Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/AZAKGIwIvct4_IwjrDqeECZ5Ruo.roa
File: AZAKGIwIvct4_IwjrDqeECZ5Ruo.roa (raw, json)
Hash identifier: DKI2oynWA+4EtqibN9h690PYUBGruWgwvg1WMrSG7Gs=
Subject key identifier: 01:90:0A:18:8C:08:BD:CB:78:FC:8C:23:AC:3A:9E:10:26:79:46:EA
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0C6E
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/AZAKGIwIvct4_IwjrDqeECZ5Ruo.roa
Signing time: Mon 16 Nov 2020 06:11:37 +0000
ROA not before: Mon 16 Nov 2020 06:11:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18180
IP address blocks: 2404:178:10::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3182 (0xc6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Nov 16 06:11:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=01900A188C08BDCB78FC8C23AC3A9E10267946EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:8d:d6:9a:7f:0b:f2:d9:af:39:46:28:cf:
c8:78:cf:c2:b5:9c:e2:54:37:ed:5c:af:45:96:7a:
f9:72:8e:1d:71:7c:dc:db:39:de:47:df:5a:1f:f1:
ef:d6:12:f3:4b:8c:a0:09:40:5e:52:54:43:4b:63:
a8:e9:a6:8f:ea:89:42:78:b3:f7:24:57:e6:c1:01:
eb:bb:dd:97:74:39:cc:3e:c5:b8:79:96:7d:64:d7:
cf:c8:6e:b9:6b:dc:5f:d3:f8:bb:a4:a1:42:25:68:
49:af:94:8c:57:7b:49:af:ea:bd:da:d4:e7:97:d7:
e2:41:a3:1d:fc:3e:05:e7:7f:c2:7b:bf:6c:5c:02:
e5:7a:ad:13:a1:2c:e8:2c:68:3d:0b:16:d2:10:5b:
00:f9:88:21:af:c9:d2:7f:95:09:b4:b9:8c:0f:f3:
7f:df:50:5c:f0:7e:28:f3:bf:36:ee:70:c4:c5:d1:
d0:19:a6:c5:79:5e:f3:49:03:d7:0d:57:9a:a1:b7:
a0:10:3a:90:38:5d:48:7c:85:a7:11:d2:45:93:4d:
4f:55:6b:de:9a:64:98:c1:fc:1a:69:33:c1:e4:2b:
e6:9f:06:0d:1a:b7:81:22:47:8a:bb:15:52:a2:0f:
02:95:1a:1a:08:8c:81:ed:62:9c:59:13:9f:dc:d6:
2f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:90:0A:18:8C:08:BD:CB:78:FC:8C:23:AC:3A:9E:10:26:79:46:EA
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/AZAKGIwIvct4_IwjrDqeECZ5Ruo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178:10::/48
Signature Algorithm: sha256WithRSAEncryption
b1:74:4e:23:68:89:02:29:67:96:8c:76:db:d8:5e:23:14:49:
3f:00:77:93:d7:1f:ee:cc:38:a7:73:9e:99:15:39:e2:17:00:
5a:ea:e8:ef:78:94:04:4a:8a:eb:c9:cd:1d:ea:c0:f5:19:c6:
23:29:a5:4c:15:7a:fc:3d:42:b2:83:48:ff:f4:a7:3b:96:a7:
5e:8a:e1:5e:c7:25:e4:66:7b:ca:11:7a:2d:af:f9:ce:7f:b0:
9e:3d:7a:c4:57:a5:30:c7:43:9b:f6:19:99:ac:ef:2b:0c:25:
a3:f3:a0:e2:fa:ba:67:86:82:e1:e5:6a:27:40:14:68:3a:de:
c8:f7:c6:ed:28:8e:ac:3c:60:73:5f:71:26:c9:2d:11:f4:0d:
49:e5:25:2d:79:fe:a1:6d:5c:40:f8:81:fa:93:77:cc:ce:83:
2e:fe:83:4f:57:fa:38:93:f2:f8:fc:ed:f4:ae:f2:50:18:7d:
4d:4c:39:bd:ee:d3:c0:91:8a:bc:0f:31:e1:dd:fc:8e:63:ce:
a7:c1:8d:51:7b:1d:f4:6b:13:54:c7:f3:eb:ec:08:71:71:a9:
93:6b:2e:3c:e1:b9:35:63:96:11:f3:20:01:25:20:aa:34:d3:
1e:d6:cf:19:fa:7a:fd:f5:65:da:38:81:d3:c0:3f:0f:89:ce:
5c:7f:c2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org