Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/p6Z72ZH-PzKNomzrTkixSDNPbHw.roa
File: p6Z72ZH-PzKNomzrTkixSDNPbHw.roa (raw, json)
Hash identifier: hW6+jYRlpIGRR6U92VL9sqNmtJdYhEezknlyV+LnuJE=
Subject key identifier: A7:A6:7B:D9:91:FE:3F:32:8D:A2:6C:EB:4E:48:B1:48:33:4F:6C:7C
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 0A9C
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/p6Z72ZH-PzKNomzrTkixSDNPbHw.roa
Signing time: Thu 15 Sep 2022 02:37:00 +0000
ROA not before: Thu 15 Sep 2022 02:37:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24158
IP address blocks: 2402:7500:600::/40 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2716 (0xa9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Sep 15 02:37:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A7A67BD991FE3F328DA26CEB4E48B148334F6C7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:e8:58:f5:21:16:86:63:40:4b:df:e1:84:
1d:9a:8d:c6:ed:d0:16:0a:3a:4a:66:b3:90:a5:04:
a8:ac:dc:99:db:ca:e9:20:2d:ec:71:66:bf:f0:c4:
55:36:e6:09:4b:15:33:ae:a7:74:26:e7:cf:57:96:
1e:fe:38:ec:e9:d9:67:01:ff:b4:e9:09:80:c8:ee:
f1:fa:42:ae:98:9b:9b:76:d1:87:8f:1d:59:e4:f3:
cf:45:b4:ef:68:bd:29:17:7d:94:cf:ed:14:e1:58:
18:a7:fb:28:0a:c8:f2:fa:c9:88:21:07:b4:6b:c4:
17:35:17:5d:f6:84:1b:9c:80:14:b1:cb:24:1c:05:
63:12:b2:ad:a0:11:20:31:7e:c5:b1:7a:84:ad:1e:
f0:79:58:5f:a0:f2:76:87:f6:a4:6a:db:31:bf:fa:
16:9d:5a:2f:cd:ec:f1:1d:8d:33:eb:e0:03:38:3f:
ad:bb:03:85:31:45:b7:30:9b:78:f0:a1:17:cc:5e:
59:c5:1c:f5:be:b8:b5:05:21:69:75:22:42:e1:df:
c4:aa:23:8c:b0:54:4a:d6:69:70:cf:73:45:4f:7f:
e8:11:46:ee:ab:e4:75:d0:64:93:13:1f:79:24:ad:
0a:0b:09:82:6b:4e:f4:72:7a:8b:be:cf:7b:29:1b:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A6:7B:D9:91:FE:3F:32:8D:A2:6C:EB:4E:48:B1:48:33:4F:6C:7C
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/p6Z72ZH-PzKNomzrTkixSDNPbHw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:7500:600::/40
Signature Algorithm: sha256WithRSAEncryption
a3:3c:9a:c8:b5:f5:47:61:b5:32:f7:96:ee:c3:8e:c9:2d:12:
cf:8e:8a:77:d5:ba:51:eb:87:2f:03:e3:1c:d2:45:69:ca:22:
62:8c:68:25:5f:24:73:97:ef:ad:54:91:c0:6a:04:91:35:40:
ab:ba:0e:51:d4:96:38:d7:de:5b:9b:cf:50:1a:08:fa:57:89:
38:f7:f3:3c:a6:85:84:5a:fa:4c:44:9a:9f:3c:0b:1e:8d:56:
9b:27:89:88:be:b5:60:c9:36:75:0e:5d:c1:f8:a5:7d:bb:b5:
7a:fa:6e:a9:6f:a9:11:14:af:b3:f1:6f:03:b6:84:f5:3e:cc:
a5:46:62:ea:0c:61:74:db:40:f2:4f:84:23:f2:44:b1:d3:28:
8f:44:57:3f:28:5b:e4:dd:52:bd:58:00:51:35:1f:6f:51:4e:
33:7f:3a:4a:e2:6c:54:db:73:cc:3c:32:8c:61:91:c0:66:94:
48:9a:2e:43:54:be:10:fb:19:a3:d5:c0:da:36:b9:1a:22:23:
4f:65:98:72:3a:98:d4:46:a2:0f:50:d8:e3:e6:77:fe:e2:10:
0f:0b:4c:88:26:2c:8b:3a:cc:aa:a0:52:b6:03:11:6b:bd:d0:
90:6c:79:dd:c3:48:5e:d4:c0:ea:38:4c:aa:02:3c:4c:d8:51:
74:97:b2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org