Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/lw5SrXM3UnxbfjJuakj5mJ-aVz0.roa
File: lw5SrXM3UnxbfjJuakj5mJ-aVz0.roa (raw, json)
Hash identifier: IDORumY0NaZkBUcsiXH+qb3nBkpXIoRbh/y9aDfknvo=
Subject key identifier: 97:0E:52:AD:73:37:52:7C:5B:7E:32:6E:6A:48:F9:98:9F:9A:57:3D
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0A94
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/lw5SrXM3UnxbfjJuakj5mJ-aVz0.roa
Signing time: Tue 20 Sep 2022 05:58:27 +0000
ROA not before: Tue 20 Sep 2022 05:58:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131584
IP address blocks: 2400:4e80::/32 maxlen: 124
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2708 (0xa94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Sep 20 05:58:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=970E52AD7337527C5B7E326E6A48F9989F9A573D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:09:b9:a0:50:2b:76:70:f8:bd:92:20:e8:
f1:48:cd:13:22:26:6d:e4:d0:4f:e4:3a:c2:86:72:
ec:fc:a8:7f:43:bd:d6:34:7c:ea:d5:e8:c5:de:ae:
68:f2:c7:e7:cf:bc:b6:4e:fd:4d:b9:0b:f2:b2:d7:
5c:d8:32:e9:cf:c9:99:51:81:92:30:a2:e2:54:de:
f2:9f:f2:2e:2f:42:43:f3:0d:2d:aa:51:27:d1:bf:
f8:ee:8e:aa:7b:8d:ff:70:c5:d8:52:d8:c2:c1:b7:
9b:70:57:f8:64:f1:2f:d7:15:db:fd:f3:82:1e:14:
da:19:49:6c:ae:13:05:51:de:75:b4:c7:a4:ed:cd:
09:2c:b6:ad:c4:7e:95:72:34:54:0f:74:2d:d6:6e:
7d:e9:87:3a:1e:4e:50:55:dd:77:63:ed:f1:08:e2:
bc:5f:9e:2f:47:3f:11:c2:c2:f0:db:35:1c:8e:1b:
e3:40:72:fa:9c:9d:ed:4a:99:08:7c:a2:a4:ec:cc:
b7:08:58:1b:da:f3:11:dd:0c:a3:08:d9:aa:d7:7d:
0f:57:38:45:55:5e:30:1a:fd:20:00:6b:4a:8c:0a:
c8:97:3b:58:e2:7a:10:b5:33:dd:70:f4:b0:9b:e8:
91:a7:67:71:57:17:35:63:25:14:ab:b4:1d:18:d4:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0E:52:AD:73:37:52:7C:5B:7E:32:6E:6A:48:F9:98:9F:9A:57:3D
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/lw5SrXM3UnxbfjJuakj5mJ-aVz0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:4e80::/32
Signature Algorithm: sha256WithRSAEncryption
93:cb:f6:ba:98:98:53:00:40:88:55:e2:7c:40:64:a7:91:bc:
69:c7:27:7e:5e:76:22:f4:c8:24:06:6c:c8:65:ba:9a:ff:62:
a4:25:cb:a1:e2:7d:9b:f1:ca:74:65:21:5f:dc:6e:c5:e7:66:
15:70:f4:f0:84:08:78:8b:b8:81:bf:fc:be:7d:5a:e3:d9:e7:
5b:1b:35:85:ed:43:ca:d3:30:6b:3c:ba:99:7d:72:9f:a0:2f:
2c:24:47:f2:ed:35:d8:fd:bd:1f:1a:9a:bb:93:24:04:f2:1f:
fe:7b:03:ed:d5:a7:c7:f8:4d:37:9a:5b:28:14:e4:70:47:6b:
0e:78:6d:05:72:08:d5:29:60:99:7e:48:98:c9:ed:e6:f0:da:
9f:b9:50:89:18:80:68:13:73:86:62:7c:60:eb:66:a4:08:82:
da:f6:c2:9e:d4:3a:be:26:ba:c0:ad:5c:cb:37:1c:d6:98:cf:
51:28:09:67:04:14:cf:a1:07:7e:99:9b:6a:b1:df:8d:5e:a6:
70:d2:88:fe:e3:f6:7a:a4:d5:1b:d0:c2:89:c5:eb:cd:e5:98:
86:11:3a:0f:1f:c6:5e:3c:10:7a:48:2c:d8:8e:80:a4:e2:ef:
43:d6:7f:0d:4b:f8:b4:87:e8:e8:b1:50:0e:65:2e:14:d1:be:
61:53:c6:13
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgICCpQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1
NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yMjA5MjAw
NTU4MjdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk3MEU1MkFENzMzNzUy
N0M1QjdFMzI2RTZBNDhGOTk4OUY5QTU3M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDStwm5oFArdnD4vZIg6PFIzRMiJm3k0E/kOsKGcuz8qH9DvdY0
fOrV6MXermjyx+fPvLZO/U25C/Ky11zYMunPyZlRgZIwouJU3vKf8i4vQkPzDS2q
USfRv/jujqp7jf9wxdhS2MLBt5twV/hk8S/XFdv984IeFNoZSWyuEwVR3nW0x6Tt
zQkstq3EfpVyNFQPdC3Wbn3phzoeTlBV3Xdj7fEI4rxfni9HPxHCwvDbNRyOG+NA
cvqcne1KmQh8oqTszLcIWBva8xHdDKMI2arXfQ9XOEVVXjAa/SAAa0qMCsiXO1ji
ehC1M91w9LCb6JGnZ3FXFzVjJRSrtB0Y1IH7AgMBAAGjggH1MIIB8TAdBgNVHQ4E
FgQUlw5SrXM3UnxbfjJuakj5mJ+aVz0wHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N
UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83
NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L2x3NVNyWE0zVW54
YmZqSnVha2o1bUotYVZ6MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC
MAcDBQAkAE6AMA0GCSqGSIb3DQEBCwUAA4IBAQCTy/a6mJhTAECIVeJ8QGSnkbxp
xyd+XnYi9MgkBmzIZbqa/2KkJcuh4n2b8cp0ZSFf3G7F52YVcPTwhAh4i7iBv/y+
fVrj2edbGzWF7UPK0zBrPLqZfXKfoC8sJEfy7TXY/b0fGpq7kyQE8h/+ewPt1afH
+E03mlsoFORwR2sOeG0FcgjVKWCZfkiYye3m8NqfuVCJGIBoE3OGYnxg62akCILa
9sKe1Dq+JrrArVzLNxzWmM9RKAlnBBTPoQd+mZtqsd+NXqZw0oj+4/Z6pNUb0MKJ
xevN5ZiGEToPH8ZePBB6SCzYjoCk4u9D1n8NS/i0h+josVAOZS4U0b5hU8YT
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org