Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DNSNET/Mgf4QFqK67VHSJCGqc9J0nYl7Ls.roa
File: Mgf4QFqK67VHSJCGqc9J0nYl7Ls.roa (raw, json)
Hash identifier: WFp6W8XbpVrjhGQU3EV5tQo38W38Jv1/k3w2GkzckTw=
Subject key identifier: 32:07:F8:40:5A:8A:EB:B5:47:48:90:86:A9:CF:49:D2:76:25:EC:BB
Certificate issuer: /CN=277895E64BE41B7182664E1345CD57E5D36A1AF2
Certificate serial: 0C
Authority key identifier: 27:78:95:E6:4B:E4:1B:71:82:66:4E:13:45:CD:57:E5:D3:6A:1A:F2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/J3iV5kvkG3GCZk4TRc1X5dNqGvI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/Mgf4QFqK67VHSJCGqc9J0nYl7Ls.roa
Signing time: Tue 16 May 2023 00:46:29 +0000
ROA not before: Tue 16 May 2023 00:46:29 +0000
ROA not after: Tue 07 Nov 2023 11:29:29 +0000
asID: 38842
IP address blocks: 2406:f340::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277895E64BE41B7182664E1345CD57E5D36A1AF2
Validity
Not Before: May 16 00:46:29 2023 GMT
Not After : Nov 7 11:29:29 2023 GMT
Subject: CN=3207F8405A8AEBB547489086A9CF49D27625ECBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:28:43:ca:e1:2a:1e:db:06:20:09:f4:d1:bd:
20:a9:ea:92:04:71:8d:17:5e:2e:73:9c:8b:8f:ba:
51:45:f9:a1:a4:27:3d:33:8a:03:25:7a:c0:2e:62:
c0:ce:1f:2e:3d:a0:0a:8d:df:73:ce:8a:46:2e:c4:
95:7f:29:04:e5:27:73:b8:b3:df:26:04:90:a1:b9:
38:b7:3f:45:41:a1:c1:20:a0:ad:14:b7:7d:28:37:
7d:35:b7:92:02:7f:14:e6:d7:44:3c:9e:8f:6b:50:
62:a8:e2:a3:85:d0:a1:c2:94:85:f7:77:81:d6:70:
18:44:09:b8:d3:ca:21:50:b4:f4:d4:0b:6b:e2:46:
16:30:e1:b7:2a:76:df:c7:9f:63:cf:7e:7c:fe:39:
fb:b9:97:df:cf:0c:ca:f5:ec:19:74:61:60:a2:e5:
3c:f0:6a:e7:03:f3:d9:7a:18:38:6d:8b:09:ac:8c:
d6:26:50:f6:1c:b5:d6:f4:90:41:0e:a1:ff:8a:4e:
94:df:7a:00:76:8b:cf:2e:2a:1a:35:8a:05:16:7b:
09:34:c6:15:a8:e2:6c:bb:63:b9:c7:d7:da:00:ec:
b0:c2:1b:0c:ba:fe:d4:ed:8e:50:c8:43:f3:c6:b3:
98:a4:fb:5c:42:04:e4:d9:1a:d8:cf:7b:a9:f2:5a:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:07:F8:40:5A:8A:EB:B5:47:48:90:86:A9:CF:49:D2:76:25:EC:BB
X509v3 Authority Key Identifier:
keyid:27:78:95:E6:4B:E4:1B:71:82:66:4E:13:45:CD:57:E5:D3:6A:1A:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/J3iV5kvkG3GCZk4TRc1X5dNqGvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/J3iV5kvkG3GCZk4TRc1X5dNqGvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/Mgf4QFqK67VHSJCGqc9J0nYl7Ls.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:f340::/32
Signature Algorithm: sha256WithRSAEncryption
