Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/biHh0FGse9yAerfacXV5DSWO2ys.roa
File: biHh0FGse9yAerfacXV5DSWO2ys.roa (raw, json)
Hash identifier: TZ8cUVxg+30nkamn9DbnFd/rEzLOUDV8RA398lvjOQE=
Subject key identifier: 6E:21:E1:D0:51:AC:7B:DC:80:7A:B7:DA:71:75:79:0D:25:8E:DB:2B
Certificate issuer: /CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
Certificate serial: 0217
Authority key identifier: D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/biHh0FGse9yAerfacXV5DSWO2ys.roa
Signing time: Fri 01 Sep 2023 09:19:33 +0000
ROA not before: Fri 01 Sep 2023 09:19:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 396998
IP address blocks: 2407:d240::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
Validity
Not Before: Sep 1 09:19:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6E21E1D051AC7BDC807AB7DA7175790D258EDB2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:f5:22:18:a1:84:86:6f:51:3d:1a:21:63:
bf:24:7f:66:71:64:4e:71:50:0f:33:94:46:02:8d:
f0:ee:e6:5e:f8:0a:e2:dc:3a:e5:4d:a3:05:96:f8:
a1:ba:f6:38:7e:60:03:b0:6d:0f:89:c1:51:e3:6d:
b0:28:49:f9:42:c8:bf:10:e5:ce:65:26:69:f9:a6:
94:ec:aa:08:e2:b7:45:83:a0:dd:a5:bd:54:5d:9b:
14:97:49:3f:5c:65:28:69:8f:8c:bd:71:ff:9f:38:
87:fd:d4:e3:e0:41:44:77:3e:75:fa:f3:2a:d1:f1:
fb:d2:3b:cc:ff:c3:18:63:8b:a3:f1:23:eb:21:df:
24:45:7a:b5:3d:52:82:df:d1:c2:10:70:52:31:f2:
12:d3:2b:9d:73:b1:6d:ac:81:37:bd:fe:cf:bd:f8:
f8:7f:da:e8:3e:26:98:ad:38:52:31:f9:91:b4:0a:
c8:68:ba:65:4d:f3:5b:6f:10:d3:aa:4b:ad:12:42:
01:a4:3d:b4:eb:f3:b0:e2:18:19:87:63:39:14:99:
ff:ea:aa:64:5e:45:1e:65:1e:3e:c9:94:d6:10:81:
21:b2:a6:34:f6:54:d6:a1:75:a9:df:c8:02:8d:df:
65:0c:e6:9b:06:34:af:bc:dc:a6:d1:bc:29:17:29:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:21:E1:D0:51:AC:7B:DC:80:7A:B7:DA:71:75:79:0D:25:8E:DB:2B
X509v3 Authority Key Identifier:
keyid:D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/biHh0FGse9yAerfacXV5DSWO2ys.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:d240::/32
Signature Algorithm: sha256WithRSAEncryption
75:46:29:2b:cb:a2:c5:3d:db:56:ed:8b:eb:f9:e9:6e:1d:2a:
0a:2b:1e:cc:be:15:06:99:5a:ec:1b:ab:2c:ba:6e:b4:cd:eb:
de:4f:3b:95:23:0b:65:fe:80:97:2f:a1:fe:61:e9:b9:d4:2f:
d4:4d:fa:a2:61:6f:c8:fe:be:50:2c:7d:84:e3:f9:e0:68:f0:
ed:38:cf:5d:58:09:df:2a:5a:b3:2d:5f:21:5b:90:56:18:68:
af:65:a1:3a:aa:11:2c:e7:a2:46:99:a6:cd:61:6f:33:05:1b:
28:c1:cf:40:39:cf:60:2e:9c:19:44:1b:cf:c2:68:18:12:b8:
8f:47:e8:d1:36:97:fb:13:39:1b:c0:7e:b2:9a:f5:5d:dd:e6:
50:da:6f:97:fe:5e:0c:f1:ca:a7:59:c3:18:85:30:22:60:3f:
42:ce:80:0a:2c:25:36:ed:de:26:05:c1:d1:44:16:3c:e3:5f:
24:0f:1e:de:41:e7:a5:73:79:8f:88:0c:63:61:2b:18:ce:03:
51:fd:0d:8f:10:b4:0a:35:fc:2f:d8:86:16:04:ae:1e:99:09:
b8:e9:f5:f7:58:a5:d4:54:59:7a:f0:74:87:c9:eb:d3:ad:50:
a1:22:0a:d5:ff:67:db:8d:a6:62:b4:d3:50:7d:b0:01:70:8c:
7c:f6:b3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:32 2025 by rpki-client