Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKSMF/g2jgqymBnQCfAicIl4v2Z1aE7eQ.roa
File: g2jgqymBnQCfAicIl4v2Z1aE7eQ.roa (raw, json)
Hash identifier: pXwlR+uEcpmbNY9107OyYnsaGJvz6Ypetac6+zFMrSo=
Subject key identifier: 83:68:E0:AB:29:81:9D:00:9F:02:27:08:97:8B:F6:67:56:84:ED:E4
Certificate issuer: /CN=FBCFA1880AC86CE4FB99F974E9953F3597DCDE0A
Certificate serial: 0A5E
Authority key identifier: FB:CF:A1:88:0A:C8:6C:E4:FB:99:F9:74:E9:95:3F:35:97:DC:DE:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/g2jgqymBnQCfAicIl4v2Z1aE7eQ.roa
Signing time: Wed 29 Sep 2021 02:37:03 +0000
ROA not before: Wed 29 Sep 2021 02:37:03 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131645
IP address blocks: 2405:29c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2654 (0xa5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBCFA1880AC86CE4FB99F974E9953F3597DCDE0A
Validity
Not Before: Sep 29 02:37:03 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8368E0AB29819D009F022708978BF6675684EDE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:73:d0:ff:30:7b:e5:a3:08:8a:7c:17:cd:
f4:bc:f8:08:f3:36:0b:c7:bb:da:c7:4a:2e:7b:11:
db:f4:4f:ad:8a:a3:00:fe:b9:8d:fa:62:57:d7:f9:
b3:5d:87:61:b5:7f:f2:4a:39:e8:23:b2:1b:39:da:
9f:69:77:02:73:26:5e:1b:a0:f5:cf:e8:5a:16:4d:
f2:c1:d0:de:dd:a4:ff:1a:fe:7e:fa:64:32:df:dc:
4e:16:e1:4e:42:cd:80:fe:52:00:e7:f9:8d:74:c6:
b2:90:d4:d9:ba:75:a6:49:b5:f3:0a:a2:16:a1:61:
36:12:db:75:58:a4:c1:a6:14:32:1a:68:ea:3d:46:
28:a3:8f:a6:75:10:10:a1:aa:d7:81:f9:9b:15:a1:
0b:57:8e:68:49:a3:12:9b:63:cc:cf:6c:46:05:4c:
45:b0:c3:83:5f:8d:ec:52:6d:c9:ed:ea:25:17:23:
8a:20:92:d8:ea:70:b4:9e:55:09:55:49:ea:58:45:
83:e7:75:21:16:b4:24:79:65:d5:76:5e:cf:e8:2b:
26:30:63:f5:2e:8e:35:ab:85:41:fd:cb:99:ed:e1:
8f:30:87:37:5e:a2:77:e1:a1:39:ee:8a:2f:cd:25:
fe:44:0f:7b:26:1a:ac:c6:bc:94:7f:e8:5d:f9:81:
47:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:68:E0:AB:29:81:9D:00:9F:02:27:08:97:8B:F6:67:56:84:ED:E4
X509v3 Authority Key Identifier:
keyid:FB:CF:A1:88:0A:C8:6C:E4:FB:99:F9:74:E9:95:3F:35:97:DC:DE:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/g2jgqymBnQCfAicIl4v2Z1aE7eQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:29c0::/32
Signature Algorithm: sha256WithRSAEncryption
5d:ae:7d:d4:67:5b:f8:9c:e4:86:4b:5f:ef:be:62:3e:ac:3e:
3e:40:a1:a2:a9:12:c4:49:4a:80:52:1a:7c:96:18:87:bb:b7:
1c:d8:31:b7:48:d4:50:08:ca:5a:1d:ca:38:d5:89:8f:96:3b:
ad:0a:fc:a7:e4:f7:eb:ca:53:4c:8c:14:98:8d:36:f5:8b:d0:
a6:98:b3:77:b5:5b:c1:ef:cc:13:12:8e:1b:4b:2a:ec:b3:7f:
8a:5e:a4:7e:7d:a8:e7:33:7a:ca:f2:0b:e7:49:93:a3:99:87:
8a:e0:ef:e5:06:28:90:f7:9f:ec:f9:7e:b6:31:54:65:0f:d7:
41:9f:0d:ec:7f:b9:12:02:93:86:6c:5a:bd:0d:41:43:72:b2:
1e:84:a7:73:28:fd:13:4d:8f:74:bc:25:b5:3e:be:bf:a9:f9:
79:c4:35:25:de:f4:8b:33:30:b0:5b:df:79:36:c1:31:94:f3:
ca:d6:ce:cf:62:91:01:93:d1:94:81:a3:5c:9d:21:e1:37:85:
cb:38:8a:c8:b3:fc:8c:90:fd:df:e5:31:2b:5d:08:29:06:48:
e4:62:0e:22:c9:6c:5c:12:26:ee:a7:12:ea:88:b4:47:be:92:
73:b7:d3:a6:dd:26:28:2d:35:e5:76:48:e9:7f:83:4b:92:63:
f1:d2:10:e4
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICCl4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJD
RkExODgwQUM4NkNFNEZCOTlGOTc0RTk5NTNGMzU5N0RDREUwQTAeFw0yMTA5Mjkw
MjM3MDNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDgzNjhFMEFCMjk4MTlE
MDA5RjAyMjcwODk3OEJGNjY3NTY4NEVERTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLdXPQ/zB75aMIinwXzfS8+AjzNgvHu9rHSi57Edv0T62KowD+
uY36YlfX+bNdh2G1f/JKOegjshs52p9pdwJzJl4boPXP6FoWTfLB0N7dpP8a/n76
ZDLf3E4W4U5CzYD+UgDn+Y10xrKQ1Nm6daZJtfMKohahYTYS23VYpMGmFDIaaOo9
Riijj6Z1EBChqteB+ZsVoQtXjmhJoxKbY8zPbEYFTEWww4NfjexSbcnt6iUXI4og
ktjqcLSeVQlVSepYRYPndSEWtCR5ZdV2Xs/oKyYwY/UujjWrhUH9y5nt4Y8whzde
onfhoTnuii/NJf5ED3smGqzGvJR/6F35gUfPAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUg2jgqymBnQCfAicIl4v2Z1aE7eQwHwYDVR0jBBgwFoAU+8+hiArIbOT7mfl0
6ZU/NZfc3gowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tTTUYv
LTgtaGlBckliT1Q3bWZsMDZaVV9OWmZjM2dvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8tOC1oaUFySWJPVDdtZmwwNlpVX05aZmMzZ28uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LS1NNRi9nMmpncXltQm5RQ2ZBaWNJbDR2
MloxYUU3ZVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAUp
wDANBgkqhkiG9w0BAQsFAAOCAQEAXa591Gdb+Jzkhktf775iPqw+PkChoqkSxElK
gFIafJYYh7u3HNgxt0jUUAjKWh3KONWJj5Y7rQr8p+T368pTTIwUmI029YvQppiz
d7Vbwe/MExKOG0sq7LN/il6kfn2o5zN6yvIL50mTo5mHiuDv5QYokPef7Pl+tjFU
ZQ/XQZ8N7H+5EgKThmxavQ1BQ3KyHoSncyj9E02PdLwltT6+v6n5ecQ1Jd70izMw
sFvfeTbBMZTzytbOz2KRAZPRlIGjXJ0h4TeFyziKyLP8jJD93+UxK10IKQZI5GIO
IslsXBIm7qcS6oi0R76Sc7fTpt0mKC015XZI6X+DS5Jj8dIQ5A==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:07 2025 by rpki-client