Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/Mz6gT3jhGCnc0B4RkeyYYXFmLxU.roa
File: Mz6gT3jhGCnc0B4RkeyYYXFmLxU.roa (raw, json)
Hash identifier: xZ+lJNCOe/1psAEuGgKPQlT3PSUJH2xO9vDwjElBeKA=
Subject key identifier: 33:3E:A0:4F:78:E1:18:29:DC:D0:1E:11:91:EC:98:61:71:66:2F:15
Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Certificate serial: 0966
Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/Mz6gT3jhGCnc0B4RkeyYYXFmLxU.roa
Signing time: Wed 29 Sep 2021 02:38:15 +0000
ROA not before: Wed 29 Sep 2021 02:38:15 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 20473
IP address blocks: 2403:a2c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2406 (0x966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Validity
Not Before: Sep 29 02:38:15 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=333EA04F78E11829DCD01E1191EC986171662F15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:b0:32:1c:dd:84:58:75:e1:d5:a6:e5:2c:
c0:32:06:27:67:b0:35:4e:c9:95:cf:f0:0e:70:d4:
89:2f:28:f1:d7:9e:f4:82:f7:5c:7a:aa:66:4b:22:
3e:15:bd:ad:65:ca:9c:c3:bd:93:de:d1:e7:6d:c8:
c4:c3:c1:33:6a:25:fb:03:75:c5:f0:99:96:3b:27:
24:3b:8d:9f:af:ad:a5:83:8f:aa:be:dd:6e:88:f7:
0c:9d:6e:42:7e:f8:ae:f2:60:92:5e:09:23:82:84:
db:1e:ac:82:a5:c5:33:49:61:cb:cf:89:0e:fd:59:
2f:a6:b6:cb:2e:f5:d8:e0:79:cc:fd:49:c2:8b:c8:
10:6c:38:9c:7e:80:4f:bb:ce:dd:7c:e4:c1:da:e5:
60:00:1c:2d:c3:f6:ef:b9:83:44:11:64:5f:7b:c4:
3a:c5:d8:2d:96:34:8e:00:02:b7:22:f2:c1:3b:1c:
aa:42:a8:61:4f:3f:9d:bd:f4:fb:b1:6c:23:a0:cb:
f4:0e:9d:3d:44:c1:9a:33:2e:af:49:af:ff:96:a7:
27:4c:ca:f1:c6:62:aa:ba:b9:78:16:dc:29:27:90:
63:30:12:03:7c:66:4a:34:a7:88:5b:65:a1:43:b6:
6e:51:67:80:75:72:f6:66:a2:08:36:51:d3:5c:76:
70:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3E:A0:4F:78:E1:18:29:DC:D0:1E:11:91:EC:98:61:71:66:2F:15
X509v3 Authority Key Identifier:
keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/Mz6gT3jhGCnc0B4RkeyYYXFmLxU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:a2c0::/32
Signature Algorithm: sha256WithRSAEncryption
4a:77:8d:2d:f9:e1:53:9f:e4:b8:51:b3:73:a1:43:60:f8:af:
19:f3:d9:62:f3:30:4e:66:af:0c:87:f9:cd:04:8a:2b:94:f1:
e0:c3:3f:2a:40:3a:83:47:2a:2c:72:ab:e7:db:8b:57:33:47:
94:8d:a7:e5:a5:a4:56:4d:e0:e0:c3:97:e8:b8:c6:40:b2:c3:
53:e0:d1:bc:2d:47:7e:15:dd:fa:68:be:ff:ba:49:cc:c2:41:
cc:d8:24:f8:b8:4e:54:8a:09:32:a0:22:79:71:66:5e:c0:57:
37:52:ea:80:52:8f:ff:dd:67:b3:4c:c7:f1:19:50:5f:64:dc:
ab:fc:c0:c2:5b:5d:00:4b:35:c3:fb:ae:57:20:ab:b6:42:60:
a2:7b:cb:13:40:01:d7:1d:e7:03:3d:0b:b7:78:f0:2f:44:9e:
5e:75:2c:94:f0:d8:c6:7b:11:07:75:4d:3b:33:f2:ec:2c:2c:
c5:36:3c:0a:42:aa:c3:8a:2a:51:56:57:f1:11:45:ca:6e:d6:
4f:38:b8:2b:f3:42:7c:bf:d1:17:6f:1a:c5:98:2e:e4:c8:a3:
42:15:21:76:b5:66:42:c1:4c:5b:87:9b:b3:e4:9a:2a:76:37:
4c:0d:3b:01:c8:c3:b4:a1:c4:30:30:7d:09:fd:c9:7c:36:0c:
1d:c8:6a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org