Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/iI7HvGAgOxX5BdpYJga8O7LRkYI.roa
File: iI7HvGAgOxX5BdpYJga8O7LRkYI.roa (raw, json)
Hash identifier: wZueIyfnkXZjLEeOx57MIPDKUtH4Lo6zeqkPLEVAP9s=
Subject key identifier: 88:8E:C7:BC:60:20:3B:15:F9:05:DA:58:26:06:BC:3B:B2:D1:91:82
Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Certificate serial: 078E
Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/iI7HvGAgOxX5BdpYJga8O7LRkYI.roa
Signing time: Tue 29 Sep 2020 10:06:18 +0000
ROA not before: Tue 29 Sep 2020 10:06:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4783
IP address blocks: 2405:a00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1934 (0x78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Validity
Not Before: Sep 29 10:06:18 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=888EC7BC60203B15F905DA582606BC3BB2D19182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:87:16:67:22:4c:b0:a1:4f:b2:d9:7c:90:a8:
4d:2a:a3:47:91:40:45:70:9f:88:6d:d8:b3:18:2e:
69:4b:be:26:ec:0c:b3:7b:f3:5b:41:ac:4b:4e:1e:
61:3a:8f:56:ea:3a:07:18:b3:1f:46:d5:41:28:89:
da:3d:d8:1b:ea:ee:10:6b:65:31:04:4b:25:f9:ae:
79:b5:40:17:67:0a:d1:2f:55:04:f9:e3:23:61:83:
14:5e:a2:24:9f:23:39:27:af:2f:b9:7e:7b:0d:99:
6f:f0:45:06:03:6a:b2:fa:a7:4c:7d:90:32:3e:c1:
75:56:67:bf:b5:2d:a7:50:48:bd:57:c0:e6:cf:14:
b4:73:e4:22:55:d6:45:b6:61:a5:bc:69:ed:3c:b8:
2e:0a:bc:dd:3b:11:11:41:c7:85:9c:61:d6:ec:e7:
c6:7e:b1:83:ea:d5:e1:4d:bc:83:cd:0d:77:12:54:
d8:b7:60:2c:cc:9d:b2:6a:da:5b:9e:4d:8a:43:06:
3e:5f:ac:03:b7:dd:96:2e:19:a1:23:bb:3b:55:6e:
50:d9:68:c3:b7:cf:69:fe:d0:55:87:5b:fc:3b:8f:
91:92:f0:71:11:70:e1:83:1e:2d:88:a3:f5:f8:86:
4a:88:2b:95:8a:24:1b:88:47:24:2b:9c:26:61:63:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8E:C7:BC:60:20:3B:15:F9:05:DA:58:26:06:BC:3B:B2:D1:91:82
X509v3 Authority Key Identifier:
keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/iI7HvGAgOxX5BdpYJga8O7LRkYI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:a00::/32
Signature Algorithm: sha256WithRSAEncryption
58:72:ec:d4:92:ba:aa:b8:0b:1f:85:f9:53:99:f7:45:97:f3:
9e:df:31:85:93:18:7b:45:4e:f2:70:01:b2:c4:de:ef:ae:69:
e2:22:a8:56:58:25:24:b4:c2:7c:88:cb:59:ec:81:fd:9d:83:
00:fe:89:20:37:60:52:c7:ba:28:5c:36:a7:65:b2:54:43:ed:
a2:40:b8:9a:22:85:5d:8d:64:49:cf:25:32:fa:25:2f:ca:f7:
01:16:26:d9:c9:ae:a0:50:92:cf:69:11:43:e6:16:d3:bf:f9:
31:bd:6c:47:70:42:ea:3e:0a:34:ce:05:94:56:79:eb:46:7c:
99:43:30:ab:8f:ca:bc:32:e1:ff:b5:1a:74:9f:e8:e1:ae:05:
f3:3f:79:4a:f5:9d:ca:28:c1:06:41:e1:b7:f1:bc:2d:4c:cf:
4c:be:3b:e2:b6:ba:d6:f5:b1:8c:a1:79:f2:54:5d:c5:c1:d5:
3b:69:fc:82:c2:68:d5:08:e5:20:2c:17:24:06:95:89:62:47:
23:a9:c4:91:34:4d:84:a7:d4:88:2c:d0:c1:ef:f5:dc:e5:a4:
1a:e0:06:78:ef:41:d6:ac:18:07:09:f5:00:e2:65:fe:ee:aa:
98:33:5c:4c:65:b4:79:b0:2f:7b:ad:36:9d:fe:7b:17:71:ca:
8c:26:9e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org