Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Rf49tQuj5lydr_2iH6uAaKayw0.roa
File: 9Rf49tQuj5lydr_2iH6uAaKayw0.roa (raw, json)
Hash identifier: +H1xGGu2vdb/IYHM9/G5/Vni9nuaw52onYGVwGo7okU=
Subject key identifier: F5:17:F8:F6:D4:2E:8F:99:72:76:BF:F6:88:7E:AE:01:A2:9A:CB:0D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2026
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Rf49tQuj5lydr_2iH6uAaKayw0.roa
Signing time: Fri 25 Nov 2022 04:38:22 +0000
ROA not before: Fri 25 Nov 2022 04:38:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 2407:4d00:ff0b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8230 (0x2026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F517F8F6D42E8F997276BFF6887EAE01A29ACB0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4d:ff:fd:29:9c:79:4e:d2:d3:51:85:32:3c:
fe:14:7b:c5:17:c6:43:ca:7f:f5:4f:66:65:33:2a:
67:d4:ad:42:6e:a5:35:76:96:12:32:a5:86:9e:23:
55:ea:de:f1:bd:7e:b6:f7:26:76:14:8b:ee:27:35:
b7:9e:ac:1f:28:63:56:03:ed:4b:d6:31:8b:fd:5e:
c6:fd:39:59:3a:da:8b:e8:26:86:8b:d4:54:45:60:
fd:ad:5e:49:55:0b:37:53:9a:bb:b3:f9:08:ee:b6:
ee:29:4f:1e:62:79:7a:93:79:9d:ae:75:06:76:2e:
d9:10:bc:3c:09:74:1a:86:59:c4:99:79:47:16:2a:
15:b6:da:db:bb:6f:d4:15:ea:fc:a9:ad:29:ff:f5:
c6:60:af:f4:d5:11:eb:ef:6a:e8:1b:4f:f1:1e:3d:
a8:91:76:3d:ea:26:d9:8e:be:24:05:ed:fb:8a:3a:
e7:33:0b:4d:c9:4a:9f:c0:b3:53:b5:62:13:c1:ab:
e5:23:6c:14:e8:68:fa:50:b1:bb:73:b2:77:9a:1f:
9b:d9:5c:5f:b0:45:50:4e:9f:b1:c6:14:ee:42:ca:
ad:a7:a8:ab:b6:26:22:6f:8e:82:70:db:e8:ec:c5:
fe:1f:f8:45:1b:12:51:e2:8b:7b:46:d4:4c:7a:80:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:17:F8:F6:D4:2E:8F:99:72:76:BF:F6:88:7E:AE:01:A2:9A:CB:0D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Rf49tQuj5lydr_2iH6uAaKayw0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff0b::/48
Signature Algorithm: sha256WithRSAEncryption
87:fb:ec:b9:02:95:4c:66:84:ae:3c:26:be:59:10:e5:ac:58:
ee:c9:59:d7:32:cc:6c:e5:c4:e9:34:11:99:ca:5a:c2:d3:9d:
8c:c3:7a:d5:69:7a:b3:31:6b:05:0a:f7:d7:37:d9:b4:03:2c:
a8:82:a2:18:08:6e:ba:88:0f:1c:2b:0c:61:01:6a:3f:b2:9b:
05:96:a6:7f:c3:b1:81:6f:72:b1:8a:15:ea:f2:53:51:3d:f1:
90:a2:a7:6a:81:ad:d5:6a:43:e2:c4:03:80:b2:5d:13:a5:10:
b5:49:5f:47:53:47:90:25:59:f4:b9:68:4e:4f:ed:f0:bb:3a:
2e:9e:20:28:e6:bc:c2:53:31:ee:43:81:12:bd:0d:61:68:e7:
23:57:05:8e:c3:34:4f:55:18:91:1d:ac:51:ae:4b:e0:db:75:
5b:f3:13:14:cc:98:6a:8a:7b:d7:be:3b:57:0e:a0:a1:85:14:
38:24:e7:ea:ef:f4:6b:87:00:de:f8:84:c2:39:7c:9d:6e:ad:
b7:03:0d:bc:76:1c:4b:3b:e7:77:6e:cd:99:a7:80:0f:5b:4a:
91:78:01:21:1c:e6:0f:89:0d:a3:19:95:8d:52:aa:6d:0c:39:
86:85:1e:35:6d:50:af:bc:65:e8:aa:f8:e6:fa:33:f2:21:3e:
93:9f:ff:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org