Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/XxJw9ycMhujpJC41FKwDjeU5A60.roa
File: XxJw9ycMhujpJC41FKwDjeU5A60.roa (raw, json)
Hash identifier: 0+d2ranrMafM4XRi/hBnKOkdbr7aHx6WPxAiF+/6t/8=
Subject key identifier: 5F:12:70:F7:27:0C:86:E8:E9:24:2E:35:14:AC:03:8D:E5:39:03:AD
Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial: 110D
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/XxJw9ycMhujpJC41FKwDjeU5A60.roa
Signing time: Thu 15 Sep 2022 02:38:25 +0000
ROA not before: Thu 15 Sep 2022 02:38:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9922
IP address blocks: 2403:b340::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4365 (0x110d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Validity
Not Before: Sep 15 02:38:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5F1270F7270C86E8E9242E3514AC038DE53903AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:64:5c:47:f8:42:53:1e:12:49:90:2e:d9:
33:25:7c:da:af:7c:6f:b8:69:0e:43:79:0c:e3:ad:
0a:ff:ce:8e:7c:19:a5:67:b9:86:78:9c:04:00:af:
71:5f:34:11:e8:b8:91:9c:b3:74:49:88:1d:ef:ec:
88:06:88:5a:26:61:89:22:b8:cc:40:05:e1:84:f8:
67:22:e9:c8:43:93:31:54:dd:af:82:f6:d4:0d:fe:
da:13:03:f9:6b:85:70:1e:0c:db:6d:4d:a2:fc:d0:
1d:cc:70:58:f8:20:98:ae:cf:f9:88:ec:fe:aa:03:
d5:84:ef:b4:43:9a:c9:02:4a:ea:c9:88:c7:4d:0c:
ed:6e:5a:2f:b8:a2:d5:ff:36:ae:32:76:73:65:51:
0b:1b:7e:c0:68:fe:62:4b:48:d7:d3:8b:05:94:d4:
e5:c4:ff:50:b8:59:8a:62:ff:92:d2:70:62:fd:fd:
ae:77:1e:6f:30:d4:be:97:ca:11:a5:b4:51:9b:99:
86:9b:7d:da:13:30:4f:ec:51:ea:f3:b1:43:73:74:
97:ae:5f:ba:34:ab:bd:5a:d3:1c:72:e9:22:68:8c:
fc:f6:c2:8b:a9:c5:a6:f0:da:6f:1d:1a:9f:ad:b3:
d8:9e:85:2f:45:3e:ef:7c:1d:dd:b1:fe:ac:87:4a:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:12:70:F7:27:0C:86:E8:E9:24:2E:35:14:AC:03:8D:E5:39:03:AD
X509v3 Authority Key Identifier:
keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/XxJw9ycMhujpJC41FKwDjeU5A60.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:b340::/32
Signature Algorithm: sha256WithRSAEncryption
48:a8:d0:a9:ee:87:77:aa:07:fe:c1:78:da:11:38:9a:40:2f:
90:2f:15:16:20:8f:2b:ea:9c:7f:c5:4b:a6:24:0e:6a:f9:4d:
38:e4:87:b6:60:58:c5:a5:2c:37:4e:b1:91:fc:be:c5:68:18:
e0:c2:bd:e8:dd:84:2a:6d:cf:24:80:32:14:a5:fd:40:12:63:
cd:62:51:51:62:50:18:99:31:bf:35:96:d6:6d:04:76:75:ac:
dc:97:c3:4b:8b:4b:57:e0:01:f2:60:9d:38:43:29:e4:9b:58:
20:7e:47:a4:46:57:49:71:4c:45:2e:b4:e3:64:bb:27:8f:14:
54:92:35:84:d2:2a:9b:e8:a6:8f:b2:24:38:59:c5:50:c3:8c:
15:4a:36:17:e5:7b:16:34:97:e4:88:2b:ee:9a:ea:4e:07:cd:
27:c8:db:d3:16:2a:ed:22:58:b8:61:f9:40:98:c0:d5:00:4c:
93:04:5b:42:1c:f4:5b:ba:af:99:c7:f6:93:08:d1:cc:f6:88:
6f:f7:22:88:55:5f:5a:5c:3e:14:5c:32:a3:a6:f4:29:5c:04:
09:cd:a6:95:39:f7:4e:80:2a:c1:36:f4:91:9e:e1:b1:35:f2:
2d:27:ee:cf:27:8b:7f:29:fd:db:ff:45:a3:51:ad:6d:99:30:
2f:b1:77:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org