Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/vRJj_z8RQhNCPbKDRq2-gVF_UmQ.roa
File: vRJj_z8RQhNCPbKDRq2-gVF_UmQ.roa (raw, json)
Hash identifier: q9NpZJanPL3wNOyIK5EJ3rdrUwTmNYCx5I4VbbkSAHo=
Subject key identifier: BD:12:63:FF:3F:11:42:13:42:3D:B2:83:46:AD:BE:81:51:7F:52:64
Certificate issuer: /CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB
Certificate serial: 0644
Authority key identifier: 2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/vRJj_z8RQhNCPbKDRq2-gVF_UmQ.roa
Signing time: Thu 15 Sep 2022 02:47:48 +0000
ROA not before: Thu 15 Sep 2022 02:47:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131677
IP address blocks: 2405:e4c0::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1604 (0x644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB
Validity
Not Before: Sep 15 02:47:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BD1263FF3F114213423DB28346ADBE81517F5264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2f:20:7a:11:d4:e8:e0:d2:6d:35:d8:b2:c6:
99:84:a9:04:68:96:6c:f1:1e:1f:0f:14:fb:13:a4:
f7:6e:30:14:fd:58:69:d5:8c:30:61:65:67:81:03:
d8:4d:5f:31:af:14:a1:67:af:82:bf:03:9f:19:00:
e1:73:38:09:fc:89:00:4e:89:8e:53:c3:84:71:ed:
0d:e9:1a:f2:7d:5c:20:6b:51:e1:0e:d4:01:7a:17:
fe:90:22:03:b3:88:ce:97:b7:16:d3:a9:aa:a0:21:
88:c5:cf:e1:fb:fd:e8:83:ad:60:5d:80:17:8b:27:
88:9d:d6:d3:9d:bf:4b:39:fe:ff:18:65:f9:c2:4e:
1e:a9:d0:22:c9:35:2a:51:e9:8f:3e:58:54:9e:92:
df:ba:5f:a1:fc:f2:36:55:ce:12:fe:5f:df:4b:88:
bd:58:5b:88:32:9b:27:58:71:56:00:e8:e8:22:9d:
95:67:2d:76:cf:79:4e:d1:3b:fc:06:99:f9:7e:9d:
d6:0a:ac:a8:d3:76:9f:96:a3:67:a9:3c:cb:33:54:
5c:17:c3:bb:63:59:9a:e2:8b:0a:7c:9e:de:4d:23:
6c:ab:0f:9e:14:08:d6:8d:06:bb:b9:f7:d7:4f:3f:
8f:0b:03:71:0c:d5:85:5e:16:80:88:3f:15:2f:b6:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:12:63:FF:3F:11:42:13:42:3D:B2:83:46:AD:BE:81:51:7F:52:64
X509v3 Authority Key Identifier:
keyid:2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/vRJj_z8RQhNCPbKDRq2-gVF_UmQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:e4c0::/32
Signature Algorithm: sha256WithRSAEncryption
01:25:2f:7a:02:d1:42:a9:ca:7a:b5:86:0a:01:f8:e2:e5:08:
4a:50:45:47:67:34:f6:8b:98:65:02:c2:5e:c3:d1:d8:b8:c7:
16:bd:fa:1a:75:69:9a:7a:dc:a7:f2:e3:70:37:82:39:8b:28:
2a:64:57:27:e6:e8:73:61:ab:21:1e:6d:59:f8:27:e5:62:9b:
9d:4a:44:a6:e6:2b:b8:84:57:d9:6b:bd:17:ff:a1:72:a7:78:
01:b7:35:8e:7c:22:fe:31:9e:17:df:7c:84:cd:bf:30:8e:5d:
18:4e:33:9e:20:ad:fb:bc:c1:72:5e:bc:07:0a:a3:00:72:b5:
ac:5b:f7:ad:73:be:21:8e:b5:2b:dd:e5:c4:df:45:1f:9f:1b:
12:ae:a7:a4:16:33:91:24:42:a3:9f:b7:4a:48:e1:8a:83:cc:
ed:7a:7f:e4:e1:b8:e5:ce:8b:64:fd:82:93:4e:68:e8:12:f1:
a7:73:95:fc:c4:2a:65:56:10:ff:8b:d4:49:90:57:b1:ab:d9:
30:47:9a:7f:c3:83:e1:b3:9b:0e:78:c7:26:2b:1c:08:f0:88:
b7:1f:5c:f9:61:d6:17:69:8a:34:e7:72:c4:40:1e:88:e8:7a:
b6:25:ef:8f:d3:65:a2:8d:15:e2:6c:75:a8:80:52:5c:92:cc:
1a:d7:d7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org