Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fNKzPDgM1b9wI1_AKB8XH8GjWkU.roa
File: fNKzPDgM1b9wI1_AKB8XH8GjWkU.roa (raw, json)
Hash identifier: ej/r+oyVbCPP4VIiXIQQwmu33HOn44bo/yANVvB/9Ak=
Subject key identifier: 7C:D2:B3:3C:38:0C:D5:BF:70:23:5F:C0:28:1F:17:1F:C1:A3:5A:45
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fNKzPDgM1b9wI1_AKB8XH8GjWkU.roa
Signing time: Thu 15 Sep 2022 02:52:25 +0000
ROA not before: Thu 15 Sep 2022 02:52:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 2407:4d00:ff0a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7CD2B33C380CD5BF70235FC0281F171FC1A35A45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:f3:e4:09:e0:f6:a6:1a:88:b5:ed:31:0f:
5c:8f:29:0f:e4:b5:a9:8d:25:8f:89:b9:de:e1:bc:
19:33:95:c4:73:a1:8f:86:5d:a5:20:d6:58:5d:59:
4c:8a:ca:bf:f4:a3:11:1e:05:06:4d:72:ad:4c:38:
52:c4:6a:64:a4:4c:47:a5:ec:2f:2b:54:9a:fe:1b:
6a:e2:41:81:f6:b3:ee:6d:0b:d5:1e:e7:76:5d:13:
07:92:c8:a4:42:49:e5:01:f9:06:64:b0:76:c1:7f:
09:f6:a1:2d:ce:c2:6f:9c:3c:6c:be:84:46:3a:73:
0a:97:d5:38:50:48:61:94:5d:6f:88:fa:a6:17:2e:
34:15:f4:2b:fa:14:20:bf:e1:1d:f9:b8:39:0c:83:
4c:94:95:4c:81:15:15:3d:20:99:c5:7c:0d:10:91:
fb:60:ac:9a:82:4d:33:5b:a7:88:c8:00:96:d3:8a:
c5:5d:d9:3c:a4:fb:34:99:e7:06:e0:00:cc:ab:d2:
92:35:eb:e8:8f:6e:33:28:2a:26:e7:f4:15:8f:6e:
47:3e:e7:84:cd:7e:33:7d:93:31:bf:a9:06:41:56:
60:56:56:50:d9:d7:a3:b7:a9:73:91:ec:88:c8:7c:
9c:5c:dc:bc:69:c3:b2:d4:43:c9:38:f7:e3:77:90:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D2:B3:3C:38:0C:D5:BF:70:23:5F:C0:28:1F:17:1F:C1:A3:5A:45
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fNKzPDgM1b9wI1_AKB8XH8GjWkU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff0a::/48
Signature Algorithm: sha256WithRSAEncryption
43:67:8b:66:74:69:f7:9f:35:ba:c3:66:0f:1f:2b:55:ec:da:
65:3e:3c:fc:73:aa:a1:61:ee:34:19:76:13:1a:fe:f8:06:99:
af:e9:c6:75:b5:27:4d:47:dc:5c:e3:61:93:9f:73:68:0b:73:
0f:ee:26:fe:80:c1:83:5a:18:3a:57:14:17:53:a2:2f:06:d1:
cd:f5:70:2c:52:ff:0b:33:b6:79:68:7c:56:1f:d5:aa:85:63:
ee:96:ac:43:f0:5c:fe:1f:bc:78:de:20:56:30:0f:e7:f4:a1:
60:3a:3d:95:93:25:ee:43:d4:be:69:d2:cf:9d:b8:ae:5d:e0:
ef:2e:fa:c4:b5:51:21:e0:03:42:24:e1:7b:eb:49:35:5d:f2:
de:1f:c2:cd:1f:43:4d:01:27:4b:e6:7c:5f:67:d0:a4:49:11:
f9:3a:5c:31:5a:04:d5:5b:ac:61:15:75:d3:3b:4c:6c:f9:5e:
aa:35:00:1a:2f:d7:8c:9a:10:92:b2:3c:e0:1d:bb:e7:86:3b:
e6:68:42:e1:6b:0b:ca:5c:c7:66:5a:f9:ec:dc:e6:c2:9e:b9:
12:2c:b3:1c:7f:dd:2d:c0:cb:c7:3c:82:4d:cb:6e:14:9b:78:
35:46:96:2a:10:67:1e:6e:94:bc:22:7e:44:af:b5:b9:8a:11:
63:03:45:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:39 2025 by rpki-client