Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/qsC79c7XMS5dXmedek5sAYzW7hU.roa
File: qsC79c7XMS5dXmedek5sAYzW7hU.roa (raw, json)
Hash identifier: 9DSZmd2ku/q4VvJO6yDsUo2WdR4eXXuL7YsM360rILk=
Subject key identifier: AA:C0:BB:F5:CE:D7:31:2E:5D:5E:67:9D:7A:4E:6C:01:8C:D6:EE:15
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 012A
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/qsC79c7XMS5dXmedek5sAYzW7hU.roa
Signing time: Mon 21 Dec 2020 09:58:20 +0000
ROA not before: Mon 21 Dec 2020 09:58:20 +0000
ROA not after: Tue 05 Oct 2021 04:04:36 +0000
asID: 60614
IP address blocks: 2406:8dc0:2200::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Dec 21 09:58:20 2020 GMT
Not After : Oct 5 04:04:36 2021 GMT
Subject: CN=AAC0BBF5CED7312E5D5E679D7A4E6C018CD6EE15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:cd:b4:2d:ed:3c:57:9c:63:af:ef:cb:c2:
e7:c7:a1:44:b2:b5:a1:c9:5c:a8:be:09:c2:2c:b8:
eb:d3:46:c3:66:c8:36:fc:c4:43:6d:80:ee:9e:a5:
6e:65:9f:23:de:6b:54:4d:af:29:22:dc:7e:d0:ca:
24:11:f0:5a:ec:86:7d:8d:0c:7e:55:a9:4a:41:3f:
71:6d:45:ed:4b:46:62:bd:ae:59:e3:bd:ee:91:ce:
b5:07:1a:23:86:13:19:35:9b:ac:ea:b1:3f:75:52:
15:ee:f0:9e:cb:52:80:75:c8:31:92:52:df:e4:7d:
3e:ec:19:d2:11:9e:8e:bb:03:a2:e3:29:09:30:f7:
ff:df:0e:7c:79:d3:76:a5:c1:d7:e9:58:0f:65:5b:
ba:c2:db:9e:41:68:7a:62:f5:a9:de:95:45:2c:01:
ef:36:4e:1b:be:c7:e8:c6:84:53:79:5e:e5:0e:ce:
5b:72:2b:67:09:3c:70:7f:40:c5:17:02:11:a4:a6:
03:cc:e9:86:32:03:e5:fc:0b:94:76:4f:f5:77:73:
eb:d1:03:8e:d4:3f:0a:29:20:a5:21:94:ea:68:4f:
56:6d:48:ac:8e:ed:03:ce:13:72:c7:7b:e4:53:e4:
73:20:00:43:db:69:ec:ea:32:4d:f2:48:d4:8a:0a:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C0:BB:F5:CE:D7:31:2E:5D:5E:67:9D:7A:4E:6C:01:8C:D6:EE:15
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/qsC79c7XMS5dXmedek5sAYzW7hU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:8dc0:2200::/40
Signature Algorithm: sha256WithRSAEncryption
d4:2d:90:a2:7c:d2:ce:0c:8a:dc:23:cd:95:f6:16:44:ff:9b:
e7:96:d0:dd:ac:c0:1b:9a:11:24:42:b2:b1:0c:42:8e:76:0f:
ca:8b:bc:b4:7b:55:0d:80:a9:03:d3:23:fc:e6:36:83:c4:d9:
4c:34:90:81:03:eb:71:73:91:a6:c0:2b:29:33:a0:b4:d7:7e:
8f:0c:ca:98:1e:6f:24:54:b7:6c:fa:a8:21:c6:93:0e:56:35:
11:b0:2b:76:d5:a6:79:50:e6:9f:d8:6f:00:59:4d:15:3a:34:
13:63:e1:d6:ff:a4:70:ad:e4:93:22:b3:2d:b3:5b:c6:0c:9f:
20:9b:0c:50:19:ed:d4:99:63:62:7d:f0:28:f5:ac:d4:d5:df:
45:37:d7:98:5a:73:4f:f1:4f:b9:f2:3c:dd:32:5b:e9:c7:22:
24:83:62:6d:27:6d:f7:96:1f:0c:cb:26:99:a6:30:78:d6:1c:
0c:a1:0d:24:f6:68:56:79:22:c6:17:50:57:2f:36:eb:c1:17:
80:00:0a:5f:bf:c7:a5:07:a6:24:cc:55:f4:26:08:16:6d:71:
6c:3e:5f:f7:c2:9d:d1:8a:64:0a:ac:47:06:5a:b4:79:cf:c4:
63:fb:d9:c0:5f:92:aa:9a:98:f0:78:e5:21:0b:d1:b9:96:8e:
25:33:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org