Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/3Qpx8ZclgWjqP6W5Vrg_gcabkFA.roa
File: 3Qpx8ZclgWjqP6W5Vrg_gcabkFA.roa (raw, json)
Hash identifier: gvhkbYYIsCUz19v9DSWX7ZSCfa/wX3JqeS8FIBON8lw=
Subject key identifier: DD:0A:71:F1:97:25:81:68:EA:3F:A5:B9:56:B8:3F:81:C6:9B:90:50
Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial: 0D05
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/3Qpx8ZclgWjqP6W5Vrg_gcabkFA.roa
Signing time: Thu 15 Sep 2022 02:37:08 +0000
ROA not before: Thu 15 Sep 2022 02:37:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24168
IP address blocks: 2404:8cc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3333 (0xd05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Validity
Not Before: Sep 15 02:37:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DD0A71F197258168EA3FA5B956B83F81C69B9050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:f2:55:a1:c5:86:f5:d1:4a:5a:6f:fa:9b:
c1:67:9a:c9:75:1c:76:c9:3f:2d:d6:25:cd:c6:b1:
9a:f8:85:2a:15:f3:17:35:4b:f5:7f:c5:45:92:1a:
a6:b6:71:d4:f2:33:a2:7f:ac:27:3f:8b:b5:db:f3:
ed:4d:03:25:87:bb:f2:dc:af:cc:34:c9:01:cc:66:
be:2e:a3:60:7e:0b:7a:76:c8:dc:8c:88:4b:1f:9f:
a9:31:f8:07:b1:f9:33:11:db:b3:07:ef:ba:d9:5b:
9d:1c:ac:06:79:4e:d3:53:9e:57:96:01:8a:4a:db:
4b:e1:93:11:a4:d5:bd:88:9d:e6:ba:c1:64:c5:81:
b2:ba:65:a0:5a:6a:0f:0c:50:bb:ee:c9:8c:e6:32:
5f:ac:a7:99:30:49:f8:d7:2c:dc:fc:25:85:b1:ea:
40:d8:92:66:ed:7c:13:89:ad:7c:13:34:09:6d:90:
f7:75:a6:a4:27:4b:71:26:d7:2a:80:64:f9:70:ed:
94:b9:41:c2:bb:ec:0e:bc:5b:cc:e8:9b:c2:1b:f0:
dc:6b:20:d4:80:d0:4c:0d:c9:14:43:f8:aa:bb:7c:
fc:3a:72:ed:f5:b4:a2:0b:58:a1:48:fe:72:7c:a7:
bb:f6:ff:e6:2c:c9:8f:3c:df:71:e5:26:be:0d:13:
9f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0A:71:F1:97:25:81:68:EA:3F:A5:B9:56:B8:3F:81:C6:9B:90:50
X509v3 Authority Key Identifier:
keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/3Qpx8ZclgWjqP6W5Vrg_gcabkFA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:8cc0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:74:a1:bd:a2:85:3b:48:ea:cb:ed:d9:ad:a1:59:1e:9c:7c:
8e:77:e9:37:54:8c:2b:b1:1c:cc:9e:89:7d:dd:5b:e2:34:5d:
a0:71:24:17:3d:7e:f7:10:cc:fc:ea:dd:96:a8:2d:8b:f4:6c:
2c:d4:ab:ca:2d:2d:ce:c1:30:d0:e0:4c:8d:57:a9:4e:48:a1:
6e:a1:82:d3:e8:89:3d:d8:cc:c7:28:a6:1b:52:6c:a0:b3:42:
c8:69:33:b7:56:d5:9b:37:ac:ae:b1:96:bf:52:c3:45:37:98:
59:e0:87:22:9c:d0:b4:77:5a:f9:49:6b:d0:09:19:da:99:7e:
08:4a:6c:27:aa:cc:fb:a1:2d:75:38:2a:f4:16:14:00:2a:a2:
f9:04:fa:f1:74:ae:58:4d:9d:3c:4d:12:73:96:61:ad:b1:62:
85:4e:46:84:f9:3b:7f:90:69:a3:24:01:3a:f7:7d:5d:50:94:
3d:75:e1:78:90:1c:ec:77:46:d1:4f:77:cc:ec:13:a5:e1:4c:
3f:3b:b7:ef:a9:c6:6f:6f:d6:4f:ce:80:f3:2e:52:ff:9d:68:
18:d6:a5:94:b4:a5:37:f3:eb:11:13:80:85:3c:07:95:f6:42:
78:6f:17:3d:a7:e9:f4:1e:e0:ac:91:2f:1d:e4:ee:fd:37:b4:
c8:86:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org