Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/WDkzv32Ap_AF44yWO9WH4dS4aVM.roa
File: WDkzv32Ap_AF44yWO9WH4dS4aVM.roa (raw, json)
Hash identifier: fuzry+pHrE8Q6u8ogsbAh9RxOZYefkESUqqX7s8GdU0=
Subject key identifier: 58:39:33:BF:7D:80:A7:F0:05:E3:8C:96:3B:D5:87:E1:D4:B8:69:53
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0CAE
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/WDkzv32Ap_AF44yWO9WH4dS4aVM.roa
Signing time: Mon 16 Nov 2020 06:49:38 +0000
ROA not before: Mon 16 Nov 2020 06:49:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18180
IP address blocks: 2404:178:42::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3246 (0xcae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Nov 16 06:49:38 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=583933BF7D80A7F005E38C963BD587E1D4B86953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:e7:8a:06:0d:a3:fa:02:86:2b:75:cc:f6:
28:a5:50:3a:3c:6d:ba:69:56:a9:40:bb:54:e7:eb:
61:46:1b:cc:33:4d:9d:d7:ea:f9:fb:d2:c3:fb:97:
a0:1f:a7:1e:f9:4c:ff:55:55:18:a0:b2:40:12:ec:
a7:f1:f3:ad:16:80:9f:6a:59:61:ba:ca:6e:aa:2c:
d0:43:23:87:ff:a8:57:df:b9:b1:ab:57:0b:47:0a:
df:ba:e0:b1:44:7c:7a:83:a4:2b:17:94:a2:93:11:
26:e4:d9:4e:49:cc:9d:48:78:56:d1:6e:92:f1:59:
1c:88:f1:bb:8f:c5:53:e1:99:6f:71:2d:96:52:94:
39:83:f1:23:c9:c9:62:b1:fa:bd:5f:f9:c7:51:1d:
ea:2f:32:3f:38:52:1e:74:29:98:6f:76:4d:5b:70:
15:87:37:53:6c:14:74:25:24:36:56:8f:c7:d4:6a:
21:a7:cc:90:f5:bb:8e:c4:77:e4:a2:88:1d:6e:4b:
da:d8:d9:38:bb:78:16:dc:16:a1:0e:2a:08:10:5e:
09:33:60:f1:85:41:5c:5e:f6:bf:cb:e2:af:74:ae:
86:20:b4:22:0e:8d:a4:b9:41:2c:ee:5a:83:5d:71:
71:df:f2:43:fc:a6:f7:f7:96:00:1c:b3:af:53:17:
d3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:39:33:BF:7D:80:A7:F0:05:E3:8C:96:3B:D5:87:E1:D4:B8:69:53
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/WDkzv32Ap_AF44yWO9WH4dS4aVM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178:42::/48
Signature Algorithm: sha256WithRSAEncryption
ac:ed:31:58:c7:fe:db:60:41:66:67:7d:ed:de:f1:cd:d2:87:
3f:fb:53:01:9a:d8:79:c9:b8:57:96:ea:85:df:76:6b:44:5f:
61:cd:35:0b:3d:9e:f6:59:ff:bd:49:69:10:79:f1:20:08:af:
18:4b:93:72:eb:fa:20:e4:18:5c:3a:e0:86:a1:a6:08:13:e9:
40:6a:9f:61:f3:ca:3d:35:51:0c:11:c7:7b:73:9d:f8:00:d0:
7a:6d:0d:39:85:4f:f1:73:64:83:55:2e:99:64:62:97:a5:95:
c0:ea:53:4d:cb:68:c7:9e:2a:9e:86:fa:17:c8:d7:42:1f:30:
8a:61:5b:be:8f:ef:95:1f:8c:63:b2:e7:74:c0:b7:c0:2b:d2:
e7:e2:df:df:2d:e9:81:87:4b:80:21:76:3b:41:56:e7:bd:90:
b2:19:b0:e3:f3:39:80:a7:05:c2:e3:79:28:5c:25:06:20:5f:
5f:7e:ef:95:3a:f5:69:64:ac:b9:b1:fa:95:88:fc:6c:e1:b2:
ff:62:f7:87:7a:e1:45:1b:f1:18:5f:b0:8d:61:13:01:6f:4a:
3a:ec:2a:4c:aa:75:0d:9c:65:d8:fc:50:2f:6b:5c:e0:f8:46:
bb:06:33:a4:51:9e:a7:cd:74:78:e5:7b:cb:d5:f0:ab:f8:db:
18:c8:89:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org