Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INFORICH/fYLjle3JZaHA0hKJLItlsbHn8pU.roa
File: fYLjle3JZaHA0hKJLItlsbHn8pU.roa (raw, json)
Hash identifier: y3I9r7igc7ZpwHoy+4rpRZsBZGdZ9f+GNKrmrUhpS7o=
Subject key identifier: 7D:82:E3:95:ED:C9:65:A1:C0:D2:12:89:2C:8B:65:B1:B1:E7:F2:95
Certificate issuer: /CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Certificate serial: 031A
Authority key identifier: 91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/fYLjle3JZaHA0hKJLItlsbHn8pU.roa
Signing time: Thu 15 Sep 2022 02:41:32 +0000
ROA not before: Thu 15 Sep 2022 02:41:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131674
IP address blocks: 2406:3a40::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Validity
Not Before: Sep 15 02:41:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7D82E395EDC965A1C0D212892C8B65B1B1E7F295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ff:03:27:33:7c:ab:41:b3:b0:75:f3:4e:4b:
33:35:db:62:fa:06:8a:53:52:f5:89:1d:91:c3:79:
61:15:c5:c3:fa:4f:2a:e6:bd:8e:3f:71:50:33:8e:
5c:49:37:1a:7d:42:53:49:d0:48:fb:e9:0d:b1:d8:
c0:0b:81:35:06:31:18:b3:fe:e0:de:bd:49:ff:2b:
fe:5b:b5:43:58:2e:0b:65:f0:b7:d8:eb:0f:09:39:
27:f1:e0:00:32:8b:1b:66:dd:1f:18:6e:ae:ae:45:
63:b4:86:74:de:bf:27:6b:47:5b:e4:57:0f:50:ae:
44:5f:5a:67:7f:f3:f6:6f:6f:9a:e0:e7:7a:d2:e7:
eb:b4:0c:a2:4a:17:99:85:56:ce:d9:58:37:95:35:
0c:29:03:df:3a:2e:52:27:1d:3c:2b:23:20:24:59:
c7:2f:e5:c5:8c:64:88:4b:c5:8c:5e:f2:35:bb:58:
45:eb:91:aa:bd:84:b1:f0:01:90:8d:10:36:5d:87:
c2:9b:48:56:48:d5:b0:a1:10:4f:20:b2:dd:62:9a:
68:44:2f:a3:6d:d1:fc:ca:83:01:0d:ac:12:7a:fb:
ed:ee:df:0e:30:83:ad:6c:8c:da:b1:ee:44:1a:a7:
4a:d9:22:6f:51:97:68:26:2e:b0:e1:8f:f8:6d:0f:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:82:E3:95:ED:C9:65:A1:C0:D2:12:89:2C:8B:65:B1:B1:E7:F2:95
X509v3 Authority Key Identifier:
keyid:91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/fYLjle3JZaHA0hKJLItlsbHn8pU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:3a40::/32
Signature Algorithm: sha256WithRSAEncryption
52:73:27:b6:ad:12:88:73:6b:a5:fa:15:d9:d6:48:89:39:e9:
db:f9:8c:9d:87:0d:73:3f:83:8f:a9:b9:97:d0:c9:de:3c:16:
fe:ce:32:1d:a9:01:56:9b:c4:48:b1:63:89:1d:56:3f:62:bd:
bd:70:e6:6c:be:7d:df:f2:6c:5f:31:86:2f:f0:c0:d5:c9:d9:
1a:8b:df:1c:5c:99:3a:7a:15:5f:d6:50:23:00:7b:a6:4f:17:
9d:a7:5f:91:d2:10:1a:89:36:18:62:8d:33:d3:0c:b6:7d:96:
7d:01:93:52:12:3c:3e:e7:26:05:b7:ba:00:f4:04:7a:fc:00:
8b:fd:c8:a1:de:77:e6:60:b0:96:99:aa:e6:88:29:5a:2c:28:
25:70:35:65:de:ca:98:45:fd:30:3c:fd:b5:ec:9f:8f:c9:bb:
3e:3a:cf:ce:55:31:8a:86:3f:0e:8e:2c:1e:fe:03:fc:30:b5:
a6:04:d3:24:4c:f5:33:9d:b1:cd:95:6b:16:42:89:7a:c9:72:
a0:a8:54:7a:45:33:22:28:30:7d:d9:a5:56:cc:cb:59:d1:42:
c6:ac:e9:d0:8a:78:cf:8c:a7:6d:02:95:e9:3c:39:e3:f4:03:
fd:73:d9:50:99:b9:ca:0c:e6:8f:58:a1:53:9e:cb:8e:8a:ba:
d4:fc:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org