Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aqd67S2FJr0F1Ecso3X-SVgbhQk.roa
File: aqd67S2FJr0F1Ecso3X-SVgbhQk.roa (raw, json)
Hash identifier: o+PQ5wEAVktIC7hAaE6LQPkG+fbBYjmriu40A3Gm2fU=
Subject key identifier: 6A:A7:7A:ED:2D:85:26:BD:05:D4:47:2C:A3:75:FE:49:58:1B:85:09
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aqd67S2FJr0F1Ecso3X-SVgbhQk.roa
Signing time: Thu 15 Sep 2022 02:44:39 +0000
ROA not before: Thu 15 Sep 2022 02:44:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 2407:4d00:ff0c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6AA77AED2D8526BD05D4472CA375FE49581B8509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:06:8e:8e:cf:5f:7a:ad:c4:4b:44:ca:72:
e2:c3:15:ac:d8:69:c8:ab:15:99:51:9e:f8:01:95:
8a:97:59:af:bd:57:14:cf:ea:d3:37:1a:a4:cb:67:
cd:ea:fc:cf:77:2b:56:03:ec:53:84:43:8a:7f:76:
8a:76:ad:2c:3c:62:8e:e2:cc:16:4c:dd:d0:40:04:
b5:2e:c2:c4:c9:21:41:19:fb:6a:64:e7:87:63:34:
12:a5:25:04:3d:41:6d:ee:42:b4:25:21:56:c9:a7:
b5:e1:fe:fe:71:2d:bb:7b:44:9d:70:d4:a8:67:41:
09:35:be:65:cb:eb:fe:f0:21:b9:5e:c2:47:84:ea:
f5:ff:7a:fb:32:c6:02:03:a0:50:c5:1e:91:88:25:
1a:26:2c:bd:a2:18:65:77:28:c6:35:88:85:d2:73:
eb:43:14:7e:e4:32:cf:39:80:6b:a0:fb:d4:be:55:
58:32:da:b6:e5:8e:69:3d:dd:3f:d0:8b:89:2e:8c:
03:5f:a7:e6:7c:51:af:0b:9f:b5:92:e8:ac:61:d4:
d3:cf:86:70:34:a0:73:07:cb:b1:75:54:ed:b3:aa:
08:7d:72:99:f6:59:15:d9:b3:05:db:52:5f:43:65:
48:a6:1f:14:f3:99:a6:8a:50:a5:e7:c2:07:00:d9:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A7:7A:ED:2D:85:26:BD:05:D4:47:2C:A3:75:FE:49:58:1B:85:09
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aqd67S2FJr0F1Ecso3X-SVgbhQk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff0c::/48
Signature Algorithm: sha256WithRSAEncryption
0e:52:47:d4:70:79:1a:26:31:94:ec:29:91:0e:02:8f:3d:03:
f2:4b:53:fd:f4:0a:ae:0a:43:cf:3f:0b:f5:59:ef:45:c1:78:
75:fd:d1:cc:50:c6:08:0e:a4:50:23:74:6b:b4:5a:93:d2:15:
d5:db:e2:7c:f1:68:ba:2f:45:35:e7:87:69:4b:32:c4:e5:6b:
c6:45:f1:0a:bc:11:86:a8:0e:55:53:c3:22:ed:26:b1:d3:d4:
a7:22:d2:70:44:57:75:22:89:23:79:87:62:84:15:ff:d8:7d:
82:2a:a3:0b:18:b7:69:30:b0:49:81:48:de:7e:42:aa:fb:f6:
4f:1d:bc:9f:ec:80:00:3d:33:24:6d:b8:2a:54:c2:cb:66:ae:
6e:8f:7d:b1:21:b4:15:61:95:ab:40:04:00:01:15:6b:90:eb:
9b:6f:fd:c4:88:b7:1d:34:05:d8:ed:2a:39:a1:f3:f8:38:67:
cc:81:5e:4f:be:13:54:92:ed:97:cf:a3:32:8f:35:66:48:9e:
68:d5:67:dd:0f:38:60:3a:9d:2f:ec:0c:5a:0a:8c:d4:0f:6d:
b8:2e:e6:a8:32:9e:bd:41:0d:9f:69:43:3d:4d:ab:10:d7:4b:
8d:81:29:c6:65:23:a4:90:bb:93:3d:7d:b5:aa:64:ce:62:22:
9d:31:f7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org