Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/T5jrAd5XaDRtV3-DVJZlWpKesbE.roa
File: T5jrAd5XaDRtV3-DVJZlWpKesbE.roa (raw, json)
Hash identifier: sQCtO+AcIirvSB+F0I+DsOU4E1jRSs+JHs5iQCT2dSk=
Subject key identifier: 4F:98:EB:01:DE:57:68:34:6D:57:7F:83:54:96:65:5A:92:9E:B1:B1
Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Certificate serial: 077E
Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/T5jrAd5XaDRtV3-DVJZlWpKesbE.roa
Signing time: Tue 29 Sep 2020 10:02:54 +0000
ROA not before: Tue 29 Sep 2020 10:02:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 134823
IP address blocks: 2403:a2c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1918 (0x77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Validity
Not Before: Sep 29 10:02:54 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4F98EB01DE5768346D577F835496655A929EB1B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:73:eb:dc:4c:ca:04:8a:6b:73:5e:eb:6d:
cc:05:50:6f:c1:72:18:f4:b2:ae:fd:cd:21:9f:c8:
84:a7:d4:a0:16:f1:a4:3c:6d:99:e6:e9:a3:47:64:
fb:0f:37:6c:06:99:64:59:73:1f:eb:27:3f:e0:6d:
4b:03:c5:0c:04:75:82:7e:66:fb:3b:44:8b:f9:3a:
fd:3b:63:f3:7e:aa:bb:73:77:9a:f9:dc:02:97:1b:
c4:1f:13:af:97:34:80:48:d8:71:21:fb:54:18:9b:
f0:96:7a:a6:77:47:17:91:cc:43:20:71:d5:c8:7d:
c9:6a:86:74:3a:69:bb:13:0a:61:63:8f:5e:8c:24:
26:49:dd:32:22:1c:89:74:18:f5:ed:c5:88:4a:3f:
b8:80:e4:51:f9:af:7a:61:be:55:c8:03:57:75:7b:
74:39:f8:65:7c:c3:9b:70:bc:bf:38:22:a3:55:0a:
3a:84:62:fc:3a:90:79:d7:21:48:5e:bb:e8:be:59:
89:e3:14:23:53:e5:5b:49:e8:16:44:ab:92:fd:c6:
d3:63:d9:4f:c7:fb:1e:93:24:d7:a8:2f:bf:ab:cd:
90:39:31:9f:81:c1:39:9e:fd:69:f1:fd:2e:fa:3b:
d8:84:9d:17:7c:74:44:78:7b:f7:c1:50:61:7d:a9:
c7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:98:EB:01:DE:57:68:34:6D:57:7F:83:54:96:65:5A:92:9E:B1:B1
X509v3 Authority Key Identifier:
keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/T5jrAd5XaDRtV3-DVJZlWpKesbE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:a2c0::/32
Signature Algorithm: sha256WithRSAEncryption
47:d5:a1:73:7f:a8:24:96:14:31:30:20:0d:f2:c6:a2:8d:be:
f3:6a:89:eb:da:04:c8:52:94:72:8a:c0:86:18:2f:78:ed:a4:
38:49:0e:ab:58:76:75:3a:3b:6e:1f:4f:36:dc:1e:95:88:c0:
47:b4:e7:aa:6f:2b:9f:4f:46:d8:7d:34:bb:70:03:cd:1f:55:
60:2b:06:73:89:ee:e7:b0:44:47:37:05:43:34:06:67:8b:d6:
c8:35:d5:6c:fc:db:59:30:f8:97:7a:1c:b2:06:3e:6c:a0:8b:
11:60:27:61:f1:34:94:56:e2:b4:91:49:86:9d:5c:53:af:80:
0d:78:59:75:bb:c5:9c:ad:23:7b:16:36:e6:a3:4e:07:fd:59:
45:c0:48:3c:26:bc:97:1f:7c:dc:5d:2b:b8:27:a5:30:e6:45:
e9:34:eb:4d:19:1e:52:f6:3e:ac:e0:f4:89:a5:5d:e1:88:e8:
ed:44:0e:8f:26:46:c1:c3:6a:7d:d5:13:c8:9b:0a:a0:27:b7:
15:87:3f:d9:86:c4:91:4e:91:ee:48:9f:f8:f7:4e:17:49:f9:
31:3f:a2:0d:fc:6b:88:26:eb:2d:3b:47:08:9b:63:ea:52:41:
ad:78:99:d7:09:3e:73:de:5f:0d:08:e2:7e:8a:41:ec:08:28:
f6:f4:77:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:50 2025 by rpki-client