Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/hah4hSTFJgmo49THJCQeAiCAgwU.roa
File: hah4hSTFJgmo49THJCQeAiCAgwU.roa (raw, json)
Hash identifier: RCsz+adANfu3eTw/1UpcMQ0VHwVJSwQsRz8sK4stmfE=
Subject key identifier: 85:A8:78:85:24:C5:26:09:A8:E3:D4:C7:24:24:1E:02:20:80:83:05
Certificate issuer: /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial: 13
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/hah4hSTFJgmo49THJCQeAiCAgwU.roa
Signing time: Wed 07 Jul 2021 07:03:49 +0000
ROA not before: Wed 07 Jul 2021 07:03:49 +0000
ROA not after: Thu 07 Jul 2022 02:16:35 +0000
asID: 38846
IP address blocks: 2407:a0c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Validity
Not Before: Jul 7 07:03:49 2021 GMT
Not After : Jul 7 02:16:35 2022 GMT
Subject: CN=85A8788524C52609A8E3D4C724241E0220808305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:b8:13:ca:6b:d9:07:39:2b:e1:5b:9e:e5:
12:b7:46:00:1b:04:61:71:f0:27:60:ed:c5:ca:9f:
fa:77:ca:de:b8:07:ef:dd:b0:8e:2b:45:91:28:05:
e4:88:df:c0:f7:a8:b7:4d:96:85:54:c3:1b:83:d2:
f7:58:86:b2:b5:f4:76:36:51:ca:33:e1:81:5c:66:
51:16:5a:03:45:62:8e:fc:ec:82:54:05:0e:e5:6b:
41:9a:23:9f:b3:2d:69:53:26:bc:77:3f:9a:81:67:
38:9d:c6:f8:5d:90:c3:4d:6c:fc:5d:ef:84:97:bf:
8d:0c:cb:8e:d9:98:43:8b:ba:82:e8:ef:53:83:55:
33:f1:14:5c:dc:92:78:8b:70:d2:ed:5d:55:a6:66:
7c:de:3c:a1:8f:a9:32:d7:61:71:b1:d8:f0:ef:4e:
ad:fd:9e:42:cb:82:fa:26:aa:9e:49:d2:6c:ee:9e:
70:c1:c4:01:74:96:e0:b7:33:d9:d9:2b:7c:9f:5e:
ec:ff:1f:fc:d9:77:a9:eb:2c:ed:e8:02:ed:32:33:
f6:f7:9d:d8:ce:67:4d:ab:a9:1b:0e:d5:58:72:42:
50:e4:22:66:4d:0e:87:f4:24:20:61:40:1e:39:d3:
0c:d2:e2:76:43:3a:e2:53:8c:d8:17:b7:b9:22:a3:
af:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A8:78:85:24:C5:26:09:A8:E3:D4:C7:24:24:1E:02:20:80:83:05
X509v3 Authority Key Identifier:
keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/hah4hSTFJgmo49THJCQeAiCAgwU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:a0c0::/32
Signature Algorithm: sha256WithRSAEncryption
80:01:ea:d2:3f:11:dc:54:8e:69:33:1f:cc:4b:fb:f8:23:6f:
e3:6a:21:d2:5c:1f:9e:29:b4:13:21:90:1d:97:90:44:ca:7d:
e0:b5:34:4b:ca:c0:c8:91:ee:ed:20:26:b1:34:0a:25:68:6b:
e5:61:05:a5:f2:ed:85:66:df:80:10:80:24:99:2d:e1:21:ed:
49:17:b8:01:03:45:5d:c8:33:7b:08:ab:0f:16:2c:b2:92:c2:
f8:82:7d:c9:f1:9a:9b:f2:16:fd:48:3b:a3:9f:f3:00:74:c0:
05:63:2a:38:ff:da:22:5e:ee:c1:64:fc:49:ec:84:d4:90:a3:
d1:7f:44:99:97:83:9f:e1:cb:97:3e:29:cd:16:dd:2a:57:c4:
13:55:92:d4:70:60:9c:ea:8e:a0:29:97:55:9e:bf:fd:48:c2:
b1:e7:ef:d2:86:55:11:6d:fb:48:24:cf:66:1e:ab:ff:80:8d:
58:aa:f1:30:e8:35:f2:2c:3f:dc:af:71:58:52:8d:3f:1a:62:
5e:97:05:9c:25:0d:30:59:78:18:9f:fa:c1:39:bf:0d:42:c3:
3c:2d:f1:26:d3:08:74:33:9f:a8:5d:84:16:63:ac:d2:11:e5:
c1:4c:91:2b:3d:be:55:30:52:7d:61:59:e7:a8:2d:14:f8:6b:
fb:fc:20:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org