Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/C_s3dWYF4PasicHGylbUwCWgXf8.roa
File: C_s3dWYF4PasicHGylbUwCWgXf8.roa (raw, json)
Hash identifier: o/u0yua9CCiYEW64yvNdmFj/w7QxP7bRERu4GHtoLdM=
Subject key identifier: 0B:FB:37:75:66:05:E0:F6:AC:89:C1:C6:CA:56:D4:C0:25:A0:5D:FF
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0DB7
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/C_s3dWYF4PasicHGylbUwCWgXf8.roa
Signing time: Mon 23 Nov 2020 06:37:44 +0000
ROA not before: Mon 23 Nov 2020 06:37:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18180
IP address blocks: 2404:178:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3511 (0xdb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Nov 23 06:37:44 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0BFB37756605E0F6AC89C1C6CA56D4C025A05DFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:7a:8a:2d:4b:87:58:0a:b7:ae:ab:2b:39:
bb:a3:98:12:29:b2:2c:84:77:b3:06:45:13:8a:6d:
7c:de:63:5b:e9:b1:5c:67:44:0d:48:b1:a1:80:fc:
30:90:e1:c7:89:7d:fd:df:ba:f9:2a:b5:8a:47:1b:
73:a7:d8:0f:16:b4:18:db:e1:03:91:32:c6:55:8f:
a2:95:76:4d:50:8a:a5:63:e8:f2:bb:34:33:95:86:
b6:51:b4:39:b0:26:bf:53:71:0e:cd:52:37:1a:3a:
20:df:91:39:24:a9:cb:91:97:94:b6:c4:91:d7:17:
a3:01:d8:5e:1e:96:ad:64:8a:b8:6d:f4:ff:7a:66:
b1:fb:6d:bb:5b:87:d6:c5:49:23:92:1f:38:ae:86:
32:59:3c:84:61:6c:eb:1f:31:30:92:99:42:54:59:
6a:2e:2e:ac:99:0d:97:49:3b:c8:86:80:cb:6c:c1:
5d:34:eb:2c:50:96:b8:8d:42:e0:38:9b:e8:1c:c0:
e2:e7:39:c0:60:04:ef:0d:2f:58:d9:8d:c5:90:24:
d5:55:c7:e2:f7:e2:cb:16:d6:70:15:57:94:99:3f:
fa:30:e8:8a:db:be:54:f2:ea:b2:e0:1a:1e:0a:39:
b0:72:dc:6a:4a:4b:22:1d:ca:e4:76:84:57:b7:ac:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FB:37:75:66:05:E0:F6:AC:89:C1:C6:CA:56:D4:C0:25:A0:5D:FF
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/C_s3dWYF4PasicHGylbUwCWgXf8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178:1::/48
Signature Algorithm: sha256WithRSAEncryption
b1:da:67:6c:2b:b1:ec:c2:6b:b6:c5:30:d6:8b:69:57:96:e5:
20:e2:19:12:34:9b:3b:c2:fd:57:43:31:26:45:4e:64:8e:3d:
23:83:95:29:58:cf:60:06:72:05:00:89:d0:92:4e:f1:a6:92:
97:05:46:eb:90:48:72:3e:c7:1c:89:5c:76:b7:8e:a1:f5:1d:
db:0c:e8:5d:19:c4:03:50:3e:93:77:bd:47:8f:8f:d1:a0:aa:
b2:f1:75:42:4b:e8:8a:7a:9f:68:3c:2f:67:b7:51:c0:1b:cf:
d3:d0:60:cf:c5:6e:66:10:f9:8e:35:cb:9c:bc:df:e7:20:ed:
46:82:32:49:dd:f6:db:b5:f2:7e:6f:22:08:d1:6a:1c:4d:60:
e9:59:67:e2:dc:12:e9:bf:57:c4:55:2e:41:6c:09:f2:16:30:
8e:df:ea:cc:d4:76:66:54:ab:d3:02:df:06:ad:80:e1:47:ba:
da:2c:76:04:63:48:5b:cd:10:18:43:f4:8c:e3:a2:c5:0d:91:
bf:f0:b3:fc:8e:59:5e:fb:f5:2e:09:70:be:21:e2:a1:7e:b2:
db:76:50:31:60:5c:c5:2a:f3:31:dc:7a:92:3e:f3:2c:d9:0f:
12:30:b7:45:de:c7:3e:85:ec:bd:cb:b3:3c:ec:5a:4f:a1:96:
70:d4:f0:1a
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB
OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMDExMjMw
NjM3NDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDBCRkIzNzc1NjYwNUUw
RjZBQzg5QzFDNkNBNTZENEMwMjVBMDVERkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyVnqKLUuHWAq3rqsrObujmBIpsiyEd7MGRROKbXzeY1vpsVxn
RA1IsaGA/DCQ4ceJff3fuvkqtYpHG3On2A8WtBjb4QORMsZVj6KVdk1QiqVj6PK7
NDOVhrZRtDmwJr9TcQ7NUjcaOiDfkTkkqcuRl5S2xJHXF6MB2F4elq1kirht9P96
ZrH7bbtbh9bFSSOSHziuhjJZPIRhbOsfMTCSmUJUWWouLqyZDZdJO8iGgMtswV00
6yxQlriNQuA4m+gcwOLnOcBgBO8NL1jZjcWQJNVVx+L34ssW1nAVV5SZP/ow6Irb
vlTy6rLgGh4KObBy3GpKSyIdyuR2hFe3rBcDAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUC/s3dWYF4PasicHGylbUwCWgXf8wHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0
p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv
MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9DX3MzZFdZRjRQYXNpY0hHeWxi
VXdDV2dYZjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAQB
eAABMA0GCSqGSIb3DQEBCwUAA4IBAQCx2mdsK7Hswmu2xTDWi2lXluUg4hkSNJs7
wv1XQzEmRU5kjj0jg5UpWM9gBnIFAInQkk7xppKXBUbrkEhyPscciVx2t46h9R3b
DOhdGcQDUD6Td71Hj4/RoKqy8XVCS+iKep9oPC9nt1HAG8/T0GDPxW5mEPmONcuc
vN/nIO1GgjJJ3fbbtfJ+byII0WocTWDpWWfi3BLpv1fEVS5BbAnyFjCO3+rM1HZm
VKvTAt8GrYDhR7raLHYEY0hbzRAYQ/SM46LFDZG/8LP8jlle+/UuCXC+IeKhfrLb
dlAxYFzFKvMx3HqSPvMs2Q8SMLdF3sc+hey9y7M87FpPoZZw1PAa
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org