Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5EQn6OOfd_UZ6IfIxIEr9vp3X4M.roa
File: 5EQn6OOfd_UZ6IfIxIEr9vp3X4M.roa (raw, json)
Hash identifier: noshVhWgzOyRsT0hIXWUFCaA3j6hv/U5ZslSdcOqhgQ=
Subject key identifier: E4:44:27:E8:E3:9F:77:F5:19:E8:87:C8:C4:81:2B:F6:FA:77:5F:83
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21D4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5EQn6OOfd_UZ6IfIxIEr9vp3X4M.roa
Signing time: Fri 25 Nov 2022 04:40:27 +0000
ROA not before: Fri 25 Nov 2022 04:40:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 2407:4d00:ff0a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8660 (0x21d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E44427E8E39F77F519E887C8C4812BF6FA775F83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:f6:2a:ea:85:29:62:ec:fc:15:fd:e4:d9:
e4:3d:81:6e:a1:e2:93:a9:d3:7c:b8:77:3e:ec:88:
7c:c1:5c:89:0d:ac:ac:98:9e:fa:06:1b:3e:0d:b6:
c8:9d:19:44:64:e9:30:42:f0:9e:66:95:71:d8:97:
52:27:78:0b:bf:aa:61:0d:ee:2f:60:c3:1f:fe:3d:
34:7c:d8:8b:c0:e7:25:3d:25:81:dd:43:5c:c4:d6:
ec:5b:17:55:db:f6:e9:48:84:f9:af:eb:2b:f8:53:
be:eb:c6:7a:fe:67:de:4d:8b:31:6b:57:41:fd:6e:
77:61:97:33:92:f4:88:49:ae:e4:f3:95:a5:1c:53:
cc:5f:33:45:d4:1a:3f:a6:0e:92:24:a9:2a:8e:8a:
53:48:93:97:dd:1b:d5:c7:b6:37:f6:3e:53:67:f2:
67:ab:98:93:cf:fe:be:18:93:c4:f5:93:c9:10:5b:
8b:41:d8:86:b3:d5:f7:11:05:41:cf:00:34:ed:a0:
36:e3:93:ec:a6:5a:a8:0e:6c:1a:43:9d:d7:ec:09:
c3:18:e4:ed:ee:bc:b4:dd:be:a4:10:ac:77:c6:e2:
df:55:bd:9d:d5:5e:68:2b:13:94:ad:76:3a:93:67:
80:e7:ea:0e:4f:c2:c2:68:94:d5:aa:44:23:79:9f:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:44:27:E8:E3:9F:77:F5:19:E8:87:C8:C4:81:2B:F6:FA:77:5F:83
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5EQn6OOfd_UZ6IfIxIEr9vp3X4M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff0a::/48
Signature Algorithm: sha256WithRSAEncryption
94:f4:30:76:97:0b:c1:57:e3:99:a8:5c:0a:22:37:fe:55:8e:
6e:0f:fe:37:e7:19:c3:89:2e:63:b7:5a:e0:85:b4:86:8e:0b:
db:be:a5:82:4a:42:50:f2:0c:f4:6d:86:54:a7:f7:90:d4:ec:
79:69:aa:9e:20:9f:4d:de:c5:a5:a0:b4:5e:38:e9:33:d8:d6:
ab:d3:3c:14:16:07:07:30:1c:6d:bf:fc:46:92:57:22:82:cf:
3a:a1:85:59:92:4e:1d:d1:1a:46:4e:39:7a:7d:84:90:44:fb:
d0:60:5c:3e:3f:db:2d:17:21:70:82:2d:c6:53:23:d3:34:46:
7c:bc:20:f6:0b:71:79:73:71:ef:11:f5:84:83:a6:bd:45:3a:
7e:0e:05:3b:81:1d:e6:9d:63:c4:01:a2:73:4e:87:3d:30:05:
bb:40:1a:4b:99:21:2a:46:f0:b0:39:69:35:d1:e0:4f:85:d8:
41:2f:0c:10:7c:47:23:55:99:d4:14:b4:33:c2:ca:de:95:7d:
80:87:fc:28:7c:55:c2:75:7f:59:26:e2:37:43:39:d6:9f:30:
60:d5:93:4a:8a:4f:81:d3:b1:f3:3e:17:8f:f2:51:21:52:5e:
dc:36:88:74:7b:8b:a9:fe:48:1d:d7:aa:28:5f:8b:fc:89:bd:
a4:d4:27:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org