Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/mJGodzlbI4nzpJo7Iqv1mC4zio4.roa
File: mJGodzlbI4nzpJo7Iqv1mC4zio4.roa (raw, json)
Hash identifier: yhOTVDCEdBvbHlnq3j5W0XTYKwmny96B0WYRRKAiqE0=
Subject key identifier: 98:91:A8:77:39:5B:23:89:F3:A4:9A:3B:22:AB:F5:98:2E:33:8A:8E
Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial: 1200
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/mJGodzlbI4nzpJo7Iqv1mC4zio4.roa
Signing time: Fri 01 Sep 2023 09:26:44 +0000
ROA not before: Fri 01 Sep 2023 09:26:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 2403:b340::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4608 (0x1200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Validity
Not Before: Sep 1 09:26:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9891A877395B2389F3A49A3B22ABF5982E338A8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:1c:ef:f2:d3:9c:53:f4:25:1a:da:81:81:
94:e3:eb:32:cd:57:7f:7f:0e:5b:25:be:cb:07:31:
0b:2c:c9:db:0e:53:3d:db:35:e1:49:06:f9:6b:57:
de:21:59:82:6d:fa:96:4d:8f:3e:ba:f3:23:3f:be:
2f:a6:e3:a6:66:32:92:f8:9c:11:6a:9b:e3:e7:2f:
2e:cc:95:40:bd:3e:c9:97:ba:a7:74:bb:6e:80:db:
39:2b:5f:a8:6d:02:e7:18:d3:99:6e:21:ce:e4:f5:
11:1e:fc:f7:af:2e:00:a8:15:96:74:b5:cf:54:c4:
21:f5:fb:87:4b:9b:1e:ca:cc:1a:d6:c4:60:59:39:
91:26:06:0b:d8:f1:27:fd:65:73:d8:f4:0e:bb:d6:
4c:a7:c3:2e:d7:82:0b:cd:af:e7:94:38:ee:14:cc:
4c:5d:d6:34:c2:b9:3c:29:e8:02:ee:a0:9d:d3:cb:
92:51:db:d8:19:30:06:c3:e8:b1:10:ce:9e:99:35:
b7:55:cf:07:57:24:46:7a:ef:89:8f:00:fc:df:9f:
6b:f2:33:fa:d0:be:7b:10:66:47:7e:b4:07:49:8a:
44:1d:af:4b:9e:b3:5c:6a:fe:19:40:23:a1:4c:0d:
98:d1:dd:2d:77:9d:ca:5c:44:5c:9e:79:26:19:13:
c3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:91:A8:77:39:5B:23:89:F3:A4:9A:3B:22:AB:F5:98:2E:33:8A:8E
X509v3 Authority Key Identifier:
keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/mJGodzlbI4nzpJo7Iqv1mC4zio4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:b340::/32
Signature Algorithm: sha256WithRSAEncryption
70:b5:01:a8:5c:17:89:c4:21:4d:96:cc:30:f3:a3:99:ad:1f:
9c:1d:ef:4f:16:eb:42:a6:0e:4f:b6:d7:5d:3b:ed:75:75:9e:
01:0c:7f:f8:7d:07:5e:92:d4:2c:39:11:9c:d4:8c:d2:48:9f:
7e:fc:5b:2e:bb:05:a1:3a:8f:37:68:49:86:44:5c:d6:ca:cb:
fb:96:4f:bb:b2:87:2b:4b:4a:b8:d5:d8:f1:39:24:80:f3:02:
12:e0:f7:cd:86:fa:21:5f:cc:b6:c9:88:f4:38:00:84:56:a8:
f8:e2:9f:6b:70:eb:c7:7f:5c:f7:b9:1b:95:7c:7e:02:99:f1:
f7:6d:02:7b:f3:90:7d:1a:73:c8:26:58:c4:79:ec:96:62:3c:
e9:75:23:37:46:98:87:37:72:d4:59:ff:9f:c0:f6:b2:8b:69:
20:7c:3c:3f:73:3a:b5:03:82:71:cb:fa:f2:21:fb:9a:75:a4:
e2:77:46:76:2a:aa:05:65:1f:05:06:b9:22:3c:18:68:55:f3:
77:7a:ac:73:b9:b0:01:3b:e2:76:69:25:90:5a:07:8b:39:fa:
5c:3f:d4:63:2e:55:c6:08:21:85:0d:9c:68:b6:ca:68:e6:06:
56:39:c8:20:8a:e8:46:67:6e:57:64:e4:ae:73:dd:bc:37:cf:
f3:23:01:93
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICEgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODA1
MUYyRUNFRkMyNDJFOUFGOUYxRTQ1NEE0RkI3OTY1OTFCOERBQjAeFw0yMzA5MDEw
OTI2NDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk4OTFBODc3Mzk1QjIz
ODlGM0E0OUEzQjIyQUJGNTk4MkUzMzhBOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCo1hzv8tOcU/QlGtqBgZTj6zLNV39/DlslvssHMQssydsOUz3b
NeFJBvlrV94hWYJt+pZNjz668yM/vi+m46ZmMpL4nBFqm+PnLy7MlUC9PsmXuqd0
u26A2zkrX6htAucY05luIc7k9REe/PevLgCoFZZ0tc9UxCH1+4dLmx7KzBrWxGBZ
OZEmBgvY8Sf9ZXPY9A671kynwy7XggvNr+eUOO4UzExd1jTCuTwp6ALuoJ3Ty5JR
29gZMAbD6LEQzp6ZNbdVzwdXJEZ674mPAPzfn2vyM/rQvnsQZkd+tAdJikQdr0ue
s1xq/hlAI6FMDZjR3S13ncpcRFyeeSYZE8OnAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUmJGodzlbI4nzpJo7Iqv1mC4zio4wHwYDVR0jBBgwFoAUgFHy7O/CQumvnx5F
Sk+3llkbjaswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVU
L2dGSHk3T19DUXVtdm54NUZTay0zbGxrYmphcy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvZ0ZIeTdPX0NRdW12bng1RlNrLTNsbGtiamFzLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVUL21KR29kemxiSTRuenBKbzdJ
cXYxbUM0emlvNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk
A7NAMA0GCSqGSIb3DQEBCwUAA4IBAQBwtQGoXBeJxCFNlsww86OZrR+cHe9PFutC
pg5PttddO+11dZ4BDH/4fQdektQsORGc1IzSSJ9+/FsuuwWhOo83aEmGRFzWysv7
lk+7socrS0q41djxOSSA8wIS4PfNhvohX8y2yYj0OACEVqj44p9rcOvHf1z3uRuV
fH4CmfH3bQJ785B9GnPIJljEeeyWYjzpdSM3RpiHN3LUWf+fwPayi2kgfDw/czq1
A4Jxy/ryIfuadaTid0Z2KqoFZR8FBrkiPBhoVfN3eqxzubABO+J2aSWQWgeLOfpc
P9RjLlXGCCGFDZxotspo5gZWOcggiuhGZ25XZOSuc928N8/zIwGT
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:54:07 2025 by rpki-client