Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIH/yRm92QCA0trzWcg4d7cSP-tMraA.roa
File: yRm92QCA0trzWcg4d7cSP-tMraA.roa (raw, json)
Hash identifier: B8egOSr1G1OnwmVNNLI/epO/84LAJW8LU7lwd9BMSoE=
Subject key identifier: C9:19:BD:D9:00:80:D2:DA:F3:59:C8:38:77:B7:12:3F:EB:4C:AD:A0
Certificate issuer: /CN=2D7204617354D70523B6F65A270712B6B19D815E
Certificate serial: 0777
Authority key identifier: 2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/yRm92QCA0trzWcg4d7cSP-tMraA.roa
Signing time: Tue 29 Sep 2020 10:00:48 +0000
ROA not before: Tue 29 Sep 2020 10:00:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131639
IP address blocks: 2403:7f40:f000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1911 (0x777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D7204617354D70523B6F65A270712B6B19D815E
Validity
Not Before: Sep 29 10:00:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C919BDD90080D2DAF359C83877B7123FEB4CADA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d0:17:f4:4a:77:c6:71:6d:24:34:90:05:d5:
65:6a:41:34:9d:07:d5:b7:80:4f:ec:a6:98:c2:74:
37:2a:b0:b9:4b:50:65:5e:7b:93:0e:0f:a5:06:52:
7a:89:9f:06:7c:54:e0:eb:c6:f6:c3:a8:26:ce:15:
94:f4:7f:71:93:a1:e5:a7:07:a8:bd:f2:55:c4:f9:
9c:a0:af:c5:e2:1a:ce:84:75:5a:cc:d8:ad:90:12:
83:21:e3:79:50:39:a4:79:8a:d0:33:4a:a4:04:57:
bb:cc:0e:7c:91:5d:0e:28:3b:df:29:0e:71:cf:13:
0b:b1:f7:97:35:db:82:54:d0:cb:44:be:9a:6e:70:
5e:90:46:34:bf:b0:a8:32:98:ca:06:f2:34:24:31:
05:83:91:4a:ba:c4:bd:be:4f:b3:e5:ff:f8:a0:ec:
56:d2:69:0a:93:a5:54:a4:1c:1d:7f:a0:db:19:1d:
f6:64:87:6c:0a:f1:04:9d:67:e1:90:63:9a:d9:9c:
a7:fc:a9:03:59:6e:d2:c7:a6:7f:8c:0e:8f:47:4f:
b9:c7:35:28:08:d0:31:b5:98:a0:06:78:a4:26:aa:
45:bc:31:38:0d:9a:44:2d:98:16:50:6e:65:aa:ba:
9e:f6:40:7e:7b:16:ad:36:5f:0e:9d:92:b4:e5:f8:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:19:BD:D9:00:80:D2:DA:F3:59:C8:38:77:B7:12:3F:EB:4C:AD:A0
X509v3 Authority Key Identifier:
keyid:2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/yRm92QCA0trzWcg4d7cSP-tMraA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:7f40:f000::/48
Signature Algorithm: sha256WithRSAEncryption
8e:2d:b3:68:33:47:94:23:9d:52:a6:53:29:63:05:bc:e8:03:
4e:79:cb:22:c9:4d:f2:67:24:21:81:d8:f2:4f:d4:c9:06:bc:
f8:21:ca:48:f3:2d:60:1e:3a:15:93:f7:94:f7:fc:e2:f2:8c:
1a:0f:78:df:f9:d5:58:36:e7:09:14:8c:11:c8:30:27:98:f2:
af:9b:eb:43:41:bd:8e:45:54:1d:ed:64:46:76:6c:58:73:d0:
e8:17:38:d0:79:6b:d8:3f:fe:9f:72:83:2b:14:aa:09:bd:41:
3b:f7:1c:2c:2e:49:51:37:3f:4f:8a:83:b5:ed:26:dd:bb:69:
80:d9:f7:a5:ad:f3:d2:6f:04:46:a7:4a:39:4e:17:24:ad:92:
03:12:67:5e:2d:10:08:48:6c:e6:f1:d2:ff:5a:5f:00:b3:fe:
c4:37:ad:ad:cf:c1:4e:81:ec:0f:09:89:f9:95:f4:75:7a:1a:
c6:75:9e:b1:b4:4d:3f:96:9a:bc:b1:77:8e:65:b2:49:76:55:
f3:d0:35:8d:2e:d1:d8:44:37:64:2c:63:cf:7a:47:09:10:fa:
be:bc:e4:9e:ec:3c:cb:54:20:95:df:72:31:9d:0c:c1:eb:ba:
92:65:53:1d:45:e7:db:1c:04:d5:10:2f:cf:7a:bf:00:3b:ae:
f9:c4:ae:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org