Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/oBCB1ML3jhnOrJ13ceXfrd7dI7o.roa
File: oBCB1ML3jhnOrJ13ceXfrd7dI7o.roa (raw, json)
Hash identifier: GHVgklH0NDL4RF7WxfJm3qRrCBYZ957INXRtHEnaBKM=
Subject key identifier: A0:10:81:D4:C2:F7:8E:19:CE:AC:9D:77:71:E5:DF:AD:DE:DD:23:BA
Certificate issuer: /CN=1E79C6C033BB9D469E0CE8164538DF39E9F1C3BC
Certificate serial: F5
Authority key identifier: 1E:79:C6:C0:33:BB:9D:46:9E:0C:E8:16:45:38:DF:39:E9:F1:C3:BC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HnnGwDO7nUaeDOgWRTjfOenxw7w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/oBCB1ML3jhnOrJ13ceXfrd7dI7o.roa
Signing time: Thu 18 Nov 2021 03:54:39 +0000
ROA not before: Thu 18 Nov 2021 03:54:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38856
IP address blocks: 2406:d040::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E79C6C033BB9D469E0CE8164538DF39E9F1C3BC
Validity
Not Before: Nov 18 03:54:39 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A01081D4C2F78E19CEAC9D7771E5DFADDEDD23BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:86:ab:0a:53:4b:c5:f8:d5:39:94:62:b7:
2a:b0:33:68:a4:b3:be:0d:05:31:b9:a3:09:40:6f:
9a:e8:e1:8b:9e:f8:17:33:ff:a4:09:87:6c:e5:b5:
4a:42:a4:a2:f6:0c:76:9f:71:2d:b2:5c:83:05:d3:
e0:3c:3c:cb:e8:79:9d:03:87:e5:13:d1:f2:16:51:
26:49:02:37:3f:4b:e8:90:d1:08:c7:8a:b9:f6:f0:
94:87:03:94:26:54:9f:ff:05:7d:1e:6a:1f:10:26:
73:aa:55:0b:a6:07:ae:9b:a8:7b:cf:2c:7d:36:df:
d4:89:4c:85:c8:78:1f:20:b7:79:d5:e2:d3:cc:ad:
9e:7b:f0:8c:d0:f9:d9:77:a6:35:88:11:76:ba:92:
32:d0:4d:3a:15:13:f4:a6:ce:54:d1:24:59:04:06:
ec:b4:64:c7:5a:41:d0:3f:df:00:dc:0c:5d:b2:a0:
a0:a4:b3:9d:dc:18:8c:c6:ae:7e:c0:40:14:c1:ff:
7f:bd:06:0c:77:0f:3e:99:8a:a1:c0:a2:be:0a:4b:
67:c4:4c:90:64:0a:ff:99:01:f2:c4:9a:de:c3:2f:
ac:2c:ba:41:9b:e1:92:69:8f:6f:71:4d:01:df:7e:
6b:8d:07:c8:e6:97:f6:30:91:fc:fa:33:79:bf:02:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:10:81:D4:C2:F7:8E:19:CE:AC:9D:77:71:E5:DF:AD:DE:DD:23:BA
X509v3 Authority Key Identifier:
keyid:1E:79:C6:C0:33:BB:9D:46:9E:0C:E8:16:45:38:DF:39:E9:F1:C3:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/HnnGwDO7nUaeDOgWRTjfOenxw7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HnnGwDO7nUaeDOgWRTjfOenxw7w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/oBCB1ML3jhnOrJ13ceXfrd7dI7o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:d040::/32
Signature Algorithm: sha256WithRSAEncryption
98:d7:34:f6:91:91:05:0a:6a:2d:a3:9d:a9:47:a6:f2:7a:60:
22:78:b1:26:48:fb:56:d9:ae:4e:8a:0c:b7:ac:b8:4f:25:e3:
9f:a0:40:f9:33:f4:de:f0:5c:fe:f6:21:98:e2:e8:0d:ae:1f:
28:84:7f:71:58:56:f9:a7:ea:35:a0:f5:eb:b1:f6:d2:11:61:
20:44:a2:ba:96:69:8b:7f:b1:6e:a6:d5:87:d0:d2:a6:c9:2e:
26:01:11:4e:c2:3a:91:e6:69:da:2b:80:f7:af:1b:41:7a:21:
50:ae:e0:78:59:f2:bb:46:94:3e:30:a8:05:f4:2d:5a:88:ea:
49:14:f0:f7:2f:55:0b:81:37:e7:88:9f:ae:20:2d:75:e5:4e:
bc:f6:4d:2f:af:8f:1e:0c:ae:f0:89:cd:af:5d:25:b9:28:46:
c9:9c:55:d0:4e:54:fb:3e:67:8d:7a:8e:07:88:27:2f:30:ca:
03:ea:fc:19:40:86:52:60:9e:80:45:35:eb:29:6b:b6:bb:58:
f5:0e:cb:0b:2b:24:3e:f8:e3:bf:36:8a:fd:a4:9a:f5:be:62:
f3:b9:e5:8e:d1:61:15:64:9b:e8:03:e2:21:1d:ed:96:eb:d4:
3f:39:5b:95:0c:dc:6b:80:ef:be:de:cf:2c:6b:63:b2:02:9f:
70:9d:df:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:10 2025 by rpki-client