Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/HEX9CtRUQxyrrnZX4UkkEd2oee4.roa
File: HEX9CtRUQxyrrnZX4UkkEd2oee4.roa (raw, json)
Hash identifier: sK233ir/7xMsYFwfcuyzLcRtcN0wvi+zRC2ViPsRCYQ=
Subject key identifier: 1C:45:FD:0A:D4:54:43:1C:AB:AE:76:57:E1:49:24:11:DD:A8:79:EE
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 1018
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/HEX9CtRUQxyrrnZX4UkkEd2oee4.roa
Signing time: Wed 29 Sep 2021 02:50:26 +0000
ROA not before: Wed 29 Sep 2021 02:50:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131631
IP address blocks: 2403:aac0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4120 (0x1018)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Sep 29 02:50:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1C45FD0AD454431CABAE7657E1492411DDA879EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:aa:9d:45:4a:cf:42:92:79:4f:13:3f:8d:
c5:b0:d1:c1:7a:b3:05:48:c5:bc:c5:7c:7a:72:30:
fb:25:4a:bc:72:e4:23:63:ca:d3:d2:4f:a6:44:93:
ac:6e:fc:0d:2f:d5:9b:7c:ca:27:0b:cd:64:25:8c:
a3:5c:c6:e2:48:8b:c4:a4:6f:e0:ec:fd:bd:6e:6b:
66:3c:76:24:1c:75:c9:e0:df:cb:22:76:c5:ce:f6:
6f:c9:8a:db:f4:15:59:68:01:13:2e:e7:82:10:2e:
d1:fb:bf:ba:93:b1:a4:76:cc:bd:66:05:3f:3f:76:
62:0b:31:be:30:73:80:75:6c:c1:aa:b4:bc:02:91:
76:2e:7b:db:c7:9e:e2:1f:14:9b:52:ec:17:fb:30:
20:fb:2a:30:b0:08:3d:0c:5b:2d:5f:12:f6:ba:e0:
ef:62:ab:9e:88:af:e6:8b:d0:6d:46:8e:20:1c:ec:
f4:e1:8c:c9:d3:5c:fe:a5:be:1c:56:2a:9b:d6:f5:
18:7e:fe:4b:5b:f2:fa:92:cc:71:a1:bc:b2:b2:c8:
fb:cc:31:c4:5d:1f:38:b1:7b:d2:96:d6:e6:13:39:
44:cc:54:72:8e:76:c8:c4:08:43:e8:28:db:ca:65:
96:31:c3:10:79:5f:ca:49:3a:d5:6b:98:ed:fb:1a:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:45:FD:0A:D4:54:43:1C:AB:AE:76:57:E1:49:24:11:DD:A8:79:EE
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/HEX9CtRUQxyrrnZX4UkkEd2oee4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:aac0::/32
Signature Algorithm: sha256WithRSAEncryption
60:f2:7e:fe:a2:ba:b8:a1:77:ea:9b:6d:96:3b:d0:5f:32:80:
b3:1d:a0:d1:57:a7:dc:fe:14:4e:77:4d:b1:5b:d8:7e:a1:6d:
a7:db:86:dc:4c:ed:80:e8:ff:bf:b8:36:c2:5d:4b:e5:86:b1:
bc:5b:94:a9:bc:8c:6f:8b:33:1b:96:7a:34:24:ff:51:78:45:
e1:00:a7:9d:aa:07:9a:74:ca:11:28:65:33:d5:c5:69:2e:5d:
2c:b0:c2:b2:86:56:ff:1f:b5:09:38:90:f1:60:5c:4e:77:43:
4d:30:34:40:57:0e:b0:07:5a:b5:f1:88:a0:3e:6d:3a:23:04:
35:9c:53:86:13:19:cc:7c:b8:6a:c6:dc:89:e7:ec:75:1d:63:
82:e2:14:ba:6e:b2:4c:89:83:94:70:72:be:f6:8d:f9:28:83:
4b:61:36:d1:65:6f:96:46:02:3a:d6:1a:4d:72:1c:6b:e7:02:
f7:fc:47:83:ea:0e:a7:b0:f5:66:d2:32:e8:08:53:0f:30:9d:
b4:0f:57:73:72:65:e8:a4:0d:f5:55:2e:28:c8:81:3a:93:1c:
ee:a2:2e:ac:7c:b1:e0:f3:47:2c:3d:bc:d2:30:90:e6:4e:fb:
af:d4:2f:9f:63:be:6c:58:95:04:1d:24:70:fe:a0:89:6f:2c:
dd:c9:2c:20
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICEBgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5
QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yMTA5Mjkw
MjUwMjZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDFDNDVGRDBBRDQ1NDQz
MUNBQkFFNzY1N0UxNDkyNDExRERBODc5RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9AaqdRUrPQpJ5TxM/jcWw0cF6swVIxbzFfHpyMPslSrxy5CNj
ytPST6ZEk6xu/A0v1Zt8yicLzWQljKNcxuJIi8Skb+Ds/b1ua2Y8diQcdcng38si
dsXO9m/Jitv0FVloARMu54IQLtH7v7qTsaR2zL1mBT8/dmILMb4wc4B1bMGqtLwC
kXYue9vHnuIfFJtS7Bf7MCD7KjCwCD0MWy1fEva64O9iq56Ir+aL0G1GjiAc7PTh
jMnTXP6lvhxWKpvW9Rh+/ktb8vqSzHGhvLKyyPvMMcRdHzixe9KW1uYTOUTMVHKO
dsjECEPoKNvKZZYxwxB5X8pJOtVrmO37Gp6/AgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUHEX9CtRUQxyrrnZX4UkkEd2oee4wHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf
9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv
Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC9IRVg5Q3RSVVF4eXJyblpYNFVr
a0VkMm9lZTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAOq
wDANBgkqhkiG9w0BAQsFAAOCAQEAYPJ+/qK6uKF36pttljvQXzKAsx2g0Ven3P4U
TndNsVvYfqFtp9uG3EztgOj/v7g2wl1L5YaxvFuUqbyMb4szG5Z6NCT/UXhF4QCn
naoHmnTKEShlM9XFaS5dLLDCsoZW/x+1CTiQ8WBcTndDTTA0QFcOsAdatfGIoD5t
OiMENZxThhMZzHy4asbciefsdR1jguIUum6yTImDlHByvvaN+SiDS2E20WVvlkYC
OtYaTXIca+cC9/xHg+oOp7D1ZtIy6AhTDzCdtA9Xc3Jl6KQN9VUuKMiBOpMc7qIu
rHyx4PNHLD280jCQ5k77r9Qvn2O+bFiVBB0kcP6giW8s3cksIA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org