Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/RlnJIMS4WFJwMCHmitPjByHKLBI.roa
File: RlnJIMS4WFJwMCHmitPjByHKLBI.roa (raw, json)
Hash identifier: /n7IMZHjfVFYzmz+UBqXYK3wybmzVswDNARYKjXQ0rU=
Subject key identifier: 46:59:C9:20:C4:B8:58:52:70:30:21:E6:8A:D3:E3:07:21:CA:2C:12
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0C7C
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/RlnJIMS4WFJwMCHmitPjByHKLBI.roa
Signing time: Mon 16 Nov 2020 06:12:54 +0000
ROA not before: Mon 16 Nov 2020 06:12:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18180
IP address blocks: 2404:178:17::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3196 (0xc7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Nov 16 06:12:54 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4659C920C4B85852703021E68AD3E30721CA2C12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1d:4d:20:1a:86:5c:5c:8f:31:97:09:d0:70:
21:d4:bf:f9:c3:fa:5b:21:4f:a2:56:f7:03:8d:c5:
b0:05:5d:e5:fb:f4:2e:45:c6:32:44:7a:35:dd:fd:
62:eb:00:38:2b:80:cb:56:18:43:25:98:b9:f8:c1:
1e:5a:6e:b4:bb:db:6e:46:1f:10:bc:1e:db:51:06:
c3:08:0a:0a:f1:ef:a9:f8:a7:8c:1d:67:79:25:95:
69:a3:33:7d:df:75:52:ae:98:61:ed:c1:d0:22:df:
28:cf:79:16:ec:d3:4a:f4:1f:17:e5:13:67:be:5e:
a5:2b:71:94:a6:cf:09:d1:c6:dd:a5:a6:cd:92:b1:
5b:61:7c:13:26:a9:92:2f:a2:ac:32:b8:21:cc:9f:
e2:60:3d:69:f4:11:79:36:89:ca:b4:86:9a:5c:5b:
ea:a5:1c:81:3a:d9:d8:b5:2e:cf:d4:54:70:2e:4a:
e3:84:59:7e:89:6b:c1:08:8e:27:89:cd:40:ff:62:
e7:ec:d0:d1:5c:0d:02:7f:f2:81:62:c2:3c:86:39:
b2:8e:62:bc:b0:04:82:54:e9:c3:0b:67:9e:89:3f:
51:ff:b0:8d:eb:ea:41:8e:08:d0:e6:a6:14:0f:fb:
e7:ba:10:93:86:58:a0:ce:89:47:d3:19:69:81:bf:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:59:C9:20:C4:B8:58:52:70:30:21:E6:8A:D3:E3:07:21:CA:2C:12
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/RlnJIMS4WFJwMCHmitPjByHKLBI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178:17::/48
Signature Algorithm: sha256WithRSAEncryption
65:40:41:47:b1:51:ad:37:5a:77:28:55:3f:1b:67:80:0c:ce:
7a:c8:74:43:be:11:25:04:3e:b8:35:f1:e6:64:a0:d2:e7:13:
aa:c5:65:c9:64:e8:80:b9:df:cb:c7:1d:06:ce:0a:c9:d0:31:
4c:45:a1:38:fd:2e:e5:a1:14:16:0d:54:8e:8f:f0:ad:70:6c:
72:9f:5d:96:54:6c:3c:79:07:74:90:40:14:ff:3f:d9:f7:c6:
44:5c:c0:52:c4:aa:77:ee:36:c4:a4:72:44:e5:24:60:a9:c1:
19:27:2b:ac:ca:ab:ab:a8:e7:4a:95:c3:f3:19:41:92:a8:5d:
c6:b9:8b:06:07:83:31:13:dd:db:69:61:f4:e6:3d:c2:12:3c:
19:30:e1:28:06:f9:2a:28:d8:17:fc:45:68:36:62:ab:6f:b1:
69:00:c9:4f:ca:b6:dc:43:fa:6c:09:23:8a:a4:c7:8b:b5:d4:
b6:94:91:f0:85:89:53:e8:a2:b7:88:0d:bc:5d:0e:d2:ae:8f:
1f:01:9a:e0:78:b0:4b:6a:b8:7b:d3:cc:66:2f:07:c1:e1:4a:
84:f0:53:e7:7e:38:9b:b1:f0:e7:9b:a2:f3:32:ef:fb:4b:64:
76:f3:08:9c:81:d1:13:fc:f9:23:da:b6:66:30:41:38:d4:7e:
c9:08:05:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org