Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCHC/ABRRiiW3wfVodhKhBGmjwV7d6-w.roa
File: ABRRiiW3wfVodhKhBGmjwV7d6-w.roa (raw, json)
Hash identifier: hA0Q51RgwBgQ9ahrPZ8Qg0nXFYmVcxFmHoRYkxD0dK0=
Subject key identifier: 00:14:51:8A:25:B7:C1:F5:68:76:12:A1:04:69:A3:C1:5E:DD:EB:EC
Certificate issuer: /CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891
Certificate serial: 095B
Authority key identifier: ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/ABRRiiW3wfVodhKhBGmjwV7d6-w.roa
Signing time: Wed 29 Sep 2021 02:37:53 +0000
ROA not before: Wed 29 Sep 2021 02:37:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7539
IP address blocks: 2001:e10::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2395 (0x95b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891
Validity
Not Before: Sep 29 02:37:53 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0014518A25B7C1F5687612A10469A3C15EDDEBEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:d8:bc:24:a8:34:a7:76:62:de:9e:06:4f:
0c:f6:9f:24:41:2e:e0:d8:64:7c:a0:80:9f:e5:33:
33:7a:ae:c5:96:9a:ae:8d:3b:12:d5:21:f0:81:c8:
7d:26:06:57:a2:63:9b:d2:16:b4:16:51:cc:2f:b8:
af:f6:13:7c:c3:75:a1:aa:65:8b:2d:74:0d:8b:be:
b9:ae:28:da:50:e2:f5:81:6a:2c:a5:c1:bf:e2:5e:
ad:89:5f:78:ae:4f:f5:76:d0:41:e1:51:1f:6f:04:
12:c1:3b:f4:10:d5:3d:c2:b4:30:da:5d:b2:e7:16:
5a:84:ef:ef:83:ef:34:fa:4d:5b:99:ac:3f:85:99:
23:70:f8:9e:94:4e:89:ec:8a:6a:75:59:5d:9c:64:
07:28:2e:68:b4:89:c0:9e:66:2e:49:d6:a9:fd:22:
00:1b:bb:32:fb:b5:01:23:ea:74:7c:cf:24:70:cc:
e1:80:61:c3:59:b3:31:90:c9:0e:83:aa:55:85:3c:
ab:df:6e:76:fc:29:c2:b2:7a:25:d2:92:17:1c:6a:
fc:f9:4d:c7:ae:b0:67:d3:1d:89:cc:d1:3d:86:2c:
9a:2d:1a:1b:48:2b:e0:91:cc:0c:2d:9e:fe:99:b7:
83:61:5f:a0:7d:58:52:f3:2a:5f:fe:15:59:3a:2b:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:14:51:8A:25:B7:C1:F5:68:76:12:A1:04:69:A3:C1:5E:DD:EB:EC
X509v3 Authority Key Identifier:
keyid:ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/ABRRiiW3wfVodhKhBGmjwV7d6-w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:e10::/32
Signature Algorithm: sha256WithRSAEncryption
1d:cd:16:15:a5:27:62:23:d6:b4:20:07:74:22:8e:be:d0:b0:
fa:ff:da:73:2d:1d:82:e9:ee:02:eb:9f:31:af:d2:fe:11:a5:
31:52:bc:7c:e6:59:49:fe:4b:66:ed:c5:8f:d7:45:89:4c:11:
47:1d:ac:54:16:91:3b:b8:4f:3b:a5:7e:0e:cb:34:55:8f:e6:
f3:77:2b:dd:a3:b4:01:b3:5b:84:96:36:db:85:b1:7a:97:42:
18:a5:57:47:3d:b4:83:55:84:c2:33:08:9c:40:ba:87:fb:4a:
30:1c:c3:2a:e0:9e:5f:69:0d:87:fc:9a:bb:0b:d7:dc:af:bf:
de:61:b1:0a:74:dc:b5:64:de:87:50:cd:c9:49:75:c6:94:23:
c2:42:0d:77:db:87:fd:b3:69:09:fb:31:21:77:29:2e:4e:25:
7b:e5:99:38:62:c5:c8:e2:f6:2e:f5:54:ae:9a:ed:21:de:17:
56:ed:90:c2:67:06:53:54:68:e2:30:71:17:f7:68:c9:2e:a3:
52:2b:a4:dd:d9:70:3f:d3:64:f1:fe:a8:2f:30:3e:8d:25:2d:
62:de:4e:d6:6c:b7:50:dd:cd:59:33:4b:d8:a0:06:94:3c:36:
25:a1:23:e4:b1:90:58:6d:12:85:40:1d:56:1f:38:68:b7:f0:
c6:f8:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org