Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/EUm4DLFVGvPwyTqr_VBX_X_xozM.roa
File: EUm4DLFVGvPwyTqr_VBX_X_xozM.roa (raw, json)
Hash identifier: IYlIOkOfoyxglVL2Zs+n9adD8/kGr51zpJcYRYsXDhM=
Subject key identifier: 11:49:B8:0C:B1:55:1A:F3:F0:C9:3A:AB:FD:50:57:FD:7F:F1:A3:33
Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial: 0AA1
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/EUm4DLFVGvPwyTqr_VBX_X_xozM.roa
Signing time: Thu 15 Sep 2022 02:41:00 +0000
ROA not before: Thu 15 Sep 2022 02:41:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18042
IP address blocks: 2400:df40::/32 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2721 (0xaa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Validity
Not Before: Sep 15 02:41:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1149B80CB1551AF3F0C93AABFD5057FD7FF1A333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:ab:d2:34:f5:ca:80:17:80:8e:47:51:ca:
bb:ef:53:72:16:8c:97:6f:b0:5b:5d:68:26:39:b9:
09:98:d3:38:5a:87:52:7f:3f:49:63:67:53:2c:78:
51:63:92:b3:fd:61:eb:e2:34:8b:24:8b:2a:c4:2e:
06:b3:3f:e2:02:13:f5:4c:d4:2c:1a:d0:32:ef:0c:
bb:17:7b:55:cd:5e:49:7a:50:cf:7f:a0:d2:24:b2:
30:87:cb:03:32:31:97:69:34:b5:e4:4c:04:71:7a:
69:92:50:5c:49:9c:ff:a5:f4:85:af:99:a3:8c:83:
ab:4e:17:69:43:dd:b3:72:3d:6d:82:e6:0f:3d:cf:
0b:0f:93:e6:39:df:cc:08:cf:77:a9:31:97:ab:4d:
3b:8c:6b:e1:a4:cf:26:33:a2:06:fd:63:a7:18:65:
0f:c1:f0:18:4a:e6:63:32:9a:83:f5:7d:af:c9:de:
b0:13:ea:9e:bf:8a:37:1a:c8:7f:44:35:e5:9e:7b:
dd:c3:1a:8a:6e:06:f0:00:43:98:a5:7c:fe:83:e5:
65:31:26:ee:84:99:86:b8:e3:6f:14:8c:23:80:94:
82:d1:03:c6:3a:44:e4:24:ed:5d:ef:f7:d5:4d:b0:
1d:ed:a7:dc:83:9a:05:f3:6c:41:ba:8a:e5:3c:98:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:49:B8:0C:B1:55:1A:F3:F0:C9:3A:AB:FD:50:57:FD:7F:F1:A3:33
X509v3 Authority Key Identifier:
keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/EUm4DLFVGvPwyTqr_VBX_X_xozM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:df40::/32
Signature Algorithm: sha256WithRSAEncryption
19:3c:48:0d:fc:ae:fb:10:10:45:d6:43:20:d1:d4:2c:0c:ae:
06:50:bf:53:02:7a:df:c6:b6:e2:94:83:70:ad:62:e2:cd:de:
18:11:2f:f8:38:37:3b:9d:9e:b2:61:be:a9:09:4d:99:e5:5b:
1b:7b:04:53:47:c2:c9:0c:07:a5:7c:42:20:ef:87:97:f5:4e:
56:15:1e:a6:92:42:ed:da:84:73:71:8d:a0:78:b8:71:59:d3:
db:75:7d:3b:62:67:2b:00:eb:01:88:84:2a:49:bf:f9:07:d2:
03:e6:3a:7e:5c:2e:b4:3d:4b:45:1d:a4:73:89:39:a5:ae:81:
e4:3f:ee:1a:ca:a8:3f:1a:4d:5a:d6:db:46:ae:d8:ce:4a:dd:
bb:d3:17:52:b6:41:a2:26:5c:71:ae:42:1d:92:73:79:23:41:
9c:43:1c:30:82:12:f2:2c:1e:61:63:56:7d:bc:90:c9:f2:ce:
d9:d2:14:d3:f9:09:3c:a0:e9:eb:43:a8:45:ea:56:53:14:f4:
f5:57:e2:a4:05:0f:78:c8:52:a3:d7:4d:fa:b5:e6:77:07:95:
ab:68:a8:da:b1:9f:d8:e1:8e:22:eb:fc:43:63:00:3d:ea:48:
15:dc:ac:7a:8e:29:a1:ba:eb:42:4c:5f:60:0a:0a:b7:75:81:
00:52:13:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org