Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/trXI9foiNRFamDkksIBAF87tBpE.roa
File: trXI9foiNRFamDkksIBAF87tBpE.roa (raw, json)
Hash identifier: auk8d+XJdCdBxIpxvNp6Up3uzXiYKad/dbj7FIx3wmY=
Subject key identifier: B6:B5:C8:F5:FA:22:35:11:5A:98:39:24:B0:80:40:17:CE:ED:06:91
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 099B
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/trXI9foiNRFamDkksIBAF87tBpE.roa
Signing time: Wed 29 Sep 2021 02:44:40 +0000
ROA not before: Wed 29 Sep 2021 02:44:40 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38047
IP address blocks: 2402:c340:cccc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2459 (0x99b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Sep 29 02:44:40 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B6B5C8F5FA2235115A983924B0804017CEED0691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:07:9a:c2:f1:f5:5c:99:1d:5c:4e:09:25:82:
8f:2b:a7:29:7b:5d:3e:b2:6e:05:9a:36:8e:5c:d2:
87:10:61:a8:31:ec:38:22:bf:e2:a7:d6:5d:15:4c:
d4:1d:b2:8f:30:ac:3b:f3:d2:0d:07:cd:42:1d:04:
79:66:7f:a5:cf:14:85:03:ac:15:ed:7c:e2:f3:45:
5d:60:5b:de:80:51:54:e7:69:2e:64:64:e6:c6:54:
a9:c1:98:aa:ab:2f:53:87:94:12:d9:ea:27:4b:42:
6e:fe:41:79:fc:61:96:be:75:7a:dc:e1:6d:47:23:
75:d2:0b:a8:e8:a3:e9:18:d1:ae:73:c2:80:77:bf:
da:e0:40:3b:66:a6:55:dd:56:e5:e4:a6:8e:d9:06:
0e:b7:dc:a6:78:93:8a:73:75:8b:2b:f9:16:97:33:
92:c8:f2:38:a6:4b:5f:e8:df:1a:f6:f0:a9:50:6b:
8d:dd:a0:97:f2:09:3a:87:a8:0e:25:84:6f:50:fb:
a0:3e:0d:9e:f6:c7:2f:b6:96:d0:21:c6:52:3c:4a:
6e:33:37:ae:24:bd:ad:86:5a:09:88:0e:ba:bd:55:
13:00:17:1b:ff:3b:2b:5c:09:e2:60:59:4a:20:b8:
44:d2:d6:e5:83:cb:5b:bb:12:cf:d2:73:df:2f:38:
52:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B5:C8:F5:FA:22:35:11:5A:98:39:24:B0:80:40:17:CE:ED:06:91
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/trXI9foiNRFamDkksIBAF87tBpE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:c340:cccc::/48
Signature Algorithm: sha256WithRSAEncryption
86:e2:49:88:b1:c9:2f:dd:a4:9e:5d:3d:51:21:e7:b3:ff:b6:
20:02:6f:ff:c2:7b:66:33:fe:cb:ce:de:08:6f:9a:07:f6:10:
ca:e8:d9:5f:4e:25:1a:ec:8d:7d:7f:12:4d:4d:e1:99:d6:4a:
76:a5:ee:83:4e:8a:f7:81:4d:bd:ca:df:f2:fc:24:6a:22:97:
27:23:92:31:fb:e1:f3:b5:da:5f:e1:72:8e:99:66:38:13:86:
d8:a8:a6:49:94:fa:1f:5d:64:4b:47:27:8c:ff:62:20:18:86:
4b:4b:9b:4b:97:5c:84:37:e3:7e:27:7a:4a:17:6a:13:da:0a:
d6:b1:66:46:91:2e:24:31:3b:f4:cc:bd:1d:a8:5d:a8:32:80:
cd:aa:b4:88:2b:a1:54:e8:1d:64:54:76:5f:c5:35:4f:86:af:
10:dd:bf:9e:7a:f0:cf:0e:95:5d:30:fc:78:89:c4:5e:95:4c:
11:87:10:96:6d:c1:96:66:ae:dc:de:5e:c6:c4:c1:1c:b5:50:
90:e0:c4:da:e3:57:3e:57:81:a0:fe:92:c9:94:8e:4e:45:21:
c5:1b:93:04:44:b9:99:8c:c3:5a:00:98:61:e3:99:95:1f:f0:
81:23:c7:3f:3b:7d:ef:cb:27:32:01:0b:ca:d2:ff:b9:3c:6f:
11:99:f3:35
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCZswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1
NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yMTA5Mjkw
MjQ0NDBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEI2QjVDOEY1RkEyMjM1
MTE1QTk4MzkyNEIwODA0MDE3Q0VFRDA2OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqB5rC8fVcmR1cTgklgo8rpyl7XT6ybgWaNo5c0ocQYagx7Dgi
v+Kn1l0VTNQdso8wrDvz0g0HzUIdBHlmf6XPFIUDrBXtfOLzRV1gW96AUVTnaS5k
ZObGVKnBmKqrL1OHlBLZ6idLQm7+QXn8YZa+dXrc4W1HI3XSC6joo+kY0a5zwoB3
v9rgQDtmplXdVuXkpo7ZBg633KZ4k4pzdYsr+RaXM5LI8jimS1/o3xr28KlQa43d
oJfyCTqHqA4lhG9Q+6A+DZ72xy+2ltAhxlI8Sm4zN64kva2GWgmIDrq9VRMAFxv/
OytcCeJgWUoguETS1uWDy1u7Es/Sc98vOFIRAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUtrXI9foiNRFamDkksIBAF87tBpEwHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB
76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI
RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL3RyWEk5Zm9pTlJG
YW1Ea2tzSUJBRjg3dEJwRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAkAsNAzMwwDQYJKoZIhvcNAQELBQADggEBAIbiSYixyS/dpJ5dPVEh57P/
tiACb//Ce2Yz/svO3ghvmgf2EMro2V9OJRrsjX1/Ek1N4ZnWSnal7oNOiveBTb3K
3/L8JGoilycjkjH74fO12l/hco6ZZjgThtiopkmU+h9dZEtHJ4z/YiAYhktLm0uX
XIQ3434nekoXahPaCtaxZkaRLiQxO/TMvR2oXagygM2qtIgroVToHWRUdl/FNU+G
rxDdv5568M8OlV0w/HiJxF6VTBGHEJZtwZZmrtzeXsbEwRy1UJDgxNrjVz5XgaD+
ksmUjk5FIcUbkwREuZmMw1oAmGHjmZUf8IEjxz87fe/LJzIBC8rS/7k8bxGZ8zU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org