Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/l39MEIKNI0u8NmOVxkkR2D6ghVM.roa
File: l39MEIKNI0u8NmOVxkkR2D6ghVM.roa (raw, json)
Hash identifier: IxL05cXTwmw9GlajhQB1HIbj2SVNT+fwne2WSd3ALgE=
Subject key identifier: 97:7F:4C:10:82:8D:23:4B:BC:36:63:95:C6:49:11:D8:3E:A0:85:53
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 0AA4
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/l39MEIKNI0u8NmOVxkkR2D6ghVM.roa
Signing time: Thu 15 Sep 2022 02:44:10 +0000
ROA not before: Thu 15 Sep 2022 02:44:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38047
IP address blocks: 2402:c340:55::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2724 (0xaa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Sep 15 02:44:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=977F4C10828D234BBC366395C64911D83EA08553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:46:a6:cd:79:f2:d9:f7:e3:09:ec:d2:d2:
ff:11:15:48:ed:bd:f9:c5:a6:b2:76:a0:1b:15:6f:
68:8c:59:b8:92:5a:ae:93:fc:16:37:d9:12:4c:e8:
62:fd:01:60:f2:9e:55:5c:fa:2a:68:d1:51:eb:b8:
99:9e:7b:89:19:43:1e:8a:f8:65:1a:7c:41:c2:68:
05:e1:b8:6f:86:dd:bb:40:1e:87:7a:ba:a4:b2:65:
c8:d9:a9:24:3b:c6:a7:aa:9a:85:11:40:aa:8b:f3:
3e:0a:1a:21:74:40:ec:94:a7:c4:b9:30:12:08:38:
03:1a:2e:3e:83:7d:0a:ce:f8:08:c6:a2:38:b7:31:
f0:60:04:f6:ea:de:17:12:95:fc:73:38:0c:68:ce:
db:35:2e:fd:a2:39:a1:85:52:15:c2:84:0e:15:84:
f7:61:3d:79:7f:6a:0a:dc:60:55:c5:3c:4d:c8:7d:
62:fa:af:4c:e4:f8:45:bc:e0:93:e5:90:81:ec:e0:
09:e0:e1:52:74:52:7b:71:1c:a9:ad:de:e9:13:fc:
3e:58:6b:72:80:df:55:2e:06:a6:99:0d:92:33:25:
1a:40:67:b0:14:54:ce:0b:89:73:78:98:ac:db:31:
0e:95:72:4b:c5:db:6c:0a:a5:b7:a9:0a:43:db:6a:
c2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7F:4C:10:82:8D:23:4B:BC:36:63:95:C6:49:11:D8:3E:A0:85:53
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/l39MEIKNI0u8NmOVxkkR2D6ghVM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:c340:55::/48
Signature Algorithm: sha256WithRSAEncryption
94:9b:43:4e:cb:37:e4:33:22:eb:01:0d:da:94:38:78:66:c9:
e8:7a:60:62:63:cd:92:a0:04:70:ed:f5:3c:59:a7:d7:6c:d1:
ef:10:5a:c7:4d:7d:af:6a:ab:e8:2d:08:c9:59:15:f7:39:ce:
a2:b5:eb:a8:b9:e5:59:b7:cc:c5:d0:ed:fc:0e:15:ab:63:13:
59:56:e8:6f:49:3f:ce:c2:f7:7e:31:fc:98:16:46:8a:2a:11:
57:da:b3:e0:76:6b:b2:ed:7c:46:2a:09:8f:c0:43:2f:96:2e:
59:1a:97:e3:ce:e7:60:cb:aa:cd:fd:50:17:33:02:2a:eb:af:
e9:04:24:df:e3:a0:99:66:da:b9:16:28:5d:81:2d:7a:cb:97:
47:3d:08:1c:f3:7b:67:b3:e7:8e:fd:ff:ac:9f:38:14:60:84:
d0:1c:f9:9c:87:6b:f7:8f:cf:00:12:db:d7:1c:6d:a3:ec:8b:
dc:32:03:de:f0:83:b7:1b:7a:34:62:7a:c0:97:7f:9f:17:4e:
f9:7e:6e:e7:02:e5:d6:b5:5d:fe:5d:4c:ac:a1:d8:d0:30:a1:
ea:dd:21:12:9d:c7:ac:71:47:7a:ab:0a:0c:52:64:e7:0e:d7:
79:f7:b0:ee:90:40:fb:cb:3c:e2:d6:6b:2e:65:6e:25:31:ae:
f3:1c:cc:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org