Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/ZXLspgsY_c0iMAbv-VFlEozjues.roa
File: ZXLspgsY_c0iMAbv-VFlEozjues.roa (raw, json)
Hash identifier: JiWLC3TwxWL0el3Rv3jP/MG8Wcs9Id/XHTmBUK5RqAY=
Subject key identifier: 65:72:EC:A6:0B:18:FD:CD:22:30:06:EF:F9:51:65:12:8C:E3:B9:EB
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 60
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/ZXLspgsY_c0iMAbv-VFlEozjues.roa
Signing time: Tue 20 Oct 2020 12:45:14 +0000
ROA not before: Tue 20 Oct 2020 12:45:14 +0000
ROA not after: Tue 05 Oct 2021 04:04:36 +0000
asID: 18250
IP address blocks: 2406:8dc0:8250::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Oct 20 12:45:14 2020 GMT
Not After : Oct 5 04:04:36 2021 GMT
Subject: CN=6572ECA60B18FDCD223006EFF95165128CE3B9EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:8c:3f:41:3b:bc:97:cd:c3:03:09:32:81:
e5:67:3a:a2:13:5a:e0:dd:dd:b1:c1:92:37:31:15:
db:d4:09:03:83:65:c5:99:57:c8:a9:1c:76:6a:08:
9e:e9:a6:ee:bf:7f:4c:a9:dc:74:cf:b8:5a:7b:94:
99:e2:11:53:ee:b0:9a:2c:b9:e9:fd:64:7f:15:1e:
92:98:24:9f:4c:87:1c:42:92:74:af:16:c7:13:3b:
4c:32:67:fb:61:80:5c:0b:f7:da:0a:f4:83:25:fe:
6c:d2:7e:22:57:82:16:59:8d:bc:12:dc:03:8c:fb:
af:54:30:91:a4:4f:fc:66:a3:cd:91:a6:1c:91:78:
bb:0d:d2:8a:ed:8c:53:c0:1a:8b:60:67:1b:b5:6b:
2f:b5:97:87:22:7d:11:5b:ca:10:86:08:e5:21:d6:
06:27:a1:06:30:3a:d3:dc:8c:84:0a:d6:8d:92:a1:
e9:92:b6:cd:a2:0c:99:a9:29:90:6c:49:b6:b7:39:
0e:9c:89:6a:fb:88:5b:8f:21:61:79:b7:f7:45:e0:
c2:33:d4:16:29:ff:81:c2:67:01:c8:2d:09:e7:60:
64:4e:88:9c:58:b7:6c:e6:64:4d:75:b8:4a:85:43:
dc:6e:1f:d4:82:b7:24:e5:5b:dd:fb:10:e1:c9:11:
e9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:72:EC:A6:0B:18:FD:CD:22:30:06:EF:F9:51:65:12:8C:E3:B9:EB
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/ZXLspgsY_c0iMAbv-VFlEozjues.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:8dc0:8250::/44
Signature Algorithm: sha256WithRSAEncryption
ea:1e:f7:be:64:3e:95:3f:ae:f3:82:12:25:3e:15:03:98:d7:
6f:5e:59:c1:6d:27:21:e9:92:4d:e1:23:d8:0f:6e:b0:ae:86:
08:81:23:8e:b8:91:d4:b1:98:10:72:a0:5d:01:bb:58:d4:a6:
0f:0d:eb:8e:26:f3:e1:3b:44:0b:2c:78:2d:05:64:89:4f:ab:
4d:c7:54:f5:fc:45:12:76:29:6d:cd:cf:35:e5:62:74:2f:1c:
3a:f6:67:b5:d1:a4:d1:18:3a:bd:f7:13:2c:8b:68:cf:43:0c:
c2:9d:6a:82:15:d9:e1:00:7a:e0:f0:15:09:48:3b:a5:ba:8d:
6f:6e:35:48:fa:3a:99:7b:3e:8b:b2:d3:fd:28:f3:27:5e:32:
41:a2:b1:36:b3:94:a7:dc:0e:7e:ef:9b:09:e6:7f:e6:c7:c0:
39:db:4e:fa:9b:68:75:63:19:d1:38:a5:bd:b0:a1:12:9d:2f:
9d:2a:4d:6d:1a:01:93:55:4f:70:1f:cb:4c:23:5a:3f:5f:3d:
5d:6d:07:98:0f:67:9d:fd:4b:72:0c:07:c1:c6:92:2d:94:5e:
81:db:1f:a4:d5:a6:f9:00:f3:c3:38:50:22:f7:aa:27:b6:ee:
58:c5:8a:32:3f:74:b0:e7:c2:c7:2e:a3:a3:df:b1:c3:4b:df:
c2:05:ea:5e
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1N0E5
OTRCRDYwNTU1MTQ1Q0I2NDUyREM2QTk4MEZDODUxMTM2QkRBMB4XDTIwMTAyMDEy
NDUxNFoXDTIxMTAwNTA0MDQzNlowMzExMC8GA1UEAxMoNjU3MkVDQTYwQjE4RkRD
RDIyMzAwNkVGRjk1MTY1MTI4Q0UzQjlFQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKr2jD9BO7yXzcMDCTKB5Wc6ohNa4N3dscGSNzEV29QJA4NlxZlX
yKkcdmoInumm7r9/TKncdM+4WnuUmeIRU+6wmiy56f1kfxUekpgkn0yHHEKSdK8W
xxM7TDJn+2GAXAv32gr0gyX+bNJ+IleCFlmNvBLcA4z7r1QwkaRP/GajzZGmHJF4
uw3Siu2MU8Aai2BnG7VrL7WXhyJ9EVvKEIYI5SHWBiehBjA609yMhArWjZKh6ZK2
zaIMmakpkGxJtrc5DpyJavuIW48hYXm390XgwjPUFin/gcJnAcgtCedgZE6InFi3
bOZkTXW4SoVD3G4f1IK3JOVb3fsQ4ckR6fECAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBRlcuymCxj9zSIwBu/5UWUSjOO56zAfBgNVHSMEGDAWgBRXqZS9YFVRRctkUtxq
mA/IURNr2jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BTExQQVNT
L1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVjZtVXZXQlZVVVhMWkZMY2FwZ1B5RkVUYTlvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFTUy9aWExzcGdzWV9jMGlNQWJ2
LVZGbEVvemp1ZXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMu
dHcvcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcE
JAaNwIJQMA0GCSqGSIb3DQEBCwUAA4IBAQDqHve+ZD6VP67zghIlPhUDmNdvXlnB
bSch6ZJN4SPYD26wroYIgSOOuJHUsZgQcqBdAbtY1KYPDeuOJvPhO0QLLHgtBWSJ
T6tNx1T1/EUSdiltzc815WJ0Lxw69me10aTRGDq99xMsi2jPQwzCnWqCFdnhAHrg
8BUJSDuluo1vbjVI+jqZez6LstP9KPMnXjJBorE2s5Sn3A5+75sJ5n/mx8A52076
m2h1YxnROKW9sKESnS+dKk1tGgGTVU9wH8tMI1o/Xz1dbQeYD2ed/UtyDAfBxpIt
lF6B2x+k1ab5APPDOFAi96ontu5YxYoyP3Sw58LHLqOj37HDS9/CBepe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org