Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/gkXnul-gYCqpBcFuUI-apIDZ9Gw.roa
File: gkXnul-gYCqpBcFuUI-apIDZ9Gw.roa (raw, json)
Hash identifier: UDWJSOoMD77TzH+8covFfN8z5PtgwTlRhQLqLGpAt7o=
Subject key identifier: 82:45:E7:BA:5F:A0:60:2A:A9:05:C1:6E:50:8F:9A:A4:80:D9:F4:6C
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 0399
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/gkXnul-gYCqpBcFuUI-apIDZ9Gw.roa
Signing time: Tue 02 Nov 2021 12:02:09 +0000
ROA not before: Tue 02 Nov 2021 12:02:09 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9678
IP address blocks: 2401:95c0:2000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921 (0x399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Nov 2 12:02:09 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8245E7BA5FA0602AA905C16E508F9AA480D9F46C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:60:9d:ff:1d:88:bc:72:01:52:a3:e3:29:
19:a8:2e:1e:ec:5b:5b:2d:e0:85:13:4b:d0:f6:e3:
aa:d4:c8:08:ac:e3:9b:18:fb:0c:4a:70:57:b3:49:
6c:10:46:54:a0:53:04:4a:62:1f:2e:64:35:3d:fa:
6c:28:3a:72:95:e5:8d:d2:7d:01:dc:fb:0a:7d:e8:
3a:01:d5:b0:21:7b:03:51:fc:4f:f3:ed:9f:0c:d6:
67:2a:c6:b4:31:de:cd:94:c9:64:d8:e8:a3:66:8c:
07:7e:3c:83:15:34:49:6a:eb:6b:38:d6:de:84:d8:
ce:81:f7:80:f3:9f:18:12:44:31:d5:c8:c6:5b:8a:
db:3e:91:fb:72:d2:09:a8:5f:0d:6a:c0:b3:73:77:
4d:0a:13:46:ee:20:d2:49:66:84:6d:3c:9b:79:78:
43:8c:14:ba:13:be:f4:1c:e7:51:54:b8:b8:17:b9:
c9:6d:4b:e5:07:88:07:06:33:3f:a3:bc:78:be:5a:
be:42:67:73:88:ba:fa:f9:b4:ad:66:f4:a0:df:25:
b5:46:0f:84:a8:6f:52:91:ff:2a:52:0b:b6:ff:33:
d7:95:b4:b2:ba:4d:41:6e:d8:6d:84:29:9a:81:ee:
06:80:64:fd:fd:03:6b:f6:e0:15:93:8e:2c:03:40:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:45:E7:BA:5F:A0:60:2A:A9:05:C1:6E:50:8F:9A:A4:80:D9:F4:6C
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/gkXnul-gYCqpBcFuUI-apIDZ9Gw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:95c0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
c2:1a:60:c7:fc:57:cc:59:23:b9:46:11:f5:cd:e8:89:76:3d:
40:52:3e:02:94:e2:7a:b6:6c:66:41:ae:a5:a9:e5:ab:a2:11:
57:f2:60:5a:d4:99:75:2a:23:9b:1b:90:35:dd:ea:09:ff:a4:
b7:e3:be:49:9e:37:78:2a:66:04:b4:9f:01:19:98:4e:44:a8:
20:55:ef:03:06:2e:96:f9:ed:d7:b4:8b:09:66:b7:b8:53:b2:
3f:be:70:9c:52:56:6c:83:71:50:78:8b:40:31:8d:41:d0:f6:
42:57:81:12:eb:42:6a:5f:88:b8:29:0a:82:c6:0a:8d:cd:dd:
76:63:08:29:16:81:cd:bc:6a:81:ba:1c:2c:e6:39:2e:40:fe:
5b:f5:54:27:09:59:25:74:e2:39:50:c9:2a:c3:64:34:d4:e5:
f9:4c:ee:2a:a7:d2:32:e9:8e:35:91:6c:32:4d:67:c7:5e:39:
47:4c:d2:ec:7b:30:81:c2:d8:ab:e3:11:8e:0b:1e:4f:09:2f:
e6:9f:e8:74:a2:75:6c:cf:9a:ca:4f:1a:14:7c:95:3c:b0:0e:
02:27:83:bf:90:a6:ac:61:32:87:f5:d4:d3:95:9b:80:d3:18:
a9:e1:bc:6e:a2:b3:79:2a:9e:82:05:00:52:87:e1:97:4a:96:
a8:12:ee:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org