Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/OnvrmuC85o2_Rb9s_CQ077u2h4A.roa
File: OnvrmuC85o2_Rb9s_CQ077u2h4A.roa (raw, json)
Hash identifier: BDk6yhdbMTyn8iHNKmwkRWc0iaiIXlv3UievZBVw/aE=
Subject key identifier: 3A:7B:EB:9A:E0:BC:E6:8D:BF:45:BF:6C:FC:24:34:EF:BB:B6:87:80
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 0469
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/OnvrmuC85o2_Rb9s_CQ077u2h4A.roa
Signing time: Thu 15 Sep 2022 02:34:57 +0000
ROA not before: Thu 15 Sep 2022 02:34:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 134823
IP address blocks: 2406:48c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129 (0x469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Sep 15 02:34:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3A7BEB9AE0BCE68DBF45BF6CFC2434EFBBB68780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:1b:85:8a:ea:54:b1:79:91:23:9f:43:ab:
8a:28:e5:65:8e:a6:2e:47:63:a1:4d:95:55:91:39:
b9:33:51:f5:11:42:5c:34:6d:b9:56:0a:b3:a6:f8:
0f:f7:5e:19:98:23:d4:bf:3b:91:fa:d6:30:58:52:
82:28:94:df:9f:81:9e:5b:62:d4:97:1d:6c:1c:80:
89:af:6a:6d:27:b4:ea:6d:25:8c:fc:ac:19:b6:a8:
19:a3:c4:0f:e3:27:8d:f7:33:3d:c8:c4:9a:5c:a1:
10:85:72:f8:8b:67:5a:0e:f9:8d:34:3c:b0:47:dc:
a3:f9:c7:ca:8c:56:95:2e:36:4e:0d:b2:2b:b2:4d:
e9:b4:70:d3:f3:66:c3:df:33:2e:60:15:82:91:41:
2b:50:1a:24:7c:2f:78:20:a0:e6:4d:4a:fb:4a:ae:
96:ea:b4:de:52:c1:c9:39:9b:ac:58:19:e2:a2:24:
e2:44:49:38:b8:59:39:3b:ee:ec:e7:01:12:84:cf:
48:bc:4e:07:2d:79:db:a4:31:65:f5:73:5a:07:8b:
be:da:3b:91:47:11:82:1e:9d:f6:af:5f:24:2e:10:
ca:4f:90:ff:74:b0:a9:ad:87:87:5e:37:2f:6d:8c:
c6:8b:89:9c:a7:ae:c5:91:ce:58:6a:b6:a7:76:a6:
9b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7B:EB:9A:E0:BC:E6:8D:BF:45:BF:6C:FC:24:34:EF:BB:B6:87:80
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/OnvrmuC85o2_Rb9s_CQ077u2h4A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
60:b6:64:98:f1:e8:9d:60:6f:b8:c3:83:ee:67:6f:cb:61:48:
fd:60:5e:67:7a:f4:fb:bc:7b:d9:6f:76:cb:e2:98:3b:be:42:
a3:b8:e4:e3:ff:2d:ae:72:67:53:ed:ac:d0:2e:94:4e:fc:ee:
5a:7e:98:90:93:2a:22:44:5f:86:b3:66:f2:7c:06:a6:71:4e:
42:6c:e8:29:77:80:5a:8f:e9:6b:ea:58:65:7e:1b:89:a7:52:
b3:b0:e4:43:b2:74:78:ad:4a:26:df:16:4a:9c:7b:04:1e:e3:
f4:c0:d0:38:28:66:58:72:c0:33:f7:a4:c7:3d:19:76:4b:72:
59:11:e4:30:48:ad:6d:9c:2a:af:95:bd:6b:36:0c:eb:c2:76:
77:4d:7a:56:2c:6e:d6:00:7a:f6:1a:7f:e5:44:43:23:79:26:
51:1b:a3:04:45:b5:39:ad:eb:19:a7:36:c5:ab:df:81:6b:81:
0b:ff:ea:99:b9:94:eb:61:31:95:2c:ca:f3:99:8c:fa:d3:6b:
d4:70:83:d3:1e:36:d6:59:fb:9b:42:4d:c7:9b:b5:8c:3a:61:
f0:b5:a5:12:a3:d4:60:ad:01:7c:02:90:35:21:91:63:ae:67:
3e:8f:14:02:9c:d5:e3:f3:02:53:55:c7:46:8a:16:a7:7a:d5:
cd:7e:55:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org