Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/q_K4Dqy-wzvApsnep0y5EHlIW9g.roa
File: q_K4Dqy-wzvApsnep0y5EHlIW9g.roa (raw, json)
Hash identifier: L5UCNlIOQEfJDOs69IpDm5vpdQnKnGjGylmyWMvZnmc=
Subject key identifier: AB:F2:B8:0E:AC:BE:C3:3B:C0:A6:C9:DE:A7:4C:B9:10:79:48:5B:D8
Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Certificate serial: 0773
Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/q_K4Dqy-wzvApsnep0y5EHlIW9g.roa
Signing time: Tue 29 Sep 2020 10:00:52 +0000
ROA not before: Tue 29 Sep 2020 10:00:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18179
IP address blocks: 2404:db00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1907 (0x773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Validity
Not Before: Sep 29 10:00:52 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=ABF2B80EACBEC33BC0A6C9DEA74CB91079485BD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:91:65:a0:da:d6:04:8a:5b:58:8f:ce:77:
66:dc:f8:63:ca:a4:d2:a2:b1:6f:b7:d8:46:07:53:
81:69:ed:b8:7c:5e:0b:75:36:75:c6:2e:7c:1e:eb:
49:e1:3f:7d:a5:ca:7e:ee:17:bb:58:07:0b:24:fd:
30:60:80:d8:c3:c6:6b:51:66:98:27:c1:c3:fc:fc:
8e:17:70:44:77:cf:44:48:80:18:6f:b8:89:4b:83:
a5:90:58:28:0c:6d:d3:e4:3c:0f:36:8a:f7:b0:49:
8e:39:7e:1f:1e:bc:70:99:43:a1:0a:a3:92:05:f8:
47:d0:f1:76:41:63:d3:90:ea:e9:99:5d:7b:3f:7e:
09:e2:e5:38:58:0b:2a:d0:06:f7:fd:9d:5d:f7:8f:
61:37:a2:b4:8c:64:85:03:5d:96:0c:f9:75:73:bb:
34:11:36:d8:e4:55:9c:d5:51:60:a6:39:34:33:77:
32:5f:42:a7:74:d3:99:c5:78:36:21:a2:18:02:ae:
47:c2:90:30:02:e9:8a:22:f6:40:b9:96:a2:1e:db:
5d:8b:b4:6e:ad:74:39:06:d2:1f:87:36:35:35:8a:
55:a0:8d:f5:60:15:f3:1f:f6:c3:95:3c:6b:c8:43:
a9:e8:97:f7:00:4d:b5:a5:8b:fa:98:d8:7a:b0:65:
76:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F2:B8:0E:AC:BE:C3:3B:C0:A6:C9:DE:A7:4C:B9:10:79:48:5B:D8
X509v3 Authority Key Identifier:
keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/q_K4Dqy-wzvApsnep0y5EHlIW9g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:db00::/32
Signature Algorithm: sha256WithRSAEncryption
06:9c:5f:f8:d5:86:6c:1b:9d:f3:8c:32:a6:81:fc:b7:6c:78:
16:d0:e6:c2:64:1e:42:1b:7a:d1:d3:66:28:06:47:c1:85:76:
44:0f:06:1b:bd:42:db:5e:49:a4:c1:6d:57:79:85:50:03:d7:
41:b2:c7:19:ec:9d:b1:1e:a9:aa:60:6c:07:be:e2:be:eb:98:
c2:dc:75:d9:b1:cb:37:19:11:f1:3e:68:80:5a:e6:c2:51:41:
bb:02:79:66:7a:15:83:8b:21:6c:61:81:4f:c9:cd:e1:3f:7b:
64:b4:c4:82:75:f7:63:76:de:58:fa:17:06:04:d4:5b:33:00:
db:48:f0:f5:2f:03:22:50:13:6b:37:8a:b6:65:4c:c1:b5:47:
b4:96:88:de:67:d6:fe:77:ed:9a:01:2d:2f:70:9e:26:ce:13:
f6:a9:7a:6f:49:9a:85:20:bb:d7:97:6e:c9:79:71:cd:00:ba:
0e:4b:8f:38:0e:ed:f8:4e:b9:3a:11:bf:89:a1:cb:75:0e:03:
ae:80:2d:7c:31:e8:62:ea:78:06:a7:ed:8e:2a:c6:a0:15:36:
15:56:a3:26:25:df:c2:53:dd:90:7d:a8:80:30:b1:63:4d:dc:
90:19:07:5b:36:da:a0:01:8f:09:5c:fc:59:f6:fb:28:40:58:
78:7f:fd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org