63:e8:d6:3a:aa:fb:9e:a8:61:73:12:fb:4d:2e:fa:a9:4f:2b:
70:3a:93:87:ef:72:70:bc:7d:d7:a3:a4:3c:db:a3:ca:fc:c6:
ec:92:c5:84:6b:53:e1:f8:27:e9:61:a0:a4:34:4b:1d:4d:6b:
44:47:a7:bf:b6:bc:8a:21:ea:80:c7:f5:51:b4:d3:bf:ff:72:
6f:58:be:22:4c:5c:1d:60:10:7f:7d:ac:d0:0f:4b:56:94:6f:
0f:e7:6a:da:c7:73:b6:73:b0:89:70:b4:b3:1f:35:32:96:98:
96:53:ef:db:4e:a4:1d:2e:c8:38:f2:50:6a:1e:41:ab:57:f4:
92:07:ad:f0:b2:7b:bc:4e:21:68:48:87:b9:0a:a4:2c:fc:87:
34:b7:34:33:e9:0f:90:57:d1:3d:4f:43:ed:63:5e:a5:de:7e:
53:d1:1c:86:45:59:1f:7a:0c:ed:43:70:ae:1e:4b:50:3f:b4:
5b:b7:ba:4a:49:2e:ae:c6:10:8e:30:7a:e2:52:12:4c:a8:f6:
3b:f0:13:d1:4f:ff:9f:24:f9:d2:89:9e:e8:46:ca:94:af:52:
ec:0b:5d:d9:e4:a1:1a:60:69:35:60:63:b6:6c:bb:73:1b:e9:
2f:ad:38:4c:49:0d:0f:59:ed:84:e4:fe:e6:b2:3a:66:e1:81:
39:d1:7c:ba
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIBDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzc4
OTVFNjRCRTQxQjcxODI2NjRFMTM0NUNENTdFNUQzNkExQUYyMB4XDTIzMDUxNjAw
NDYyOVoXDTIzMTEwNzExMjkyOVowMzExMC8GA1UEAxMoMzIwN0Y4NDA1QThBRUJC
NTQ3NDg5MDg2QTlDRjQ5RDI3NjI1RUNCQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM8oQ8rhKh7bBiAJ9NG9IKnqkgRxjRdeLnOci4+6UUX5oaQnPTOK
AyV6wC5iwM4fLj2gCo3fc86KRi7ElX8pBOUnc7iz3yYEkKG5OLc/RUGhwSCgrRS3
fSg3fTW3kgJ/FObXRDyej2tQYqjio4XQocKUhfd3gdZwGEQJuNPKIVC09NQLa+JG
FjDhtyp238efY89+fP45+7mX388MyvXsGXRhYKLlPPBq5wPz2XoYOG2LCayM1iZQ
9hy11vSQQQ6h/4pOlN96AHaLzy4qGjWKBRZ7CTTGFajibLtjucfX2gDssMIbDLr+
1O2OUMhD88azmKT7XEIE5Nka2M97qfJaRpsCAwEAAaOCAe8wggHrMB0GA1UdDgQW
BBQyB/hAWorrtUdIkIapz0nSdiXsuzAfBgNVHSMEGDAWgBQneJXmS+QbcYJmThNF
zVfl02oa8jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ETlNORVQv
SjNpVjVrdmtHM0dDWms0VFJjMVg1ZE5xR3ZJLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9KM2lWNWt2a0czR0NaazRUUmMxWDVkTnFHdkkuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ETlNORVQvTWdmNFFGcUs2N1ZIU0pDR3Fj
OUowbllsN0xzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3
L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQG
80AwDQYJKoZIhvcNAQELBQADggEBAGPo1jqq+56oYXMS+00u+qlPK3A6k4fvcnC8
fdejpDzbo8r8xuySxYRrU+H4J+lhoKQ0Sx1Na0RHp7+2vIoh6oDH9VG007//cm9Y
viJMXB1gEH99rNAPS1aUbw/natrHc7ZzsIlwtLMfNTKWmJZT79tOpB0uyDjyUGoe
QatX9JIHrfCye7xOIWhIh7kKpCz8hzS3NDPpD5BX0T1PQ+1jXqXeflPRHIZFWR96
DO1DcK4eS1A/tFu3ukpJLq7GEI4weuJSEkyo9jvwE9FP/58k+dKJnuhGypSvUuwL
XdnkoRpgaTVgY7Zsu3Mb6S+tOExJDQ9Z7YTk/uayOmbhgTnRfLo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org