Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/wpSeWLZ1BcylN0CuDdmM36EgUUc.roa
File: wpSeWLZ1BcylN0CuDdmM36EgUUc.roa (raw, json)
Hash identifier: u29nWYbJGobxev67rVW7XuVh7kQ33QyE06VwzEn5gQM=
Subject key identifier: C2:94:9E:58:B6:75:05:CC:A5:37:40:AE:0D:D9:8C:DF:A1:20:51:47
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 0109
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/wpSeWLZ1BcylN0CuDdmM36EgUUc.roa
Signing time: Sat 28 Nov 2020 06:14:22 +0000
ROA not before: Sat 28 Nov 2020 06:14:22 +0000
ROA not after: Tue 05 Oct 2021 04:04:36 +0000
asID: 212357
IP address blocks: 2406:8dc0:2001::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Nov 28 06:14:22 2020 GMT
Not After : Oct 5 04:04:36 2021 GMT
Subject: CN=C2949E58B67505CCA53740AE0DD98CDFA1205147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:f1:22:3d:f5:c4:5b:c9:b5:0c:64:d8:0c:
b0:f6:1f:45:55:09:3c:c0:63:14:cb:e6:8a:6a:36:
45:d0:21:0c:cd:ac:af:8e:43:0a:20:77:a1:b8:a6:
4e:b8:e2:aa:b4:6f:a1:33:d5:09:76:40:cc:8d:fc:
2c:b5:af:e7:2b:6e:50:b4:7f:95:3a:6a:31:7f:76:
57:b8:c8:ba:0f:60:59:59:78:6e:37:47:40:5a:2f:
6a:3d:e4:ab:ab:4a:45:d9:c2:62:8c:98:20:1d:41:
cb:61:06:c7:31:72:68:a9:e3:01:2c:2a:cf:2c:93:
ea:48:6a:fb:8f:e0:b0:a8:d6:14:30:b1:f2:fe:0d:
d3:78:f0:3a:f2:e8:a7:4a:bb:1d:72:51:66:42:0d:
04:08:c6:1e:35:d7:84:81:32:fc:95:d4:32:01:43:
47:3b:ab:67:99:64:26:c3:3f:96:1a:4c:93:74:7a:
82:b7:aa:06:4e:b4:53:c5:03:cb:fa:04:f2:ca:e5:
46:72:74:4d:ec:4d:96:66:b7:86:50:ec:45:dd:34:
79:23:57:69:22:a2:90:fc:ad:0b:7e:7e:d7:d9:54:
a6:39:a3:43:58:65:fe:c8:f8:7c:e9:33:26:20:5f:
e3:d1:b9:7e:d3:ad:81:5c:79:46:b1:78:b7:8c:d9:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:94:9E:58:B6:75:05:CC:A5:37:40:AE:0D:D9:8C:DF:A1:20:51:47
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/wpSeWLZ1BcylN0CuDdmM36EgUUc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:8dc0:2001::/48
Signature Algorithm: sha256WithRSAEncryption
ab:a7:aa:70:11:f3:5e:6b:31:26:ff:e1:c3:4e:fc:30:94:bc:
23:3e:2b:c2:85:08:25:ac:12:ce:54:a5:4a:02:19:5f:43:35:
85:ed:03:a9:b2:42:bb:f3:00:9a:53:94:8e:cd:0b:ed:41:2e:
86:01:8f:31:e9:e6:86:3e:d7:8a:5c:ee:c5:67:20:a1:95:11:
65:7e:d8:83:19:f7:74:89:fe:3a:24:11:f8:53:3c:6c:12:e4:
ca:8b:f2:bb:7d:41:bf:e5:e1:56:f4:52:78:77:32:68:a0:83:
b3:1d:5c:1c:da:ca:90:73:79:2f:3c:42:9d:f6:50:c1:df:66:
ff:86:28:69:e5:86:bf:6a:d0:9d:48:de:48:b0:3a:89:93:2d:
83:cb:fc:b2:33:56:49:fb:c2:5f:1b:bf:e8:05:1e:17:e3:d2:
39:f5:14:f1:2a:a0:66:1d:43:46:d8:9d:98:c8:0e:86:40:36:
5e:66:0a:56:c2:3c:5a:7f:1e:f9:e8:61:ed:59:af:40:82:c4:
12:4f:94:32:36:f4:a4:86:58:37:0e:52:2c:0c:c0:f2:c2:84:
62:44:48:06:d8:31:5f:97:5f:7b:36:9d:95:bf:f3:62:02:df:
a8:75:90:77:a9:6c:e1:83:62:23:fd:4c:6b:17:24:72:79:40:
8d:5a:11:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org