Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hUzHXWF_W_KQxglzvWUD94Z9JQg.roa
File: hUzHXWF_W_KQxglzvWUD94Z9JQg.roa (raw, json)
Hash identifier: cxUKDkYtJXLrItC5QtfnQsDY9WLGSKYvZwBJObYm2/k=
Subject key identifier: 85:4C:C7:5D:61:7F:5B:F2:90:C6:09:73:BD:65:03:F7:86:7D:25:08
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hUzHXWF_W_KQxglzvWUD94Z9JQg.roa
Signing time: Thu 15 Sep 2022 02:52:44 +0000
ROA not before: Thu 15 Sep 2022 02:52:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 2407:4d00:ff06::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=854CC75D617F5BF290C60973BD6503F7867D2508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:0c:83:34:f4:2a:53:e9:3d:7b:43:31:51:
8b:6b:40:79:8b:56:7d:90:9b:75:b3:2c:65:19:ad:
62:6d:56:cd:4b:d9:a5:8c:58:a3:9a:a5:ae:a3:cb:
8c:1a:a8:50:33:fa:83:ad:bf:e1:ba:9b:e9:1d:e7:
15:30:2d:92:a9:b3:81:c3:90:7a:2f:53:27:a0:3b:
f0:c1:46:2b:e9:55:ca:f8:5e:25:8d:a1:2f:8d:f5:
1b:89:41:ad:fe:d8:35:4d:c0:d7:ed:6e:c5:0a:27:
5e:b0:c9:0d:22:54:92:4b:ad:fb:1e:e6:f5:f9:70:
38:6c:82:b0:24:f9:3f:1e:18:d5:a6:9a:18:45:4e:
e3:f7:1e:d3:bf:3d:85:c0:6c:2f:4c:34:35:05:8b:
30:1b:27:aa:dd:b0:1b:4c:c8:23:71:b1:38:f7:10:
e9:53:ec:c9:73:5b:09:f5:23:d9:eb:4b:95:b8:4c:
65:7c:5f:38:4f:9d:e9:31:cb:91:a5:8a:4b:0f:f6:
55:f1:49:c9:7f:78:bc:69:94:aa:b8:83:1f:a1:5b:
39:4c:48:5a:38:12:96:3b:f8:9d:74:0e:cc:4e:7a:
49:0b:55:06:1c:8e:92:74:78:38:6c:c3:f2:2e:89:
2b:7b:93:26:dd:f8:0c:3d:a8:27:54:20:64:a5:52:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4C:C7:5D:61:7F:5B:F2:90:C6:09:73:BD:65:03:F7:86:7D:25:08
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hUzHXWF_W_KQxglzvWUD94Z9JQg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff06::/48
Signature Algorithm: sha256WithRSAEncryption
4c:d3:fe:d1:5c:a4:e4:ef:58:09:78:40:b0:14:84:78:6b:66:
c7:aa:bd:bf:7d:e7:00:f8:c1:0a:d2:57:ab:3e:fc:78:93:be:
35:82:f7:dc:66:c7:83:73:50:b8:62:6d:ef:03:6d:f8:88:b7:
29:31:61:e3:88:b0:18:29:03:0b:ee:92:12:b9:ea:43:a8:db:
ef:c9:ae:41:0e:5a:e1:a5:62:15:5e:a1:88:30:54:06:98:0c:
77:15:39:8d:bd:bd:04:65:3e:cb:49:60:1d:11:8e:82:86:21:
40:1e:19:4d:d8:31:67:d0:40:69:3e:9a:45:97:7f:49:1b:ca:
67:70:ee:0b:a0:2d:2b:68:26:b9:a7:28:5e:2b:f5:91:c9:d5:
e4:fd:6e:e5:ad:ec:f9:96:5c:02:d6:ac:a3:d9:21:ed:cf:52:
a1:c9:cd:5c:1b:f2:a3:16:19:8f:da:4a:52:dd:b3:a7:fd:23:
2e:ed:28:a1:51:5d:b9:73:79:f9:a7:18:1f:26:a6:ae:ee:b6:
69:88:58:f4:d5:bb:86:2f:b5:fe:da:16:ff:e8:fe:82:16:65:
2c:96:e1:00:42:5e:ad:e2:89:d1:09:a9:07:b1:fb:16:8f:db:
cf:67:19:9b:b4:0c:f2:06:55:a2:a4:6b:9f:0d:4c:a2:e6:31:
94:c6:23:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org