Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u5WcOT4Cr-wlqL3B8dofXTmwPFg.roa
File: u5WcOT4Cr-wlqL3B8dofXTmwPFg.roa (raw, json)
Hash identifier: NKVk6ZGQbd/e0nJgpGVhy1mA5lyNGdU8dLRcTAXo160=
Subject key identifier: BB:95:9C:39:3E:02:AF:EC:25:A8:BD:C1:F1:DA:1F:5D:39:B0:3C:58
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 01C6
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u5WcOT4Cr-wlqL3B8dofXTmwPFg.roa
Signing time: Mon 12 Oct 2020 11:06:34 +0000
ROA not before: Mon 12 Oct 2020 11:06:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9678
IP address blocks: 2401:95c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Oct 12 11:06:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BB959C393E02AFEC25A8BDC1F1DA1F5D39B03C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:71:2a:2e:c8:36:65:24:5e:1a:9b:ac:62:
62:bf:7c:8c:1c:b5:9a:6e:cb:56:d9:66:67:bc:0d:
8a:61:72:f7:4a:e3:b3:c9:8f:59:3d:40:1d:98:b5:
04:6b:03:e5:99:03:4a:56:63:8c:a4:94:19:52:de:
f3:36:ac:07:0b:7c:6a:be:1c:3e:80:16:e3:92:ed:
19:96:70:7a:13:fc:d0:b9:ea:b3:a1:4a:d0:a8:92:
25:67:69:f8:ae:27:95:1f:7b:30:fb:59:78:87:da:
ef:4c:d0:0f:e0:b4:ea:15:7d:26:3c:64:29:2b:b5:
ec:15:11:28:bf:e9:27:0c:3a:e4:15:b3:e0:77:c2:
7b:4e:65:50:c9:41:6e:9c:18:88:94:e6:36:e3:26:
5b:73:dd:d8:47:58:0b:07:81:79:db:55:25:95:96:
f9:2d:9a:bc:0b:8c:03:cb:92:f4:75:8c:10:cd:45:
81:b2:5f:f1:ea:bc:40:a0:1e:58:d6:dc:f5:4b:b5:
49:8e:cf:1a:f6:72:cf:77:08:f1:f3:4c:d4:2b:89:
3a:9c:f1:ad:25:39:fc:2f:5f:fd:ee:c0:30:26:9d:
53:22:63:5d:b3:84:e6:ff:74:d1:5a:e9:0a:1c:c9:
b4:68:a2:3f:50:c1:99:08:d3:d4:61:d6:35:b6:2e:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:95:9C:39:3E:02:AF:EC:25:A8:BD:C1:F1:DA:1F:5D:39:B0:3C:58
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u5WcOT4Cr-wlqL3B8dofXTmwPFg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:95c0::/32
Signature Algorithm: sha256WithRSAEncryption
37:e3:f9:93:43:d1:5a:97:b5:7b:bb:0f:42:ed:cf:24:e0:f1:
ec:a3:71:91:00:63:2f:71:d2:c5:94:e5:1c:a5:f6:6e:92:68:
cf:03:e2:92:c7:9d:af:e2:01:5f:27:58:3a:24:1d:60:c3:c7:
43:9c:27:11:63:30:7f:35:17:44:62:98:d7:36:f7:c7:cd:59:
7f:c0:0a:4a:0c:77:bc:50:86:e0:f2:20:f5:70:77:ff:50:32:
39:c2:18:e4:5c:e8:c0:b0:b6:59:41:7b:10:a8:ee:3a:ab:e3:
2d:bd:0f:ed:61:46:d4:14:b5:90:a0:be:db:ba:50:ef:de:a9:
f4:17:fe:b7:68:56:28:c5:3f:2c:9d:0d:32:07:af:4f:4d:24:
00:f9:50:5d:34:10:98:ac:ea:8c:46:b9:79:d7:cc:c8:9c:d6:
5a:b4:07:a3:04:ef:8e:02:06:de:5d:c7:72:32:52:59:b7:36:
23:5a:74:8d:55:cb:a7:7c:4a:58:66:71:76:29:81:0f:38:f9:
68:90:5f:2b:a1:a7:8d:7c:ca:68:07:ee:bc:96:8c:82:87:80:
28:2c:00:85:1f:13:27:be:55:fc:27:5b:72:73:01:3f:2f:d2:
ec:44:8c:33:64:b8:94:af:49:5d:44:bc:fa:7c:d3:08:69:d7:
80:49:43:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org