Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/ZwjCU8XZfoYlUJCEqw6Iok88r7A.roa
File: ZwjCU8XZfoYlUJCEqw6Iok88r7A.roa (raw, json)
Hash identifier: l0dySF/XY5wf6QKlwYue+PBK7CmJ1x1zk47+dN6cgZg=
Subject key identifier: 67:08:C2:53:C5:D9:7E:86:25:50:90:84:AB:0E:88:A2:4F:3C:AF:B0
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 09CA
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/ZwjCU8XZfoYlUJCEqw6Iok88r7A.roa
Signing time: Wed 29 Sep 2021 02:36:48 +0000
ROA not before: Wed 29 Sep 2021 02:36:48 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9244
IP address blocks: 2403:ee00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2506 (0x9ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 29 02:36:48 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6708C253C5D97E8625509084AB0E88A24F3CAFB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ce:9d:4e:1d:30:fe:d0:5f:e5:0e:be:04:ec:
8e:0c:07:aa:62:03:f7:53:5f:67:c9:97:42:8a:8b:
8e:ff:ca:fa:4f:8f:54:cc:1d:a8:f6:54:f7:78:83:
8a:b9:4e:df:c2:97:84:48:6f:c8:57:68:57:28:fd:
02:a9:83:fe:da:34:49:7b:52:23:7f:92:23:1d:bf:
5a:56:12:f7:5e:11:99:3f:e1:33:5b:61:12:7c:a2:
06:7c:f5:62:45:71:b9:ed:db:04:17:45:06:ef:78:
74:d1:fd:a0:a8:ba:df:fb:d9:66:32:32:00:2b:8a:
d4:a1:ef:e2:f2:78:3b:2a:b8:f1:ea:d3:02:32:62:
20:dd:6e:17:21:8b:35:88:f2:9a:64:ef:fb:2b:2d:
0c:7e:40:38:cf:06:bc:ef:64:28:c1:2b:40:d0:ce:
d6:18:d0:9f:b4:8d:e8:2a:87:21:c1:85:46:b0:e2:
3a:54:9c:26:6a:ca:37:7b:f6:df:00:dc:09:c4:a6:
42:dc:56:32:71:de:b8:c9:41:49:93:c6:0e:02:b5:
4d:4c:e1:3c:d5:a8:0e:b5:a7:72:1f:7f:62:63:0c:
9b:51:75:67:ca:e1:06:be:41:c8:b4:fb:d0:c5:76:
ee:d5:94:e7:fd:f8:13:c8:ff:16:54:3f:70:5f:ad:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:08:C2:53:C5:D9:7E:86:25:50:90:84:AB:0E:88:A2:4F:3C:AF:B0
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/ZwjCU8XZfoYlUJCEqw6Iok88r7A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
34:9c:fa:1e:b5:56:d2:8a:b6:64:e6:26:a7:52:08:bf:dd:fe:
a7:9d:3f:4c:b7:dd:8f:68:be:f6:f0:f0:ce:5f:18:4d:5d:64:
f6:18:a8:0f:a4:2b:73:d5:81:d2:df:04:51:45:bf:c8:68:a0:
4b:9c:9a:d4:30:66:d5:e2:3d:e8:47:2f:9c:f9:d9:72:27:04:
ac:d4:19:56:67:44:28:71:8f:ee:bc:2a:7e:0a:95:36:42:6a:
bf:2c:4c:8e:f9:df:d9:80:5a:bc:60:09:0c:c6:95:88:22:ba:
c0:8e:5a:98:79:a5:ed:e1:85:58:29:4f:15:21:27:d8:ca:4c:
62:16:64:25:f9:4a:1f:f2:3e:9d:5d:9f:87:8e:ac:e0:a0:93:
67:48:e0:f0:40:aa:74:3e:63:19:1c:00:7f:ba:46:94:5c:40:
4d:d8:0f:a0:f8:31:d4:8c:4c:4c:7b:8c:9c:97:9a:a4:95:ed:
c0:18:ab:9a:2c:e9:57:f6:b6:e9:d4:e7:dd:31:fa:43:08:52:
2f:f8:61:fa:93:99:6a:53:0c:4c:19:61:02:b5:7d:87:5d:72:
ed:eb:60:a2:3e:c0:fc:24:3e:8c:b0:6d:2a:01:6f:6b:d0:03:
72:28:c1:29:26:cb:a0:ed:89:03:25:68:24:05:f9:e1:ca:f5:
84:fd:0c:7a
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICCcowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC
M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMTA5Mjkw
MjM2NDhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDY3MDhDMjUzQzVEOTdF
ODYyNTUwOTA4NEFCMEU4OEEyNEYzQ0FGQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkzp1OHTD+0F/lDr4E7I4MB6piA/dTX2fJl0KKi47/yvpPj1TM
Haj2VPd4g4q5Tt/Cl4RIb8hXaFco/QKpg/7aNEl7UiN/kiMdv1pWEvdeEZk/4TNb
YRJ8ogZ89WJFcbnt2wQXRQbveHTR/aCout/72WYyMgAritSh7+LyeDsquPHq0wIy
YiDdbhchizWI8ppk7/srLQx+QDjPBrzvZCjBK0DQztYY0J+0jegqhyHBhUaw4jpU
nCZqyjd79t8A3AnEpkLcVjJx3rjJQUmTxg4CtU1M4TzVqA61p3Iff2JjDJtRdWfK
4Qa+Qci0+9DFdu7VlOf9+BPI/xZUP3BfraM7AgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUZwjCU8XZfoYlUJCEqw6Iok88r7AwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT
KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU
L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL1p3akNVOFhaZm9ZbFVKQ0Vx
dzZJb2s4OHI3QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk
A+4AMA0GCSqGSIb3DQEBCwUAA4IBAQA0nPoetVbSirZk5ianUgi/3f6nnT9Mt92P
aL728PDOXxhNXWT2GKgPpCtz1YHS3wRRRb/IaKBLnJrUMGbV4j3oRy+c+dlyJwSs
1BlWZ0QocY/uvCp+CpU2Qmq/LEyO+d/ZgFq8YAkMxpWIIrrAjlqYeaXt4YVYKU8V
ISfYykxiFmQl+Uof8j6dXZ+HjqzgoJNnSODwQKp0PmMZHAB/ukaUXEBN2A+g+DHU
jExMe4ycl5qkle3AGKuaLOlX9rbp1OfdMfpDCFIv+GH6k5lqUwxMGWECtX2HXXLt
62CiPsD8JD6MsG0qAW9r0ANyKMEpJsug7YkDJWgkBfnhyvWE/Qx6
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org