Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCHC/FksklLeJMph5cSaXlYcbOEhm7dw.roa
File: FksklLeJMph5cSaXlYcbOEhm7dw.roa (raw, json)
Hash identifier: +KJpUfcy+nADh/9hvUozQdfMnP+Eghu6NhYnmVU8zps=
Subject key identifier: 16:4B:24:94:B7:89:32:98:79:71:26:97:95:87:1B:38:48:66:ED:DC
Certificate issuer: /CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891
Certificate serial: 0A48
Authority key identifier: ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/FksklLeJMph5cSaXlYcbOEhm7dw.roa
Signing time: Thu 15 Sep 2022 02:38:19 +0000
ROA not before: Thu 15 Sep 2022 02:38:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7539
IP address blocks: 2001:e10::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2632 (0xa48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891
Validity
Not Before: Sep 15 02:38:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=164B2494B78932987971269795871B384866EDDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:cf:ce:73:4a:64:9a:fa:3f:d1:e8:25:c4:
c0:a5:35:99:67:64:fb:fe:d9:b5:66:37:3a:40:a6:
86:50:21:9e:4d:b0:97:d2:b3:e2:cd:74:b7:fb:f7:
e0:aa:8e:e5:7f:28:cf:e7:20:03:c2:da:73:27:9f:
39:ba:eb:1b:e2:54:94:f5:7f:18:45:de:57:69:75:
79:28:14:94:ee:87:e9:21:39:2c:df:e4:c3:b7:39:
85:f7:36:a3:d0:ea:43:7c:6f:f0:55:63:b9:fe:40:
c9:20:54:41:b4:f5:dd:1b:63:a8:c2:43:24:25:28:
56:03:a6:4f:d3:98:15:25:fe:35:a5:5a:76:c6:3b:
66:2c:33:45:db:3f:27:5b:48:86:2e:9f:6d:36:99:
f8:eb:ae:62:de:05:ed:ce:a0:0f:f9:41:db:c9:7b:
a3:4a:d2:6e:71:76:ec:0d:33:c4:2f:32:49:4f:ab:
54:78:f3:11:5a:a3:80:f9:d1:12:a6:f5:4b:4b:c1:
1e:a6:9c:ee:53:1e:5f:fa:9a:40:c8:70:99:78:16:
25:f0:bb:45:ac:df:9a:46:0f:3e:7b:ae:bf:3a:49:
96:bd:45:64:58:45:e2:4c:1c:23:61:fb:aa:18:5d:
fa:35:7e:94:10:f2:13:b9:b7:51:52:68:cc:40:8f:
bc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4B:24:94:B7:89:32:98:79:71:26:97:95:87:1B:38:48:66:ED:DC
X509v3 Authority Key Identifier:
keyid:ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/FksklLeJMph5cSaXlYcbOEhm7dw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:e10::/32
Signature Algorithm: sha256WithRSAEncryption
6a:40:82:f2:56:b5:cb:ac:18:44:51:c7:44:82:2f:d4:13:63:
da:01:e3:80:d3:6f:65:f0:2f:39:3f:c3:8d:26:ee:a3:ad:a8:
7f:9e:53:22:17:03:8a:1b:ed:3a:ae:13:f0:69:d6:07:93:ab:
e4:11:e4:09:2f:df:eb:af:61:8e:87:09:2d:4b:9e:5d:79:46:
cd:e9:52:8d:4e:c9:ce:3c:60:5a:83:f2:b2:50:3a:7b:3a:00:
df:fa:ac:fe:3e:0c:52:06:7e:cf:4b:54:65:3b:aa:03:96:02:
c9:b0:ec:f5:1f:14:af:db:ad:4d:70:88:b8:49:6c:5a:19:d4:
ff:83:ee:ca:71:fb:18:c3:10:ee:81:79:d9:fd:a7:87:6e:23:
f5:18:78:c0:33:1b:25:a3:8e:e5:c6:bc:5c:ba:68:b6:cc:f4:
6a:90:48:d1:00:e0:31:6c:94:66:02:60:af:30:de:cd:b6:d2:
aa:62:65:a1:d8:52:e5:80:5b:50:8c:f6:e6:89:a8:2a:68:aa:
28:10:bb:f1:74:3d:a8:a1:cb:8f:94:4a:7d:06:09:1f:6f:28:
15:da:d1:af:14:6f:fa:c9:ea:00:b3:96:b2:ed:92:3f:d3:49:
14:b9:d9:aa:01:2f:0f:7b:90:4b:69:1d:1a:46:6b:b6:f0:16:
84:37:86:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org