Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/SCFAlSjaEKxFbgz4ppOINZzMXko.roa
File: SCFAlSjaEKxFbgz4ppOINZzMXko.roa (raw, json)
Hash identifier: KNhynXGRPin2ZPiL9cH5lz53lGmYQ75ysvS2enUlWeA=
Subject key identifier: 48:21:40:95:28:DA:10:AC:45:6E:0C:F8:A6:93:88:35:9C:CC:5E:4A
Certificate issuer: /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Certificate serial: 0A51
Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/SCFAlSjaEKxFbgz4ppOINZzMXko.roa
Signing time: Thu 15 Sep 2022 02:42:21 +0000
ROA not before: Thu 15 Sep 2022 02:42:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131149
IP address blocks: 2407:7100::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2641 (0xa51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Validity
Not Before: Sep 15 02:42:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4821409528DA10AC456E0CF8A69388359CCC5E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:ab:b5:0c:7f:97:a4:6c:88:e9:25:fc:cb:
35:bc:24:50:ee:2f:51:83:b9:dd:c5:3f:d1:9e:5f:
44:eb:05:d5:f8:32:05:85:94:be:fd:19:e6:03:28:
4b:6b:91:9e:93:93:ad:79:f5:12:ff:4f:ef:19:01:
7e:23:b1:a1:d1:66:3e:5f:bc:fa:2b:73:91:cd:6e:
38:23:87:be:94:04:ad:04:cc:df:ff:a9:38:b3:ba:
8c:24:6b:23:93:8c:29:6d:ae:bc:fb:ac:a3:f5:d5:
f2:4e:af:fd:6c:ae:d8:1f:4a:b6:a1:f0:85:0f:1f:
3f:4c:84:fc:58:50:87:46:e6:5a:21:7b:08:9b:42:
76:c5:94:3b:d4:68:c4:a2:6b:02:3f:74:10:e2:05:
4e:0b:9a:19:05:78:90:16:09:2c:64:76:2f:54:7f:
9b:f2:31:cd:30:b0:39:57:5f:05:80:79:ef:28:93:
b5:38:d9:c9:61:07:a4:50:9e:52:7c:ff:de:21:73:
fa:49:3a:ae:07:13:53:e1:c0:72:0f:ad:d4:64:f0:
f1:46:20:d7:3d:45:be:3b:51:43:ac:47:2c:94:9e:
70:5c:be:2d:75:e2:32:98:54:02:2b:4e:de:3d:1c:
1c:1c:2a:77:dd:83:ca:47:a4:83:36:09:d8:a0:ae:
d2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:21:40:95:28:DA:10:AC:45:6E:0C:F8:A6:93:88:35:9C:CC:5E:4A
X509v3 Authority Key Identifier:
keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/SCFAlSjaEKxFbgz4ppOINZzMXko.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:7100::/32
Signature Algorithm: sha256WithRSAEncryption
1f:e7:0b:01:c7:dc:e3:e4:54:25:49:9b:81:7b:85:db:ac:01:
8f:5d:5a:85:1b:ea:ee:2b:3b:ec:73:b8:90:77:c0:8c:75:b7:
14:26:a4:1f:6c:3a:5b:b4:db:b4:69:08:9f:34:d6:43:96:b2:
1d:b9:59:d3:c9:70:43:fe:74:aa:de:53:c1:6c:4a:66:28:b4:
2f:f6:59:63:ac:1a:08:92:bb:5c:53:b5:4e:24:27:2e:46:f2:
1e:b7:4b:ff:db:2c:73:98:41:c2:73:ea:fb:d4:6f:29:62:c5:
fe:9a:34:1c:10:1d:e2:cc:e3:56:eb:89:28:aa:e1:6a:b5:a0:
4a:1d:76:48:4d:7a:16:42:ac:de:19:e5:c5:df:dd:27:28:a2:
0d:f9:31:57:fa:9c:a4:93:ef:b7:54:67:f5:2e:c9:14:0e:e1:
b4:58:8e:70:24:54:16:fb:12:5b:d5:eb:79:43:53:4a:32:d3:
8a:f4:f4:b1:48:f5:a2:0a:df:d9:07:e3:47:99:d4:35:96:b1:
df:a0:a6:49:87:86:6a:66:97:39:29:5e:20:47:c4:8a:9c:a9:
75:1f:38:3d:d3:52:26:2e:20:b0:62:0b:bd:3e:8e:05:e0:21:
d0:a7:e4:bf:ee:02:19:34:f9:89:2e:30:d6:67:6f:b7:fe:6a:
e0:8a:34:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org