Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PQS/Ai96p7T7kqhO1PTdDZW3aWJyzv4.roa
File: Ai96p7T7kqhO1PTdDZW3aWJyzv4.roa (raw, json)
Hash identifier: nzrmpMZHPHAEVM9dGI1/BNWt3Xfhey3zxU+Ds3oc6z8=
Subject key identifier: 02:2F:7A:A7:B4:FB:92:A8:4E:D4:F4:DD:0D:95:B7:69:62:72:CE:FE
Certificate issuer: /CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Certificate serial: 0D56
Authority key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/Ai96p7T7kqhO1PTdDZW3aWJyzv4.roa
Signing time: Thu 15 Sep 2022 02:38:06 +0000
ROA not before: Thu 15 Sep 2022 02:38:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 64271
IP address blocks: 2404:aac0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3414 (0xd56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Validity
Not Before: Sep 15 02:38:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=022F7AA7B4FB92A84ED4F4DD0D95B7696272CEFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:0c:45:40:c1:4f:7e:4c:af:4f:bc:8a:c6:
55:69:14:c1:6d:42:63:d3:5d:0f:30:cb:87:62:33:
d7:20:4e:dd:47:f6:bb:7f:bd:d0:7c:d9:9d:df:06:
16:af:c9:64:7f:80:8b:fc:bb:76:4e:02:6f:ae:af:
a9:ac:ee:26:72:a9:7e:c4:04:4f:c3:b1:14:2d:4a:
13:c2:2e:37:53:d2:d7:4e:9c:29:5f:b3:6c:10:92:
ca:cd:5b:a6:6d:c4:f6:79:0f:b7:32:a2:40:1a:b2:
14:af:e6:a0:00:5e:2c:ed:90:19:15:be:97:0b:c1:
fe:c7:b2:ac:2f:0e:3f:73:c8:39:0f:6d:cf:7a:ed:
52:c8:cf:8b:e6:83:76:dc:16:c0:f9:8d:f2:6b:85:
fe:89:17:3f:92:dc:6f:10:49:7e:92:77:3a:09:19:
0d:7a:33:99:8a:92:af:c9:e0:b0:eb:3d:cf:3d:b2:
9c:c8:95:56:1c:89:2e:79:ed:20:23:77:54:d1:e4:
3c:56:16:c6:27:80:6c:b1:0d:54:7d:37:48:f5:e1:
48:18:b6:fa:0e:74:1f:9b:e3:5a:fb:fb:5a:f7:f9:
cd:6d:1b:0c:74:52:fa:70:03:37:1d:5d:86:6e:56:
22:64:1c:49:2c:98:4c:87:f3:3a:9b:4f:a0:a9:3a:
20:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2F:7A:A7:B4:FB:92:A8:4E:D4:F4:DD:0D:95:B7:69:62:72:CE:FE
X509v3 Authority Key Identifier:
keyid:C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/Ai96p7T7kqhO1PTdDZW3aWJyzv4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:aac0::/32
Signature Algorithm: sha256WithRSAEncryption
61:0e:3a:ca:46:96:2c:31:91:5c:7a:1e:60:31:99:e5:d6:3b:
a8:ae:e5:da:a9:f8:df:29:73:98:61:fd:14:58:42:05:ba:db:
bd:4d:0c:49:fd:ac:2f:6b:83:71:e6:48:22:2b:50:a3:e4:83:
cf:61:d7:da:ea:90:28:17:8b:6a:82:60:90:2b:6b:1f:ea:0f:
cd:f0:df:73:7b:16:83:1e:bd:7b:d9:c6:8c:a8:73:57:3e:83:
57:28:05:79:5b:c3:56:1d:db:57:a6:a0:24:09:ea:7a:a9:9f:
be:58:ca:eb:53:2d:14:95:77:f6:3d:55:9d:32:51:59:5a:39:
a3:ce:1c:4a:f7:0c:5d:53:a1:31:c0:ca:47:82:3d:25:26:e1:
85:8f:fb:75:d1:02:5e:73:bc:27:21:e1:26:9d:bb:08:f1:e1:
2b:f7:55:10:6d:c5:48:82:63:a9:b7:fa:fd:79:ea:6c:3a:0c:
73:22:9b:40:64:0d:23:c2:5f:d3:ad:55:c2:7d:57:59:71:f1:
07:91:28:c0:30:66:4a:f3:b6:70:41:86:14:92:ca:24:1a:bc:
14:08:39:9d:0c:fc:29:37:6d:04:99:d7:cb:dc:ad:81:01:88:
12:aa:b0:a8:49:ef:c2:6e:d1:a2:2c:be:ce:af:a1:87:37:18:
95:52:3e:5b
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICDVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzE0
RkFDRkQ0NUMyQzAyNzY4RTgyNzJGNEZCODNGQjJFREFGNzQzOTAeFw0yMjA5MTUw
MjM4MDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDAyMkY3QUE3QjRGQjky
QTg0RUQ0RjRERDBEOTVCNzY5NjI3MkNFRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr2gxFQMFPfkyvT7yKxlVpFMFtQmPTXQ8wy4diM9cgTt1H9rt/
vdB82Z3fBhavyWR/gIv8u3ZOAm+ur6ms7iZyqX7EBE/DsRQtShPCLjdT0tdOnClf
s2wQksrNW6ZtxPZ5D7cyokAashSv5qAAXiztkBkVvpcLwf7HsqwvDj9zyDkPbc96
7VLIz4vmg3bcFsD5jfJrhf6JFz+S3G8QSX6SdzoJGQ16M5mKkq/J4LDrPc89spzI
lVYciS557SAjd1TR5DxWFsYngGyxDVR9N0j14UgYtvoOdB+b41r7+1r3+c1tGwx0
UvpwAzcdXYZuViJkHEksmEyH8zqbT6CpOiDrAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUAi96p7T7kqhO1PTdDZW3aWJyzv4wHwYDVR0jBBgwFoAUwU+s/UXCwCdo6Ccv
T7g/su2vdDkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFFTL3dV
LXNfVVhDd0NkbzZDY3ZUN2dfc3UydmREay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
d1Utc19VWEN3Q2RvNkNjdlQ3Z19zdTJ2ZERrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvUFFTL0FpOTZwN1Q3a3FoTzFQVGREWlczYVdK
eXp2NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBKrAMA0G
CSqGSIb3DQEBCwUAA4IBAQBhDjrKRpYsMZFceh5gMZnl1juoruXaqfjfKXOYYf0U
WEIFutu9TQxJ/awva4Nx5kgiK1Cj5IPPYdfa6pAoF4tqgmCQK2sf6g/N8N9zexaD
Hr172caMqHNXPoNXKAV5W8NWHdtXpqAkCep6qZ++WMrrUy0UlXf2PVWdMlFZWjmj
zhxK9wxdU6ExwMpHgj0lJuGFj/t10QJec7wnIeEmnbsI8eEr91UQbcVIgmOpt/r9
eepsOgxzIptAZA0jwl/TrVXCfVdZcfEHkSjAMGZK87ZwQYYUksokGrwUCDmdDPwp
N20EmdfL3K2BAYgSqrCoSe/CbtGiLL7Or6GHNxiVUj5b
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org