Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/4k815V-q5XM12ReWHn5q319C6hI.roa
File: 4k815V-q5XM12ReWHn5q319C6hI.roa (raw, json)
Hash identifier: IxAT7R2b+9ti02ElrDRaUSgMmb7QZM6mBJg4YqtWitQ=
Subject key identifier: E2:4F:35:E5:5F:AA:E5:73:35:D9:17:96:1E:7E:6A:DF:5F:42:EA:12
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 099D
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/4k815V-q5XM12ReWHn5q319C6hI.roa
Signing time: Wed 29 Sep 2021 02:44:40 +0000
ROA not before: Wed 29 Sep 2021 02:44:40 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38047
IP address blocks: 2402:c340:e168::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2461 (0x99d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Sep 29 02:44:40 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E24F35E55FAAE57335D917961E7E6ADF5F42EA12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:92:6b:b0:4b:fa:eb:49:ab:d6:01:dc:ff:
b1:0e:a0:76:33:96:75:47:3c:24:06:8c:e4:c7:4c:
76:48:c4:ea:f3:ae:9b:98:72:40:5d:ac:3a:71:03:
01:5a:7f:08:0b:88:f1:fe:2d:68:2c:4f:bd:a1:cb:
74:a2:89:65:88:c4:eb:70:86:9e:84:41:82:fa:43:
d8:1f:1a:1a:88:c9:2f:b5:66:27:66:f4:f3:27:c8:
26:53:ae:96:80:62:87:b5:9d:c5:a9:fc:a7:2f:5b:
a2:e0:30:6f:ca:40:aa:c9:4d:91:0d:30:94:68:72:
f1:a7:b7:21:2f:60:e2:16:8b:4d:7d:33:81:66:6a:
94:fb:c2:b4:e2:5c:a3:08:1e:60:5f:2d:e6:31:f4:
32:a0:13:17:c6:13:ba:a8:20:32:25:db:45:c9:5f:
41:f3:d5:57:0e:b7:a3:0d:06:d7:56:fc:be:85:d0:
93:1e:f7:eb:c8:21:d0:d9:21:88:60:05:de:04:da:
88:f3:65:1d:b7:3f:aa:dd:e5:cf:dd:a4:d2:17:aa:
3a:3c:bd:06:cf:7c:a0:15:5b:d6:87:b7:af:96:ba:
7e:ab:a4:ce:d0:e0:55:0d:c2:7e:85:88:c5:ee:d1:
61:f5:24:a2:8f:36:0f:6a:35:de:98:31:2a:e0:66:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4F:35:E5:5F:AA:E5:73:35:D9:17:96:1E:7E:6A:DF:5F:42:EA:12
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/4k815V-q5XM12ReWHn5q319C6hI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:c340:e168::/48
Signature Algorithm: sha256WithRSAEncryption
05:3c:35:36:53:ca:61:1b:80:66:02:3e:84:76:a5:13:34:db:
08:e7:1d:46:89:4c:d8:b4:58:19:18:bd:85:fb:d6:5c:7e:46:
fc:99:cb:5e:b2:9e:25:ef:be:88:f7:b3:8d:5e:e1:4d:03:8d:
85:03:da:1d:fe:f2:05:21:52:47:3b:01:8d:22:aa:7a:76:02:
36:2e:de:89:06:9d:1e:c7:48:04:1b:4e:2f:13:68:fa:96:7c:
5e:bc:78:7b:f6:48:0a:26:1b:f8:1a:3f:76:6b:b7:6c:39:7f:
78:28:d5:e4:8d:b6:c7:68:79:1c:f2:d6:77:b0:a6:10:9f:10:
01:87:91:88:ae:cd:7a:4f:aa:aa:7b:2e:0a:6e:5f:a2:4a:eb:
9b:de:23:e4:49:cb:9f:c0:75:97:63:10:1b:f0:c0:d9:aa:09:
7c:b8:a4:fe:ad:5c:23:90:b1:69:83:8a:63:88:14:98:a0:17:
62:96:62:a6:99:1a:28:aa:19:ba:c1:a6:a5:47:20:a7:ef:91:
c7:8b:59:af:7e:da:9e:7e:50:89:c7:91:6d:ec:7a:84:96:33:
18:ec:0a:69:d2:ca:4c:e7:9e:75:d1:bd:56:59:67:af:54:d3:
73:d9:6e:7a:de:d5:f1:5e:32:40:10:5d:57:d4:62:0a:c7:77:
25:f2:bf:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org