Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/FxwKrpiJfW4EYu0iPJzHTetTRkk.roa
File: FxwKrpiJfW4EYu0iPJzHTetTRkk.roa (raw, json)
Hash identifier: /zyrPDlutrwyh6wvC82WH+oLOakYUQB4LifqfmhDbx8=
Subject key identifier: 17:1C:0A:AE:98:89:7D:6E:04:62:ED:22:3C:9C:C7:4D:EB:53:46:49
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 012E
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/FxwKrpiJfW4EYu0iPJzHTetTRkk.roa
Signing time: Mon 21 Dec 2020 09:58:37 +0000
ROA not before: Mon 21 Dec 2020 09:58:37 +0000
ROA not after: Tue 05 Oct 2021 04:04:36 +0000
asID: 141173
IP address blocks: 2406:8dc0:2400::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Dec 21 09:58:37 2020 GMT
Not After : Oct 5 04:04:36 2021 GMT
Subject: CN=171C0AAE98897D6E0462ED223C9CC74DEB534649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:c2:4a:36:3f:4e:ca:62:11:f6:48:64:b7:
a1:81:42:4f:46:f8:bb:8b:82:00:2a:b3:c5:c1:be:
7d:34:b3:59:9c:30:85:fd:11:13:58:ad:9b:54:b9:
01:28:ba:6a:96:7d:da:ac:59:14:96:04:99:85:43:
ba:68:2c:02:b9:b5:fa:a6:ba:b6:46:b0:8e:06:43:
c2:e4:8b:ab:fb:eb:5d:6e:57:6b:2b:39:37:9d:98:
43:96:4b:9e:49:04:2f:58:3c:c0:cb:b6:50:5a:08:
ec:e9:ea:0b:aa:a2:e6:fa:48:29:fa:7a:c6:8f:4c:
b6:0a:3e:5f:8d:12:48:6b:10:0c:64:f7:f8:a8:c3:
3b:2d:5a:3e:f5:5c:31:cb:b1:ef:35:2d:fe:57:05:
e6:eb:ca:2a:6c:41:de:1f:d5:75:2d:bb:80:35:ab:
2e:45:0e:9a:d4:0a:70:7d:76:14:85:11:d0:5c:ca:
ec:40:90:88:70:81:b0:36:f9:88:ee:39:ec:35:61:
a3:04:9c:8e:14:de:2c:63:4f:a5:3e:37:7f:ad:07:
9a:01:46:71:0d:7a:6c:0b:7f:83:83:c1:74:63:44:
3d:bc:1e:4c:c0:76:b4:21:39:3b:26:ae:1d:94:98:
73:f1:70:e9:1e:bf:3d:a4:5d:96:19:de:42:06:e0:
8c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1C:0A:AE:98:89:7D:6E:04:62:ED:22:3C:9C:C7:4D:EB:53:46:49
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/FxwKrpiJfW4EYu0iPJzHTetTRkk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:8dc0:2400::/40
Signature Algorithm: sha256WithRSAEncryption
e2:b6:7a:c9:57:e3:01:05:0b:cd:b0:e1:c8:86:b2:3e:ab:e5:
78:db:4f:ec:e7:42:b1:4b:0d:7a:4a:31:e9:96:e3:a6:12:42:
b5:de:48:c6:1d:a6:36:73:52:b8:bb:68:d2:66:a6:05:e2:a3:
29:ff:db:42:2c:96:76:35:f8:fe:1e:24:c9:03:51:91:b8:eb:
a1:ac:d0:4b:20:c7:df:ee:e7:89:7d:ff:95:8c:53:c3:13:08:
60:8d:be:90:3f:37:0c:21:37:c3:5c:aa:71:5c:6c:66:c7:8f:
c7:35:de:af:fa:a8:3d:34:f8:76:c7:33:7a:52:2a:26:05:84:
37:0e:06:6d:2e:f9:31:2c:1d:00:2e:20:29:14:d4:81:0a:7b:
2c:5d:7c:0b:93:72:98:5b:03:ef:91:35:23:97:24:70:7f:a0:
6d:98:52:93:40:e3:d1:01:78:b3:70:e3:a4:b5:c7:3b:51:69:
39:7f:af:39:58:93:31:0e:ac:68:ed:73:dd:29:b5:a5:05:5f:
ed:e7:90:1b:36:75:43:c1:9f:e7:7e:2f:01:6d:9f:dc:fc:13:
92:fd:7f:e0:b5:c2:a6:0e:b2:54:83:2c:0c:b7:b7:19:33:e6:
21:b8:f6:d3:f0:74:ca:4c:a8:b2:c8:3b:19:7e:92:3d:b9:31:
aa:06:22:4d
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB
OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMDEyMjEw
OTU4MzdaFw0yMTEwMDUwNDA0MzZaMDMxMTAvBgNVBAMTKDE3MUMwQUFFOTg4OTdE
NkUwNDYyRUQyMjNDOUNDNzRERUI1MzQ2NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDP8sJKNj9OymIR9khkt6GBQk9G+LuLggAqs8XBvn00s1mcMIX9
ERNYrZtUuQEoumqWfdqsWRSWBJmFQ7poLAK5tfqmurZGsI4GQ8Lki6v7611uV2sr
OTedmEOWS55JBC9YPMDLtlBaCOzp6guqoub6SCn6esaPTLYKPl+NEkhrEAxk9/io
wzstWj71XDHLse81Lf5XBebryipsQd4f1XUtu4A1qy5FDprUCnB9dhSFEdBcyuxA
kIhwgbA2+YjuOew1YaMEnI4U3ixjT6U+N3+tB5oBRnENemwLf4ODwXRjRD28HkzA
drQhOTsmrh2UmHPxcOkevz2kXZYZ3kIG4Iw1AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUFxwKrpiJfW4EYu0iPJzHTetTRkkwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc
apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT
Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvRnh3S3JwaUpmVzRFWXUw
aVBKekhUZXRUUmtrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACQGjcAkMA0GCSqGSIb3DQEBCwUAA4IBAQDitnrJV+MBBQvNsOHIhrI+q+V420/s
50KxSw16SjHpluOmEkK13kjGHaY2c1K4u2jSZqYF4qMp/9tCLJZ2Nfj+HiTJA1GR
uOuhrNBLIMff7ueJff+VjFPDEwhgjb6QPzcMITfDXKpxXGxmx4/HNd6v+qg9NPh2
xzN6UiomBYQ3DgZtLvkxLB0ALiApFNSBCnssXXwLk3KYWwPvkTUjlyRwf6BtmFKT
QOPRAXizcOOktcc7UWk5f685WJMxDqxo7XPdKbWlBV/t55AbNnVDwZ/nfi8BbZ/c
/BOS/X/gtcKmDrJUgywMt7cZM+YhuPbT8HTKTKiyyDsZfpI9uTGqBiJN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:58 2024 by rpki-client on console-ams.rpki-client.org