Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PQS/jemJE3_Kw6oMMfpuvNtChI4yMa8.roa
File: jemJE3_Kw6oMMfpuvNtChI4yMa8.roa (raw, json)
Hash identifier: WJYXFe4eD2mEXiZtQyY2FekSpMmRTVNOA7kdrdCYI70=
Subject key identifier: 8D:E9:89:13:7F:CA:C3:AA:0C:31:FA:6E:BC:DB:42:84:8E:32:31:AF
Certificate issuer: /CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Certificate serial: 0E3E
Authority key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/jemJE3_Kw6oMMfpuvNtChI4yMa8.roa
Signing time: Wed 16 Aug 2023 12:23:30 +0000
ROA not before: Wed 16 Aug 2023 12:23:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131642
IP address blocks: 2404:aac0::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3646 (0xe3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Validity
Not Before: Aug 16 12:23:30 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8DE989137FCAC3AA0C31FA6EBCDB42848E3231AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:5e:ab:3a:11:86:0e:06:dc:80:16:76:52:
61:5b:31:9f:ce:35:d1:ae:3f:b5:5d:b8:61:50:45:
39:ae:4e:b5:51:c7:91:5c:84:3a:77:b8:25:63:b7:
02:91:8d:2f:9c:f4:60:f6:0b:10:34:10:ed:0b:b6:
c4:da:4d:2a:72:2c:fc:47:df:48:ec:19:23:11:e4:
91:87:5c:89:b1:5d:a2:d3:fc:8d:1e:2a:31:9b:12:
16:39:52:0f:bf:ed:e1:71:d7:f1:1a:8d:8a:95:34:
ae:d3:fc:f9:3c:e9:40:17:78:52:d5:2b:57:d5:3e:
ed:f7:76:d5:1e:f0:6e:d8:e4:92:42:a5:c0:5d:a0:
c4:92:1a:a1:d3:d8:fb:1e:a9:15:05:8e:43:9e:17:
57:5f:05:e9:33:6c:d7:18:1e:f8:76:9e:a1:0a:80:
c4:22:c2:2e:11:18:64:c1:de:07:6d:d7:1a:57:f2:
13:02:9a:6e:ec:9b:73:ee:35:c9:b3:2f:81:b5:67:
f7:67:1d:31:66:66:72:00:20:55:d0:02:03:f2:f3:
df:0f:68:f5:77:4c:59:9b:c8:cd:b5:6e:60:bc:6d:
81:b8:1a:58:10:73:a8:d9:53:7e:a3:8b:66:e5:87:
b2:17:4b:05:1c:56:ca:f8:11:d6:39:f6:01:10:33:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E9:89:13:7F:CA:C3:AA:0C:31:FA:6E:BC:DB:42:84:8E:32:31:AF
X509v3 Authority Key Identifier:
keyid:C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/jemJE3_Kw6oMMfpuvNtChI4yMa8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:aac0::/32
Signature Algorithm: sha256WithRSAEncryption
68:74:f1:98:11:97:03:1f:87:d2:02:47:44:2b:9f:b9:e9:6e:
9a:fe:fb:40:e7:f4:7a:53:00:28:50:d5:87:d1:87:8f:f8:b7:
48:a6:de:5d:52:b8:e3:fc:15:b1:4d:9e:0c:c5:17:0e:c2:69:
f3:70:fc:5a:9a:97:f4:13:49:7b:19:b7:81:6f:d6:02:a8:61:
98:4c:76:50:55:7f:b6:66:3e:e0:1a:f3:5d:9f:d8:ee:43:42:
bf:02:c0:16:93:86:ec:c1:cc:fc:5a:e5:72:c8:e4:0b:cb:59:
2b:3c:b1:ec:a7:08:4f:6b:ac:79:46:4a:a7:9d:7c:28:d3:e2:
1d:86:4d:d0:0e:f7:7b:8b:ba:a9:52:d8:1e:c1:b1:cc:8e:a7:
b6:1d:5d:28:08:15:7f:61:f6:92:78:84:ad:17:f9:89:4b:15:
8b:04:35:6c:ee:7f:50:94:9c:66:2b:60:a3:57:2c:48:7e:ff:
ed:56:ee:06:08:fa:2e:0e:b4:70:22:37:d4:73:fe:1d:38:e2:
42:13:b0:b7:8e:f4:8d:cb:b5:22:b2:c5:87:b9:8c:c3:6d:2f:
71:04:74:04:3c:2d:88:5d:0a:13:23:33:81:e4:cb:9d:7a:7b:
ea:d4:4f:53:25:97:f7:6c:f9:d2:82:86:61:0d:34:47:f0:82:
98:16:f8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org