Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/gc5Z9kPagihaOnsIfqA715gvvyo.roa
File: gc5Z9kPagihaOnsIfqA715gvvyo.roa (raw, json)
Hash identifier: sO/fbzNYiy3f9W95Vc2ejeFdu/cclzHmKN+DFCrQPvk=
Subject key identifier: 81:CE:59:F6:43:DA:82:28:5A:3A:7B:08:7E:A0:3B:D7:98:2F:BF:2A
Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Certificate serial: 01B0
Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/gc5Z9kPagihaOnsIfqA715gvvyo.roa
Signing time: Sat 02 Oct 2021 04:31:08 +0000
ROA not before: Sat 02 Oct 2021 04:31:08 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18178
IP address blocks: 2406:9740::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Validity
Not Before: Oct 2 04:31:08 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=81CE59F643DA82285A3A7B087EA03BD7982FBF2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:2d:f4:c4:87:60:18:ae:99:35:10:23:ef:
8a:3e:cb:e8:04:12:98:89:29:c3:10:31:da:15:9c:
75:6b:12:86:dc:84:94:02:d3:ad:50:20:37:d0:66:
46:83:6d:0e:1b:ec:b9:20:a0:3d:d9:cc:0c:72:70:
4d:9d:c9:85:00:5f:17:bf:71:f0:03:5b:a7:d4:29:
89:2f:70:ac:41:45:bd:79:39:8c:34:d7:e2:34:2c:
9c:a0:f7:fe:6f:8a:ee:ff:7f:60:87:33:80:99:60:
49:bd:dc:7b:f6:f3:70:2b:0a:0d:0a:08:a0:dc:7a:
35:2d:b7:71:73:48:19:4d:89:ed:2c:77:b3:e1:1e:
8f:b8:19:70:fe:06:82:3e:d4:2b:68:89:6f:de:13:
e9:41:3e:70:53:ce:cc:17:f7:86:28:d5:6a:1b:ec:
7f:f1:f4:d0:b2:51:ac:9f:30:54:44:a7:ad:ed:b4:
da:8c:52:c3:33:d9:e5:d0:a7:13:26:d4:17:35:4a:
a6:05:e2:2d:0e:e5:01:49:ee:fa:ce:4e:0f:49:9b:
98:c4:dd:c6:a4:14:96:fb:62:a3:bf:3d:1b:0b:28:
0f:a1:96:6c:e7:90:b4:8d:75:27:dc:9b:c7:d8:08:
8d:ca:c4:46:68:3d:c0:99:8e:6b:a8:98:e8:d4:7f:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CE:59:F6:43:DA:82:28:5A:3A:7B:08:7E:A0:3B:D7:98:2F:BF:2A
X509v3 Authority Key Identifier:
keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/gc5Z9kPagihaOnsIfqA715gvvyo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:9740::/32
Signature Algorithm: sha256WithRSAEncryption
b8:9d:8d:38:68:d3:8d:f9:ee:30:df:c1:bb:54:cc:3b:bd:cc:
c8:85:0f:55:06:ec:67:41:c1:c3:34:ee:13:b1:db:6c:6a:88:
c5:37:ce:bd:95:46:04:7a:22:56:6a:2e:83:18:f2:8c:fc:73:
06:3c:4d:3d:04:66:52:77:1c:07:0b:b5:80:ac:72:85:0a:05:
42:36:03:bf:36:22:ac:df:68:6f:8d:f3:f1:63:25:59:b5:52:
50:14:8c:de:ac:b2:68:1d:22:ab:ae:85:ba:e5:89:4e:15:42:
ef:07:52:50:30:c6:6a:a5:41:13:bc:68:80:c3:37:91:a3:bf:
32:2b:b1:4e:4b:14:ac:63:ac:2e:73:ca:51:94:fe:9a:3f:76:
f6:fa:ef:9d:a4:3e:1e:c6:a4:88:68:5a:8d:9f:e7:b9:d4:d3:
18:67:3f:b7:6b:b5:f7:cc:d2:a8:01:9a:5e:99:7c:fd:4d:a7:
3a:c6:86:11:0f:0c:6d:f5:67:32:14:92:b4:ed:2b:19:05:75:
96:e3:f3:98:79:b2:43:38:ba:9f:07:1b:79:bc:72:4a:49:be:
9d:f1:c7:a0:1d:fb:ef:8a:c0:3f:65:96:4f:af:a9:60:e2:25:
45:f6:4a:73:f3:6a:68:ba:a4:b9:0e:e8:e3:13:77:70:4c:f8:
cd:25:66:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org