:c2:1c:d5:72:94:14:0f:66:
a8:38:a7:d5:42:55:64:cc:bf:dd:a0:fe:e4:42:d6:df:08:0e:
8e:98:5f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:41 2025 by rpki-client