Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/EDoYyKhRopQEXBumBaa5RSPl_W8.roa
File: EDoYyKhRopQEXBumBaa5RSPl_W8.roa (raw, json)
Hash identifier: w14Lr9gK9I87pROjR5EFjZIdosbSwXFUhc47RRovKzM=
Subject key identifier: 10:3A:18:C8:A8:51:A2:94:04:5C:1B:A6:05:A6:B9:45:23:E5:FD:6F
Certificate issuer: /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Certificate serial: 0924
Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/EDoYyKhRopQEXBumBaa5RSPl_W8.roa
Signing time: Wed 29 Sep 2021 02:50:24 +0000
ROA not before: Wed 29 Sep 2021 02:50:24 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131633
IP address blocks: 2403:86c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2340 (0x924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Validity
Not Before: Sep 29 02:50:24 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=103A18C8A851A294045C1BA605A6B94523E5FD6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:0f:4f:e5:65:ad:34:64:ff:16:46:2e:67:
2d:71:9a:06:f9:d1:09:ed:dc:0c:cd:63:73:22:41:
81:24:ac:01:72:08:23:d7:96:5b:de:09:29:65:5c:
d9:c2:87:fd:c0:bb:95:eb:d9:92:72:ff:79:c7:17:
79:36:b7:0e:e3:53:72:14:89:05:5f:52:46:95:1d:
f4:d5:b2:23:57:1a:ea:e8:d9:91:8a:54:68:2a:37:
fc:ca:07:ec:04:61:60:50:e6:0c:3b:36:8e:b9:88:
14:1b:ce:30:b3:2a:8f:8d:bf:d0:6c:72:b0:35:dc:
7a:1e:8e:76:0b:02:b7:42:a4:6d:bd:75:59:85:33:
1d:5d:a7:15:92:26:f8:6b:95:0b:44:97:2f:79:26:
63:9b:f5:a0:98:06:b2:a7:31:c5:29:f7:e0:f9:50:
60:fc:01:5d:8d:84:41:48:2e:90:a9:da:95:bf:34:
c9:ce:a9:6a:07:6e:7d:78:46:f2:aa:b3:3a:b4:16:
08:e7:9b:51:7b:b3:55:6f:74:1a:ed:06:d2:ed:39:
07:69:52:ca:dc:8f:cd:c6:a2:84:35:79:7e:62:2e:
ec:e7:b6:05:ef:87:0c:30:cb:31:f9:9e:dd:0f:25:
c8:73:6f:a2:e1:3b:6f:a2:68:f0:20:82:a7:a6:db:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3A:18:C8:A8:51:A2:94:04:5C:1B:A6:05:A6:B9:45:23:E5:FD:6F
X509v3 Authority Key Identifier:
keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/EDoYyKhRopQEXBumBaa5RSPl_W8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:86c0::/32
Signature Algorithm: sha256WithRSAEncryption
64:cf:0d:56:65:9d:6d:7b:06:dd:75:d7:c7:21:df:90:c3:b7:
b0:97:56:07:c8:a1:09:3f:e3:58:6d:dd:ff:1b:aa:dd:90:25:
87:a8:36:e1:1f:c8:0f:90:67:2e:7e:ad:5b:6f:62:89:91:8c:
58:16:be:a8:b0:39:62:69:b5:a5:91:f3:9c:2a:f9:f5:b1:ca:
1f:43:d0:28:3d:1d:c8:c1:fc:4c:05:07:8d:85:4d:3a:f2:5f:
25:f7:21:18:56:8f:2f:27:51:87:5a:77:87:f1:e8:96:77:5f:
8e:87:e9:de:b1:06:a4:af:4d:28:2d:3d:5b:e0:27:1f:1d:13:
19:5f:6c:7d:73:a7:83:47:87:73:dd:18:8b:2f:a8:d0:63:71:
16:66:25:20:bf:53:19:c1:d4:af:f0:7e:c3:d4:28:d4:23:d5:
d4:6c:86:25:60:27:3d:34:c9:71:d2:bc:3d:53:fb:96:bd:e6:
fc:f6:74:63:4a:cc:c1:ce:ae:31:3b:70:e6:62:6c:de:e0:0d:
4c:97:3c:23:5f:0c:6b:b3:3c:a4:37:f6:96:2b:cd:6d:13:a1:
ff:c1:20:e5:9a:f5:bb:e9:4e:70:5e:00:f2:dd:56:c4:44:9c:
22:70:59:37:a0:31:78:51:3f:e0:77:6b:dd:80:99:5b:c8:c7:
7b:13:f9:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org