Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VJKrfRngrerJ6pem_lQj7h77ptk.roa
File: VJKrfRngrerJ6pem_lQj7h77ptk.roa (raw, json)
Hash identifier: MTth5dXzOvoFfv7/WE7FTtax5QJbVyNrXR27+CF5xMo=
Subject key identifier: 54:92:AB:7D:19:E0:AD:EA:C9:EA:97:A6:FE:54:23:EE:1E:FB:A6:D9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VJKrfRngrerJ6pem_lQj7h77ptk.roa
Signing time: Thu 15 Sep 2022 02:53:25 +0000
ROA not before: Thu 15 Sep 2022 02:53:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 2407:4d00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5492AB7D19E0ADEAC9EA97A6FE5423EE1EFBA6D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:43:31:cf:ed:05:ce:35:6f:4b:a9:f4:9d:
8d:05:5a:9d:75:05:ef:a1:b8:9a:d8:83:d3:a7:94:
5c:08:f9:ba:ee:79:a1:1c:1c:9a:93:74:10:f5:24:
8a:ec:b1:1b:a0:c7:f8:bf:47:8f:89:74:3b:69:9e:
04:88:e5:92:8d:54:dd:49:fe:20:77:28:8c:00:ba:
ea:fe:56:74:2d:13:2b:3e:04:2f:8b:d4:5a:e7:4a:
31:29:8e:e7:0f:2b:fa:ab:eb:89:14:82:e1:ea:fe:
6a:52:9e:79:1b:db:a9:63:cf:df:4d:d0:a4:0e:a1:
60:04:e0:eb:4a:41:ba:7c:c2:2f:95:2a:24:fe:4c:
53:94:b7:9f:b2:8c:5c:bd:4e:6e:39:6e:42:6b:6b:
88:58:cc:2a:66:38:a9:f6:1a:fb:6a:65:90:95:16:
54:c7:0f:03:7f:1d:41:9e:e0:fd:4f:e3:57:44:73:
6e:26:b7:11:04:1b:57:83:56:c5:20:b2:80:91:81:
81:fa:95:e7:8b:9b:f3:d2:1b:a5:b4:9f:19:2f:4b:
ff:1b:93:86:ac:b7:23:e6:c1:e1:74:84:2e:d9:e9:
b8:e5:eb:6d:e1:65:54:84:72:56:7a:4b:2c:ec:ca:
89:ee:a7:5f:06:9e:eb:eb:14:1c:59:25:5e:c1:8f:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:92:AB:7D:19:E0:AD:EA:C9:EA:97:A6:FE:54:23:EE:1E:FB:A6:D9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VJKrfRngrerJ6pem_lQj7h77ptk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00::/32
Signature Algorithm: sha256WithRSAEncryption
b1:91:29:e2:1f:3c:c3:6c:8e:5e:f7:d2:fd:3f:14:37:f6:fe:
cc:29:5e:b3:c2:16:84:06:de:24:f3:a9:ec:59:81:86:10:eb:
71:e6:c1:eb:93:35:cc:54:c9:4b:8a:ad:4e:04:ab:55:71:76:
44:9f:61:45:d8:0a:29:76:40:59:2c:b9:bd:7f:ad:81:6c:4d:
b0:32:02:3c:30:86:2d:c1:77:28:45:2b:c3:02:4d:a5:e6:b8:
6d:87:ea:e9:ee:2a:15:57:64:75:ae:7d:eb:d7:9d:9f:21:ef:
a1:0d:30:f3:be:5e:7a:95:dc:ce:85:2d:e7:5a:c2:d8:14:2b:
d3:9f:eb:0c:ca:6b:23:1f:d5:f5:1a:2f:cd:19:4f:4f:66:1b:
4a:d6:d6:1d:15:11:9f:02:91:e6:08:bd:b6:a7:26:c3:d9:3f:
71:fd:87:e6:0d:a1:97:bd:c2:0c:86:28:e3:a9:6e:7d:2b:ca:
73:d5:fb:58:3c:a4:d3:0c:dc:1e:80:21:b0:41:19:4a:9e:7b:
dc:2c:93:96:4e:f2:57:77:be:de:a4:18:ec:4a:56:8c:b6:f5:
96:3b:99:7e:26:2c:a2:9c:69:e4:cf:56:e8:d2:d1:93:d5:0f:
8c:a5:20:09:d9:22:70:c5:14:6d:07:77:66:53:cd:ec:ed:4f:
5c:77:2b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:05 2025 by rpki-client