Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Fzu0HicRFQDs2n-eivJ79kraTKY.roa
File: Fzu0HicRFQDs2n-eivJ79kraTKY.roa (raw, json)
Hash identifier: sj1s9Fas11w7aAFO0E33YRvSzazebl93KihOod49yv4=
Subject key identifier: 17:3B:B4:1E:27:11:15:00:EC:DA:7F:9E:8A:F2:7B:F6:4A:DA:4C:A6
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0A6B
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Fzu0HicRFQDs2n-eivJ79kraTKY.roa
Signing time: Thu 15 Sep 2022 02:42:03 +0000
ROA not before: Thu 15 Sep 2022 02:42:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131584
IP address blocks: 2400:4e80::/32 maxlen: 124
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2667 (0xa6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Sep 15 02:42:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=173BB41E27111500ECDA7F9E8AF27BF64ADA4CA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:2a:4d:d9:cc:a0:80:8e:0e:10:ae:b7:d0:
8b:36:68:66:16:6d:23:ea:3d:d2:47:93:70:24:80:
18:5a:1d:b5:a0:e9:15:41:58:e8:ae:85:c8:c4:e5:
89:6e:89:22:de:01:18:b6:d8:b2:53:a6:4b:92:4c:
d6:43:eb:ba:15:cf:68:c8:28:ff:c5:c4:c7:1e:32:
2a:1d:8c:93:b6:42:2e:dc:55:4c:8b:77:eb:b9:a6:
89:1d:1b:f9:7e:ae:82:4d:31:23:fc:91:0e:f9:d5:
60:b2:c3:91:17:a5:38:e1:45:8e:b2:5c:26:6b:59:
55:83:eb:d9:5d:60:32:15:e0:f3:17:f9:29:c5:ca:
48:8a:5d:07:58:08:b8:ed:80:75:8b:6f:47:fa:f3:
14:1f:0b:49:c8:2c:f8:8b:91:20:16:90:a7:65:dd:
73:32:ec:c4:ee:8d:36:89:ec:d0:7a:7b:12:6b:e0:
4d:f5:5c:d2:6d:d1:0b:60:73:76:89:73:94:86:c2:
34:6a:47:72:00:f8:e1:75:41:f8:51:b5:ef:a4:d2:
78:02:f6:5a:35:96:7a:b9:96:99:60:d2:07:f4:80:
07:fa:ca:85:52:62:5a:4e:ed:5d:24:d8:ca:ce:85:
c6:f8:43:74:b2:8a:8e:b9:bc:7d:ce:b8:53:7e:48:
53:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3B:B4:1E:27:11:15:00:EC:DA:7F:9E:8A:F2:7B:F6:4A:DA:4C:A6
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Fzu0HicRFQDs2n-eivJ79kraTKY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:4e80::/32
Signature Algorithm: sha256WithRSAEncryption
c5:e7:d7:67:7c:81:84:4c:47:1e:08:e5:53:4c:56:1f:e9:a6:
9a:63:d2:56:f9:07:e5:e1:80:fd:a9:48:48:cb:49:45:21:c8:
2a:97:64:e1:d0:28:02:28:15:2c:47:20:33:9a:f8:15:99:a6:
23:02:5a:47:9f:c6:27:4f:52:b4:a0:5e:ed:f0:26:55:c1:62:
71:9a:d6:e6:52:9e:b4:e6:d1:d7:40:26:37:78:8f:34:6c:e5:
c7:ff:e9:97:58:e1:a9:9f:42:09:41:44:11:44:3d:5d:7b:dd:
ba:18:44:ee:09:5d:f4:40:71:ea:74:97:f5:9b:90:6c:0b:57:
4e:cf:e9:e6:cc:4d:86:9a:ec:84:5e:9f:f2:5c:69:f5:aa:e7:
28:11:22:7a:d5:5c:b7:49:3e:dd:bb:21:60:84:04:42:ad:28:
34:e9:fb:82:47:44:58:a5:1e:2a:39:af:da:87:e1:4f:15:7a:
37:6b:6e:e1:3f:41:c4:04:9a:03:f9:a6:b5:4b:09:47:0e:5e:
3d:a8:b3:04:18:47:4a:cd:1a:1e:55:13:aa:69:5d:fc:c5:a5:
a4:ac:1a:48:84:e1:61:0b:cf:1c:73:34:37:04:95:99:fb:bb:
b5:99:00:01:87:92:2b:4f:0c:37:79:56:b0:cd:5b:cb:d6:03:
43:1a:97:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org