Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QxXl0JF_se5IsRmuJ5dlOhGF9ws.roa
File: QxXl0JF_se5IsRmuJ5dlOhGF9ws.roa (raw, json)
Hash identifier: kksh88obCWsROAgNo+kEPE83OcgD8J5IJyYRBz9ulSU=
Subject key identifier: 43:15:E5:D0:91:7F:B1:EE:48:B1:19:AE:27:97:65:3A:11:85:F7:0B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QxXl0JF_se5IsRmuJ5dlOhGF9ws.roa
Signing time: Thu 15 Sep 2022 02:53:01 +0000
ROA not before: Thu 15 Sep 2022 02:53:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 2407:4d00:ff02::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4315E5D0917FB1EE48B119AE2797653A1185F70B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:4a:8b:11:6a:3a:a9:d2:d6:5a:a4:43:c5:
1b:fa:b5:c3:59:3e:7b:f6:96:c0:27:8a:05:72:14:
9c:38:43:b7:9b:8f:39:57:4c:e1:8c:f3:49:2c:ce:
5d:70:6a:c3:db:bd:1c:8a:41:70:f2:e4:11:66:01:
ee:b4:2c:74:a7:0e:7f:be:a1:f0:27:0d:8b:a3:5d:
22:81:d2:fe:43:c2:03:3b:11:a6:59:5c:59:92:27:
77:13:9e:3d:6a:3a:e6:fd:1d:66:9f:60:8c:2e:30:
1d:0d:e1:59:04:99:05:2d:2c:64:92:91:14:df:46:
28:be:4e:8a:45:ad:58:6b:ca:1a:49:31:6d:28:4c:
aa:17:17:6a:aa:3f:39:01:e6:d3:63:1b:4c:21:93:
e3:a4:79:a6:19:93:84:99:37:62:7d:8b:43:69:bf:
4e:bb:7a:a0:49:44:9f:ab:d9:be:b2:83:ec:e8:b4:
8b:b1:ef:ff:64:b5:6e:7a:50:73:9b:dd:a1:3c:eb:
69:86:d0:9f:65:4c:a9:ec:6a:50:78:28:42:f8:4f:
79:aa:5b:96:cd:ee:6d:53:ef:e3:85:af:9e:3d:f4:
c6:3f:cb:de:24:b6:1b:aa:66:37:3b:cb:1e:54:f1:
56:40:99:70:9d:ba:d7:d5:b9:bc:8b:aa:c8:00:32:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:15:E5:D0:91:7F:B1:EE:48:B1:19:AE:27:97:65:3A:11:85:F7:0B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QxXl0JF_se5IsRmuJ5dlOhGF9ws.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff02::/48
Signature Algorithm: sha256WithRSAEncryption
ba:73:42:e6:fe:37:08:ba:0c:48:ca:72:41:4a:10:5a:60:bc:
d8:94:59:0f:e7:e4:14:57:d1:87:35:eb:7a:68:98:b9:1a:19:
ad:9f:2b:6c:3d:d5:29:cc:86:15:dd:15:45:fa:8c:a8:14:9a:
b3:5d:be:4b:ae:76:14:c3:4a:57:33:c4:6a:f0:40:1a:76:44:
75:75:83:c4:00:d2:ab:4c:56:5a:9d:c7:5d:f8:18:64:ce:af:
53:53:65:f0:e8:c6:6b:3e:6a:5f:cc:21:79:f0:89:0d:44:c2:
33:5b:fd:4d:1a:8a:28:40:bb:15:0d:f7:54:fd:c9:84:6a:7b:
b2:20:27:40:81:34:88:a4:81:58:1d:e9:9d:29:6e:cb:5f:1b:
73:f6:d3:94:1c:89:03:8c:35:7d:ab:a6:98:13:1c:0e:89:e7:
f1:27:54:c2:95:00:22:ee:b0:d7:e8:40:a6:74:c2:09:ba:45:
de:39:94:fa:b5:b8:48:fc:5b:fb:b0:0f:44:cd:f9:db:95:c4:
70:d3:c3:0d:ee:d4:48:8c:77:be:2f:2f:7c:dd:fd:26:aa:d5:
3d:9a:7f:13:74:c9:9a:e5:d8:c6:6f:d6:1d:4c:b6:cd:7a:1f:
30:83:7a:0b:f1:8b:72:09:4c:e0:de:a5:c2:fa:d2:a0:0e:70:
8c:c4:a2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org