Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/Ilw6_mQlwvLVWCPIEaOlfmnxQ8E.roa
File: Ilw6_mQlwvLVWCPIEaOlfmnxQ8E.roa (raw, json)
Hash identifier: RuJ2ti3VR1+ELpUFdZeIxRnR8gP2ppmK2FYoBU4VKrs=
Subject key identifier: 22:5C:3A:FE:64:25:C2:F2:D5:58:23:C8:11:A3:A5:7E:69:F1:43:C1
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 0110
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/Ilw6_mQlwvLVWCPIEaOlfmnxQ8E.roa
Signing time: Sat 05 Dec 2020 08:23:37 +0000
ROA not before: Sat 05 Dec 2020 08:23:37 +0000
ROA not after: Tue 05 Oct 2021 04:04:36 +0000
asID: 20473
IP address blocks: 2406:8dc0:2004::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Dec 5 08:23:37 2020 GMT
Not After : Oct 5 04:04:36 2021 GMT
Subject: CN=225C3AFE6425C2F2D55823C811A3A57E69F143C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:6b:f5:31:c5:72:17:c3:45:2d:12:6a:4b:
b5:f0:69:d2:91:02:e2:2d:57:11:f7:42:c6:8a:c5:
a9:96:e2:c3:df:4e:81:dd:05:16:90:03:7d:ea:6c:
c0:d8:4c:0a:21:9c:88:ab:24:db:67:e2:e8:8f:3f:
0c:7f:19:83:27:3f:9a:69:9d:16:7b:54:68:93:90:
d6:fa:f7:3a:16:e2:38:ad:f5:f0:3b:28:58:18:f1:
3b:a2:6f:c4:76:85:ad:e2:81:fb:dc:6a:77:aa:c3:
f7:a0:ea:86:f4:f4:0c:27:6d:59:1b:f7:fe:53:58:
7e:06:28:dc:8d:57:86:14:81:57:27:63:03:dc:30:
23:e0:19:c0:09:61:5c:09:a3:4f:05:71:1a:05:43:
fa:66:62:01:7e:c7:64:e5:70:a9:1f:fd:8f:f6:19:
02:ac:93:be:aa:af:1f:63:f6:8a:40:e5:82:af:44:
a7:cd:f1:bd:55:74:1b:7c:1b:71:0c:84:4e:a7:22:
fd:78:4e:24:8b:c4:a2:9d:45:9b:54:f2:14:4f:93:
e6:80:ab:ce:68:72:d1:f3:f5:c2:92:e8:15:2b:26:
5b:c5:46:d1:a7:fb:68:9c:7a:24:b0:77:d8:af:4f:
aa:fc:40:95:10:37:58:31:d0:49:e8:be:d2:a8:f6:
b6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5C:3A:FE:64:25:C2:F2:D5:58:23:C8:11:A3:A5:7E:69:F1:43:C1
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/Ilw6_mQlwvLVWCPIEaOlfmnxQ8E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:8dc0:2004::/48
Signature Algorithm: sha256WithRSAEncryption
be:00:11:f5:87:75:88:08:dc:07:0f:f0:5a:a6:d4:b0:e4:c6:
41:63:f8:23:d0:cd:45:2d:31:be:3b:58:bd:8b:aa:58:8d:7c:
fd:e3:ee:79:80:9b:e8:e2:56:19:d6:7d:0d:b4:3d:14:7a:df:
40:23:19:c7:1d:10:e1:e5:db:98:bf:75:46:6d:da:44:0a:ce:
a8:ce:1b:0a:1c:c0:75:ab:6e:8d:2a:e5:61:3e:2d:7b:88:c3:
84:e8:68:bc:f3:bf:8a:47:bd:e3:52:4d:8c:4c:8f:87:a3:5a:
df:98:2f:a6:06:56:5c:df:d8:f7:66:12:41:63:e3:cc:d5:5c:
5d:e6:6e:c3:98:91:8b:21:7d:8e:a0:a5:d9:9d:07:70:6f:ef:
b3:d8:06:0d:b1:e9:92:d5:ab:55:cd:98:65:69:b5:25:25:92:
15:8d:7e:3d:73:e0:a5:b0:c5:10:90:96:0d:8b:3e:fb:7c:40:
a4:b5:34:1c:da:4d:cc:6a:f1:fe:bf:ad:8c:44:40:f2:79:7a:
47:c5:aa:da:00:44:0f:45:b7:19:fa:04:15:fc:75:11:12:14:
6b:1a:74:02:57:37:45:b0:de:64:c4:38:c2:e3:5c:d4:6a:52:
56:94:86:f3:48:d3:ea:ff:9c:49:13:ed:66:0a:8a:9f:e0:c1:
06:99:82:a0
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICARAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB
OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMDEyMDUw
ODIzMzdaFw0yMTEwMDUwNDA0MzZaMDMxMTAvBgNVBAMTKDIyNUMzQUZFNjQyNUMy
RjJENTU4MjNDODExQTNBNTdFNjlGMTQzQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLzWv1McVyF8NFLRJqS7XwadKRAuItVxH3QsaKxamW4sPfToHd
BRaQA33qbMDYTAohnIirJNtn4uiPPwx/GYMnP5ppnRZ7VGiTkNb69zoW4jit9fA7
KFgY8Tuib8R2ha3igfvcaneqw/eg6ob09AwnbVkb9/5TWH4GKNyNV4YUgVcnYwPc
MCPgGcAJYVwJo08FcRoFQ/pmYgF+x2TlcKkf/Y/2GQKsk76qrx9j9opA5YKvRKfN
8b1VdBt8G3EMhE6nIv14TiSLxKKdRZtU8hRPk+aAq85octHz9cKS6BUrJlvFRtGn
+2iceiSwd9ivT6r8QJUQN1gx0EnovtKo9rajAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUIlw6/mQlwvLVWCPIEaOlfmnxQ8EwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc
apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT
Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvSWx3Nl9tUWx3dkxWV0NQ
SUVhT2xmbW54UThFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACQGjcAgBDANBgkqhkiG9w0BAQsFAAOCAQEAvgAR9Yd1iAjcBw/wWqbUsOTGQWP4
I9DNRS0xvjtYvYuqWI18/ePueYCb6OJWGdZ9DbQ9FHrfQCMZxx0Q4eXbmL91Rm3a
RArOqM4bChzAdatujSrlYT4te4jDhOhovPO/ike941JNjEyPh6Na35gvpgZWXN/Y
92YSQWPjzNVcXeZuw5iRiyF9jqCl2Z0HcG/vs9gGDbHpktWrVc2YZWm1JSWSFY1+
PXPgpbDFEJCWDYs++3xApLU0HNpNzGrx/r+tjERA8nl6R8Wq2gBED0W3GfoEFfx1
ERIUaxp0Alc3RbDeZMQ4wuNc1GpSVpSG80jT6v+cSRPtZgqKn+DBBpmCoA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org