Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/0scnGstCDsqcdlEc_HCQ6oCQSBU.roa
File: 0scnGstCDsqcdlEc_HCQ6oCQSBU.roa (raw, json)
Hash identifier: NxCVrapDxCgbV/NdCnq0/eEj4zZuhNox4atLg1BK6jY=
Subject key identifier: D2:C7:27:1A:CB:42:0E:CA:9C:76:51:1C:FC:70:90:EA:80:90:48:15
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 09B0
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/0scnGstCDsqcdlEc_HCQ6oCQSBU.roa
Signing time: Wed 29 Sep 2021 02:56:04 +0000
ROA not before: Wed 29 Sep 2021 02:56:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24158
IP address blocks: 2402:7500::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2480 (0x9b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Sep 29 02:56:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D2C7271ACB420ECA9C76511CFC7090EA80904815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:4e:60:f2:dd:24:d0:6b:87:86:aa:d4:36:
11:0d:a3:1a:b4:06:ed:5a:c5:f6:de:64:d4:34:fb:
24:32:44:fc:17:b3:69:38:82:fa:4c:54:37:0d:98:
73:6b:40:a3:38:0e:c9:a1:23:e3:a6:1a:36:72:f1:
89:10:70:24:af:14:86:a2:a7:71:b6:14:46:87:81:
14:6c:2d:bd:2a:32:55:48:4a:25:69:dc:69:0b:be:
50:d8:c0:7f:b7:51:7a:6b:31:97:b2:44:45:29:b3:
c5:f1:00:6e:ee:9f:08:05:e5:6d:20:c5:46:8c:98:
02:3f:91:61:93:6e:e9:07:07:9d:00:ed:d8:71:c4:
ac:da:d5:82:6c:2c:db:96:c6:e9:f7:78:ff:82:31:
a2:71:26:f1:1c:bd:bf:00:ad:8e:84:da:b2:ba:ee:
a0:2f:fb:23:97:34:f0:28:95:5c:4b:37:51:6f:0f:
f3:7e:f8:b3:ae:f2:f9:7e:66:35:99:ab:fa:4f:2c:
7c:ca:c0:d1:89:b8:ea:5b:4c:2f:09:92:a2:58:0a:
48:8f:41:4a:d7:04:93:47:4d:f3:97:b0:25:93:bd:
11:5b:2a:8d:7e:a7:4b:4b:d1:05:cc:d7:6a:f9:2d:
64:e3:4e:66:a0:32:15:32:d5:26:77:8b:82:90:25:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C7:27:1A:CB:42:0E:CA:9C:76:51:1C:FC:70:90:EA:80:90:48:15
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/0scnGstCDsqcdlEc_HCQ6oCQSBU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:7500::/32
Signature Algorithm: sha256WithRSAEncryption
97:a2:0b:16:5e:5c:b1:30:a3:93:60:10:0d:30:b3:9a:36:ea:
6f:67:ee:9e:3e:cb:b8:ee:20:49:07:a0:f5:1d:e9:80:d6:b9:
94:27:48:97:31:6d:ec:13:f7:45:27:54:a2:35:38:5a:ca:84:
16:f7:7c:a2:2b:00:5e:bd:a3:ea:12:23:d9:78:e0:93:49:25:
33:cd:54:13:2b:23:6b:17:fd:a9:e2:ae:b3:65:10:76:e7:b4:
4c:61:da:ff:ee:34:96:c9:23:6c:24:b8:3a:5a:19:90:5c:56:
58:54:d3:80:6b:93:5b:04:3a:df:a9:4d:33:c7:66:41:76:6a:
f7:4b:a0:fe:02:9b:e5:6a:e8:2f:4e:d5:c8:63:db:14:f9:f2:
fe:a5:b7:48:f4:f0:2f:21:42:6e:55:5a:6d:ee:39:2e:57:77:
95:cd:53:89:1c:e9:39:25:4f:6b:bc:9e:0e:64:19:af:3d:bb:
f6:15:c9:f6:42:51:f6:bb:f2:56:09:1d:46:fc:8e:40:29:ab:
02:57:b3:13:35:59:c6:b4:94:ff:a0:f7:ef:ae:71:c1:90:fa:
6f:82:5e:ff:ce:e0:44:2f:39:21:5e:99:f0:3a:3a:c5:0a:56:
af:a9:92:84:ab:cd:13:1d:83:34:b8:32:91:e9:a8:2d:09:55:
2d:53:cb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org