Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/XdealdFZSkFaQXLL5d24OuhmvZ4.roa
File: XdealdFZSkFaQXLL5d24OuhmvZ4.roa (raw, json)
Hash identifier: uCD/WhqEB36BMNOH525kxTKMhJOQSMJfUidXCAEaAsw=
Subject key identifier: 5D:D7:9A:95:D1:59:4A:41:5A:41:72:CB:E5:DD:B8:3A:E8:66:BD:9E
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 26
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/XdealdFZSkFaQXLL5d24OuhmvZ4.roa
Signing time: Tue 28 Jul 2020 10:03:49 +0000
ROA not before: Tue 28 Jul 2020 10:03:49 +0000
ROA not after: Sat 24 Jul 2021 08:03:22 +0000
asID: 20473
IP address blocks: 2406:48c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Jul 28 10:03:49 2020 GMT
Not After : Jul 24 08:03:22 2021 GMT
Subject: CN=5DD79A95D1594A415A4172CBE5DDB83AE866BD9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:ee:5f:2e:f2:b2:1e:07:12:ec:9d:cb:56:
97:b6:a1:76:49:a3:ce:26:80:ed:f1:9a:92:7c:82:
f6:dc:eb:1f:cd:d2:16:65:31:80:a4:92:b3:0a:4d:
c9:27:de:16:ea:27:64:4e:f5:02:6d:f2:33:b5:d7:
5d:5f:68:0f:dd:90:74:48:89:65:df:89:57:62:97:
30:ed:67:3e:59:e3:97:58:c3:10:e9:46:28:73:d6:
b3:c1:57:08:89:91:c7:d8:68:de:00:be:2e:2e:65:
c4:b7:32:6f:01:49:d7:b9:c1:d1:f5:5a:bb:af:f8:
4a:d9:da:4e:89:40:81:19:48:80:43:42:02:1e:34:
3f:45:17:9a:70:8b:7a:cb:ed:d2:c0:19:c8:f5:5c:
2e:c8:31:5c:98:ea:e9:8d:91:85:94:20:b3:6b:c2:
f2:49:24:a4:d3:20:a7:76:5d:d6:56:bf:56:dc:5a:
f5:40:b9:12:ca:80:15:3a:e8:4a:cb:30:79:21:de:
c7:67:29:b9:a7:35:46:f6:32:70:73:5f:10:48:46:
78:27:a7:18:8a:82:2b:0c:da:a5:45:f0:86:fc:ec:
2d:bc:d9:42:51:e1:01:5a:b6:ef:6d:fb:bb:a9:07:
a0:49:7c:d3:8d:d8:af:d9:b6:e9:90:18:02:f7:fa:
f7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D7:9A:95:D1:59:4A:41:5A:41:72:CB:E5:DD:B8:3A:E8:66:BD:9E
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/XdealdFZSkFaQXLL5d24OuhmvZ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
13:5f:11:a9:ed:bf:51:0f:d5:9b:fd:29:d6:b0:1d:84:95:52:
da:8f:6a:8e:5c:4d:e8:76:d8:64:8e:38:90:18:16:44:d4:48:
10:f9:85:f9:8c:a4:3b:0d:47:48:fe:34:4f:e3:d7:17:85:c3:
17:c5:47:a1:e1:d7:36:80:77:e5:29:f5:2b:d6:e2:49:53:e9:
6f:12:3f:a8:a8:85:cd:41:b0:81:05:b7:ef:43:98:bf:2c:b7:
2a:10:09:b0:33:60:5c:1c:7e:bb:3d:89:cf:91:72:d7:f0:5b:
56:bc:a4:de:c4:57:dc:5d:7e:df:d6:a3:4a:e3:b9:8b:2d:14:
5e:79:21:c7:8a:7d:65:c9:6b:73:60:80:ed:de:c1:5b:f8:e0:
35:74:00:ef:c0:93:08:95:47:74:82:38:36:4b:1e:f4:82:c5:
20:69:1a:56:6c:1f:a9:ce:96:8c:91:e2:1a:e5:f3:4a:16:fe:
52:88:a2:52:e6:1a:2a:e2:99:a8:65:88:1e:f7:9e:f5:a7:62:
bf:40:66:da:7a:04:45:c4:06:5e:e8:71:a2:8d:c1:81:fa:95:
84:07:8f:db:f4:69:73:82:70:ea:13:22:bc:af:de:65:d1:17:
fa:bc:c1:f1:05:6b:5f:64:95:fd:ae:c2:04:24:10:2e:f3:15:
57:d4:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org