Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sukciwZBeS2D2qX63PLrHxUM8V8.roa
File: sukciwZBeS2D2qX63PLrHxUM8V8.roa (raw, json)
Hash identifier: nsyrUFN/VKlyJQbdYrNR664Ze1YEXe45kiV/oG5QteQ=
Subject key identifier: B2:E9:1C:8B:06:41:79:2D:83:DA:A5:FA:DC:F2:EB:1F:15:0C:F1:5F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2218
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sukciwZBeS2D2qX63PLrHxUM8V8.roa
Signing time: Fri 25 Nov 2022 04:40:46 +0000
ROA not before: Fri 25 Nov 2022 04:40:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 2407:4d00:ff06::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8728 (0x2218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B2E91C8B0641792D83DAA5FADCF2EB1F150CF15F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:77:91:21:c5:d0:e6:31:e8:af:fd:c3:a2:
54:90:2e:89:2b:6f:60:7d:0f:f6:67:32:9b:51:f3:
7e:33:8b:da:cf:c4:37:24:01:02:02:30:03:4a:53:
05:38:f7:81:5f:53:3f:34:48:6b:3a:89:33:67:ef:
76:af:d1:62:93:b7:af:92:a2:f9:21:7f:92:5a:a0:
6e:66:a6:b2:86:99:a6:e1:31:31:22:f0:b6:19:2f:
0c:b8:78:7a:48:94:c0:40:9e:a2:db:da:ca:35:06:
7f:e5:8f:a0:5a:38:2d:3a:06:41:91:ec:29:1f:69:
9c:da:fd:6c:b1:bf:59:82:36:7b:32:0d:4c:d1:0f:
08:7f:fe:6f:b1:36:cf:3f:dc:1a:f7:ad:f7:50:f6:
fe:94:81:c2:9f:1d:7c:f2:e3:d7:d4:ad:45:fc:ce:
ad:73:38:c1:d1:a0:3b:36:8a:c5:fe:7c:60:d9:84:
80:00:b5:62:0a:18:6c:f4:e3:f8:cc:0b:fe:31:22:
1b:86:d6:98:91:ce:4b:c4:f3:3a:2a:92:51:a3:66:
14:88:53:1d:4b:9a:ce:f4:e4:6a:d3:c9:e4:b1:df:
a4:cb:72:12:e2:e9:a1:20:a1:c0:94:68:4b:91:d6:
53:c2:88:33:70:ac:62:71:7b:ea:2c:2f:04:49:d5:
74:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E9:1C:8B:06:41:79:2D:83:DA:A5:FA:DC:F2:EB:1F:15:0C:F1:5F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sukciwZBeS2D2qX63PLrHxUM8V8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff06::/48
Signature Algorithm: sha256WithRSAEncryption
b9:89:ef:f1:7d:78:50:a9:2c:da:8d:cd:32:41:12:c9:4b:b5:
40:80:e5:ed:91:15:05:f9:9d:e1:86:53:f2:97:4a:50:12:5d:
0d:a6:69:42:0b:50:35:f3:e2:bf:5b:f6:bb:67:fc:2c:bb:bf:
89:ea:51:d8:58:43:49:56:06:ba:af:21:46:9d:09:55:96:81:
38:a5:df:96:f7:cf:42:b0:e6:c1:a2:54:4f:5b:3a:c3:a1:56:
1f:64:37:ed:74:de:00:5f:da:5a:80:6b:35:b9:65:2e:ae:47:
e7:65:14:09:76:8d:63:fe:77:fa:5a:6c:85:03:25:0c:ed:29:
17:82:92:34:4b:d6:64:9c:ac:61:0a:85:ef:fe:14:ba:e4:a8:
46:94:ed:30:8b:79:8f:2d:41:90:80:08:2c:8c:13:4a:6f:87:
57:27:6a:79:cb:08:2c:9e:f5:3b:20:c7:b1:68:d6:69:8f:94:
40:8f:b3:d4:02:d4:86:9f:61:06:8a:fe:8d:56:05:18:12:44:
ae:eb:f5:80:5e:5d:eb:5f:00:72:c1:3a:fe:35:1f:47:94:24:
10:32:a9:df:69:32:a5:0a:d5:fe:fc:70:28:4a:74:32:b0:fa:
fc:52:25:24:ff:20:66:92:94:5d:ff:e2:86:e6:81:2e:96:f9:
b9:7b:a3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org