Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bvwX088hiRGOY3evHRvjdCLa5Tk.roa
File: bvwX088hiRGOY3evHRvjdCLa5Tk.roa (raw, json)
Hash identifier: QiZJUMBWUJCaSkBVVeOMKGNLCb0CrfD+/8rdqutmBkk=
Subject key identifier: 6E:FC:17:D3:CF:21:89:11:8E:63:77:AF:1D:1B:E3:74:22:DA:E5:39
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 200A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bvwX088hiRGOY3evHRvjdCLa5Tk.roa
Signing time: Fri 25 Nov 2022 04:38:16 +0000
ROA not before: Fri 25 Nov 2022 04:38:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 2407:4d00:ff0c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8202 (0x200a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6EFC17D3CF2189118E6377AF1D1BE37422DAE539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:ea:0f:f3:d4:86:79:82:3a:11:4c:fb:2c:
21:dd:2b:c4:bd:5d:2b:8d:e2:6d:45:5b:6b:4b:14:
30:47:3c:51:bb:81:b8:36:10:80:48:d2:78:61:1e:
bc:14:66:f1:23:34:66:2d:0a:10:b0:67:3e:8d:80:
37:40:0a:00:14:da:ae:6c:2f:2d:6b:53:ec:21:ec:
5d:3b:7f:32:6e:82:48:2e:6d:17:32:c4:2f:26:bb:
84:ed:28:09:4b:50:54:4a:23:f1:ee:aa:07:a9:58:
02:12:4c:b1:b7:32:e4:c3:39:16:97:c5:1d:b2:b2:
10:58:08:f1:01:27:83:f5:a9:96:08:d8:e5:e6:96:
4c:c8:ed:af:73:93:55:ed:0b:c9:4a:4e:26:52:cb:
31:eb:c6:e1:31:9f:99:62:1a:f1:36:e2:9c:f9:f8:
48:20:85:d5:81:22:c0:39:d3:6b:e1:9f:17:b9:b3:
e4:b5:02:01:b3:c8:2a:83:77:b0:10:1d:3f:f1:f9:
56:36:2f:4b:4f:29:e6:79:74:5f:38:3e:48:98:a6:
ff:56:f9:01:e8:df:c1:81:60:fc:4f:b7:8b:46:25:
b4:cc:ec:0f:9a:59:c7:d9:77:8e:f1:e4:3d:4e:79:
eb:27:8e:48:38:6f:a4:6b:a4:f0:73:8c:74:04:53:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FC:17:D3:CF:21:89:11:8E:63:77:AF:1D:1B:E3:74:22:DA:E5:39
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bvwX088hiRGOY3evHRvjdCLa5Tk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff0c::/48
Signature Algorithm: sha256WithRSAEncryption
ae:f3:67:44:bb:b8:a0:7b:3b:1f:d1:55:71:df:a3:8f:9d:fd:
9d:55:7e:65:9a:2f:26:15:69:0e:49:a7:f5:f7:f9:a4:79:10:
8c:4b:e5:6c:db:56:65:06:22:d7:82:64:b9:93:b9:87:6c:f2:
ee:d0:76:82:99:be:0b:4b:96:bf:bc:6f:95:3c:40:bf:b3:5e:
2b:b8:04:0d:46:7c:af:3e:b0:80:1c:76:2b:9e:a3:25:63:cc:
f6:81:b4:84:36:ba:67:d3:ef:d0:30:9e:42:2e:38:86:cc:8f:
3e:09:8f:3d:a8:8d:e3:5f:db:84:51:8b:a9:af:3f:15:80:1a:
c1:7f:70:be:a6:71:ed:19:66:2f:75:7a:c6:01:84:fc:ae:89:
65:20:50:f7:12:fe:bc:54:c5:e4:a2:1f:2d:3e:90:50:15:f5:
ac:dd:70:0d:a9:53:27:4c:bd:5d:c1:00:15:12:ef:38:2a:f6:
82:c7:1e:9f:b8:c0:82:5c:4a:fd:78:7d:bd:48:bc:c7:57:db:
57:86:5b:df:4e:f2:b8:b5:43:a0:79:79:0e:ea:a9:46:3a:38:
f8:f5:76:79:f3:0f:58:69:f2:00:38:55:8b:fc:79:a7:73:ff:
4a:ac:19:18:df:5f:5e:7d:84:bc:dd:ac:93:d0:11:38:1c:24:
76:37:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org