Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/cYY4b-ASw1xkvnZHIJCo8ebLEKA.roa
File: cYY4b-ASw1xkvnZHIJCo8ebLEKA.roa (raw, json)
Hash identifier: jZs9+iABg9AhpBm8C6fhT6loaisYsmGiPgdTbSqf8Lk=
Subject key identifier: 71:86:38:6F:E0:12:C3:5C:64:BE:76:47:20:90:A8:F1:E6:CB:10:A0
Certificate issuer: /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial: 0DA2
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/cYY4b-ASw1xkvnZHIJCo8ebLEKA.roa
Signing time: Mon 11 Jan 2021 12:38:33 +0000
ROA not before: Mon 11 Jan 2021 12:38:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131633
IP address blocks: 2404:2a40::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3490 (0xda2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Validity
Not Before: Jan 11 12:38:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7186386FE012C35C64BE76472090A8F1E6CB10A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:aa:10:a3:72:e8:14:fd:25:58:5b:5d:6a:
73:42:cd:92:43:cc:f6:1a:0d:40:34:91:4f:56:a0:
d6:47:2c:99:d4:9f:20:34:49:3f:5e:c6:17:42:ed:
da:bd:38:17:13:5d:ec:9b:e5:b1:3e:c0:1b:78:dd:
4b:a4:e4:a5:f3:b6:28:a9:c9:35:ad:96:72:6a:6d:
4a:7a:e9:74:93:0e:c7:75:9b:81:46:aa:ab:f9:ae:
99:07:aa:6d:3c:7d:3e:c0:f6:c7:46:26:bb:08:8c:
ea:69:9b:6d:74:f6:98:f1:14:04:b0:fa:6f:bd:e0:
0e:25:38:30:9f:8e:1a:55:8e:cb:06:90:df:00:3b:
da:8d:9d:46:72:59:f5:ff:65:3f:3e:a2:82:3c:3a:
b4:09:0d:b6:02:b0:b2:82:35:78:ea:a3:b1:ba:10:
c0:09:26:4c:6f:04:39:a7:7e:d7:e3:58:54:38:dc:
61:6c:88:43:40:1a:d5:d3:fe:50:0f:1c:52:96:85:
d1:33:03:f8:2f:db:bb:af:22:94:88:28:0c:b5:e9:
32:1e:3b:23:58:75:d5:50:0d:20:72:85:67:03:0e:
d4:c7:66:03:f1:5b:11:a3:7d:ad:ee:01:cb:ef:3b:
0c:4c:3a:56:54:9f:e8:66:b6:81:1d:f9:f8:dd:08:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:86:38:6F:E0:12:C3:5C:64:BE:76:47:20:90:A8:F1:E6:CB:10:A0
X509v3 Authority Key Identifier:
keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/cYY4b-ASw1xkvnZHIJCo8ebLEKA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:2a40::/32
Signature Algorithm: sha256WithRSAEncryption
7a:1f:3f:d5:8b:26:32:7b:c1:6a:f7:0d:1c:ec:40:b9:d0:7d:
dd:49:66:f9:2f:a3:ac:ef:65:82:17:8e:2f:fe:b3:f7:41:1a:
cc:ea:3c:3d:1c:ba:15:b1:c9:57:01:8a:06:94:68:11:10:5c:
5f:28:ef:55:68:a5:82:d5:d7:c0:7c:80:9d:ad:6c:d2:7d:87:
7b:c7:fa:d7:2c:e6:e5:0b:ae:cf:9d:9f:03:47:7e:d5:44:26:
7f:bb:14:4e:df:ff:64:52:e4:f4:36:5a:fe:8e:89:c7:76:da:
61:f2:78:fd:56:cd:8b:63:ad:9e:66:27:1a:ec:f5:5b:cb:ff:
7f:a1:7c:12:62:5e:b2:af:02:65:c9:91:9f:88:83:d4:04:46:
8e:48:00:ec:a8:bf:15:16:88:69:bf:b4:31:0c:81:e2:9a:22:
58:e9:c4:6d:13:45:cb:04:94:bb:96:fd:1f:57:e5:81:fb:d6:
d3:00:ea:9f:10:cf:1b:98:13:85:aa:fd:ad:e7:d4:cc:80:fd:
7f:21:87:fd:31:a1:bc:80:a6:a3:a8:50:0f:8b:89:ec:40:12:
75:36:45:34:d9:ec:8e:7a:93:b3:86:0c:42:37:f9:ae:78:8d:
d1:92:13:93:64:ef:25:78:e7:80:4c:21:7b:f4:26:d2:c5:be:
ad:d3:53:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org