Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/jXHKRTOiwj0v409akEYBwwp7ZgA.roa
File: jXHKRTOiwj0v409akEYBwwp7ZgA.roa (raw, json)
Hash identifier: 4IPty0LPbrXVIcDuUfFHldFJCy4Ac71I+DwnwZPtJc8=
Subject key identifier: 8D:71:CA:45:33:A2:C2:3D:2F:E3:4F:5A:90:46:01:C3:0A:7B:66:00
Certificate issuer: /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial: 0E93
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/jXHKRTOiwj0v409akEYBwwp7ZgA.roa
Signing time: Mon 27 Dec 2021 03:13:01 +0000
ROA not before: Mon 27 Dec 2021 03:13:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 48024
IP address blocks: 2404:2a40::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3731 (0xe93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Validity
Not Before: Dec 27 03:13:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8D71CA4533A2C23D2FE34F5A904601C30A7B6600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3c:dd:3b:9c:2c:a3:84:95:51:ed:21:a8:8a:
07:be:7b:6d:30:8f:db:5e:88:3a:98:33:a9:fe:e6:
a0:9d:6f:18:37:78:14:b5:53:d8:d1:ad:45:e4:7d:
5c:e1:d2:38:ca:07:8f:74:b0:54:42:e2:34:9c:c1:
c9:de:60:43:1c:d0:77:60:b8:68:b8:3b:4e:be:54:
4e:71:28:90:01:a4:a7:9e:ff:85:01:0a:04:7a:88:
95:ba:c8:53:6f:3f:a7:85:94:1b:f4:69:24:7d:ae:
8f:3e:6d:61:f4:ed:99:dc:ad:70:66:5a:f4:f2:2c:
af:de:e7:92:91:3e:b9:d0:a0:d7:0f:30:b0:e7:dd:
ed:b8:2d:e5:b0:d6:da:13:ca:47:b2:9c:ff:47:ef:
26:00:81:78:d2:1a:4b:7f:7f:b6:7f:02:aa:15:9a:
b2:7c:44:c3:4c:60:aa:c9:dd:6a:6d:54:95:04:e2:
f6:d3:91:d6:b0:37:6f:4b:14:70:c4:ac:61:bf:ba:
65:09:6f:b9:98:e4:0a:3e:5d:95:84:2a:35:ca:d0:
6a:ca:de:04:5f:39:7d:b4:af:1c:b4:a7:0c:a0:e6:
8b:b0:35:b6:17:c5:63:7c:90:b8:fe:f3:d0:da:9d:
1e:10:a1:81:29:55:ee:7d:59:f9:5f:5b:7d:74:92:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:71:CA:45:33:A2:C2:3D:2F:E3:4F:5A:90:46:01:C3:0A:7B:66:00
X509v3 Authority Key Identifier:
keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/jXHKRTOiwj0v409akEYBwwp7ZgA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:2a40::/32
Signature Algorithm: sha256WithRSAEncryption
73:95:6c:75:50:d0:24:50:8b:25:29:df:aa:f8:4a:58:9e:22:
53:f3:d0:5d:b3:d0:c6:d8:9b:b1:5d:44:f1:1a:28:97:f1:f7:
aa:6f:42:13:86:d6:30:77:2c:5c:2a:ca:35:bf:76:a3:1b:49:
d6:16:ac:77:d9:ef:1b:fe:6f:4e:be:36:db:5f:be:5d:06:c5:
98:63:0a:2f:21:ec:83:8a:20:b2:be:12:0f:88:f3:32:ca:73:
ec:58:c0:c2:50:f1:b3:36:94:27:2a:c7:01:dc:26:40:cd:49:
86:c2:27:c5:49:19:15:b8:9f:51:46:c8:2e:d8:00:63:42:99:
bb:41:26:15:80:4c:ee:00:58:50:49:3b:f6:c4:0a:bd:ec:f7:
30:2e:87:51:12:56:40:ae:26:4c:ef:65:63:a7:bb:a0:4a:9e:
17:4a:f6:85:c3:a1:24:31:89:2b:89:aa:fe:89:94:ca:52:8c:
8a:aa:2c:0d:11:c6:fe:ce:74:77:7e:71:17:e2:e1:d7:1e:c5:
43:68:4b:41:1c:eb:ad:bd:35:15:52:b7:13:94:c2:23:3f:78:
1c:13:c9:26:96:c7:9d:78:11:ce:b3:fd:1f:0b:68:92:45:ce:
85:df:08:50:31:1c:b8:ae:a8:f8:16:9b:8a:cc:d8:b7:d6:2c:
44:f2:02:7c
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICDpMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEU3
MjFDNUREMzQ1OURGRjg1MzQ4RjFCMzlEREE5REQ1MDU4NjIzNDAeFw0yMTEyMjcw
MzEzMDFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDhENzFDQTQ1MzNBMkMy
M0QyRkUzNEY1QTkwNDYwMUMzMEE3QjY2MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDePN07nCyjhJVR7SGoige+e20wj9teiDqYM6n+5qCdbxg3eBS1
U9jRrUXkfVzh0jjKB490sFRC4jScwcneYEMc0HdguGi4O06+VE5xKJABpKee/4UB
CgR6iJW6yFNvP6eFlBv0aSR9ro8+bWH07ZncrXBmWvTyLK/e55KRPrnQoNcPMLDn
3e24LeWw1toTykeynP9H7yYAgXjSGkt/f7Z/AqoVmrJ8RMNMYKrJ3WptVJUE4vbT
kdawN29LFHDErGG/umUJb7mY5Ao+XZWEKjXK0GrK3gRfOX20rxy0pwyg5ouwNbYX
xWN8kLj+89DanR4QoYEpVe59WflfW310kszRAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUjXHKRTOiwj0v409akEYBwwp7ZgAwHwYDVR0jBBgwFoAUTnIcXdNFnf+FNI8b
Od2p3VBYYjQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ
TkcvVG5JY1hkTkZuZi1GTkk4Yk9kMnAzVkJZWWpRLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9UbkljWGRORm5mLUZOSThiT2QycDNWQllZalEuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSU5HSklORy9qWEhLUlRPaXdqMHY0
MDlha0VZQnd3cDdaZ0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAJAQqQDANBgkqhkiG9w0BAQsFAAOCAQEAc5VsdVDQJFCLJSnfqvhKWJ4iU/PQ
XbPQxtibsV1E8Rool/H3qm9CE4bWMHcsXCrKNb92oxtJ1hasd9nvG/5vTr4221++
XQbFmGMKLyHsg4ogsr4SD4jzMspz7FjAwlDxszaUJyrHAdwmQM1JhsInxUkZFbif
UUbILtgAY0KZu0EmFYBM7gBYUEk79sQKvez3MC6HURJWQK4mTO9lY6e7oEqeF0r2
hcOhJDGJK4mq/omUylKMiqosDRHG/s50d35xF+Lh1x7FQ2hLQRzrrb01FVK3E5TC
Iz94HBPJJpbHnXgRzrP9HwtokkXOhd8IUDEcuK6o+BabiszYt9YsRPICfA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org