Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/VPto2ZJ-LmRX3rIxzMfCGLnSXqc.roa
File: VPto2ZJ-LmRX3rIxzMfCGLnSXqc.roa (raw, json)
Hash identifier: XZGvSjd69161tdNlXGYo8U1AXKJ0TPhpyg1rcMuxrXQ=
Subject key identifier: 54:FB:68:D9:92:7E:2E:64:57:DE:B2:31:CC:C7:C2:18:B9:D2:5E:A7
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 0135
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/VPto2ZJ-LmRX3rIxzMfCGLnSXqc.roa
Signing time: Tue 29 Dec 2020 10:52:56 +0000
ROA not before: Tue 29 Dec 2020 10:52:56 +0000
ROA not after: Tue 05 Oct 2021 04:04:36 +0000
asID: 51044
IP address blocks: 2406:8dc0:2500::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Dec 29 10:52:56 2020 GMT
Not After : Oct 5 04:04:36 2021 GMT
Subject: CN=54FB68D9927E2E6457DEB231CCC7C218B9D25EA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:37:83:28:6e:ae:d3:94:e0:f4:04:a8:60:
90:9c:d7:45:0e:5c:da:00:ba:97:a7:81:9f:e2:f4:
0d:d0:ce:ef:e1:32:b2:f0:81:4f:6a:74:39:0c:94:
25:2b:e2:9d:f4:2b:a8:2e:98:e8:4f:09:bc:fa:e4:
68:57:65:f9:93:07:33:7d:d1:c7:bf:94:92:da:76:
90:23:ad:c4:d2:53:f3:64:0b:ec:f1:80:56:f9:53:
27:91:00:4e:0d:0c:6a:56:f2:e1:7f:ca:2b:43:37:
f3:fe:d9:fe:32:27:e3:ea:af:99:bb:89:c9:ba:ee:
c9:4f:1d:cf:d0:aa:45:f7:73:50:b7:29:d4:bc:4f:
92:ec:da:1f:a0:70:4c:6d:ae:31:7e:09:ee:b9:56:
ea:be:5b:b6:12:c5:ff:dd:23:68:6f:8d:3c:a9:0d:
9a:6b:53:43:79:3e:8b:ce:93:55:2d:42:e2:53:0e:
e7:32:86:7f:3e:66:4c:aa:be:0c:84:dd:41:88:ec:
fa:69:58:cd:7c:41:84:c8:de:40:43:59:ed:58:78:
28:3c:ff:a1:4b:6e:6f:23:3e:fb:24:32:d1:7c:9b:
4e:eb:c1:04:41:ee:a2:b8:52:7a:25:20:ea:b4:21:
79:c3:7c:44:ad:37:3e:10:f3:3b:31:e4:19:63:de:
46:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FB:68:D9:92:7E:2E:64:57:DE:B2:31:CC:C7:C2:18:B9:D2:5E:A7
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/VPto2ZJ-LmRX3rIxzMfCGLnSXqc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:8dc0:2500::/40
Signature Algorithm: sha256WithRSAEncryption
3c:3a:49:5b:e8:94:c6:ef:f5:4b:64:99:be:5b:1b:fc:11:6c:
7a:08:e5:ca:21:7b:33:05:1d:37:38:b6:cf:72:7d:fc:c5:aa:
a8:0e:4f:9f:7d:4e:21:23:f9:83:31:c1:c8:60:aa:41:b5:ac:
64:f6:93:67:08:2a:ec:47:36:42:67:e3:eb:0e:cb:e9:78:4a:
09:a2:1f:d5:21:89:f1:99:7a:3d:fd:35:92:e0:49:98:c5:42:
a6:98:a0:95:f1:8d:07:12:de:fc:8d:9a:ee:46:0b:74:49:30:
ff:ea:38:98:66:db:96:52:10:f7:fa:fb:e2:c9:98:53:43:fc:
ff:45:44:b2:0e:0a:ae:78:fa:f4:b6:b6:60:a4:46:4e:8b:b3:
3f:1a:1c:d8:19:b9:a9:b5:d6:e8:a1:c4:63:db:28:04:03:b5:
e9:a4:dd:8c:84:7b:e9:ab:f3:46:87:2b:a6:a3:fb:f4:37:bb:
2c:d7:35:bd:00:52:d2:01:bd:44:29:0f:57:27:f9:d2:b7:8b:
e0:b5:a2:3d:bf:87:a5:22:ce:d9:2e:00:9a:ed:df:76:98:17:
00:89:ae:2e:c7:48:81:62:c3:7f:3f:15:e9:7d:1f:c3:c8:e6:
34:c6:9b:78:cc:81:e7:11:90:e4:91:a4:e8:e3:cc:fa:58:c3:
06:8a:ca:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org