Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/XcS_6fA4OueNY1xKUlykQ41zA-E.roa
File: XcS_6fA4OueNY1xKUlykQ41zA-E.roa (raw, json)
Hash identifier: 0CpodT4CWqg3w64/37VvRdapgQ1i0J4rSdwrwORWU90=
Subject key identifier: 5D:C4:BF:E9:F0:38:3A:E7:8D:63:5C:4A:52:5C:A4:43:8D:73:03:E1
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0C84
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/XcS_6fA4OueNY1xKUlykQ41zA-E.roa
Signing time: Mon 16 Nov 2020 06:13:49 +0000
ROA not before: Mon 16 Nov 2020 06:13:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18180
IP address blocks: 2404:178:21::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3204 (0xc84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Nov 16 06:13:49 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5DC4BFE9F0383AE78D635C4A525CA4438D7303E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:b5:2e:d9:7f:cf:5f:ac:5f:5e:1a:e4:56:
55:5f:33:8a:2f:33:01:e2:94:52:2f:c0:02:cb:10:
df:f7:fb:ba:c3:b2:6a:df:a9:4a:8c:a7:21:4a:01:
2d:7e:13:c4:be:53:d5:9c:d4:5f:43:73:76:ef:03:
85:72:71:8c:84:55:7b:67:33:bc:b7:62:fb:33:36:
f5:33:5c:e0:43:83:9f:5d:49:18:fb:7b:99:05:b3:
81:d9:49:3d:8f:ac:35:66:f5:c8:bc:63:3c:31:41:
d0:98:ee:c7:7b:1b:a6:b0:3c:84:d3:a2:a0:cb:83:
24:cc:cb:6a:6b:cb:4f:2a:fc:41:4c:11:ae:73:bd:
fc:e9:38:36:cd:3e:d1:6f:dc:f5:fe:a4:df:36:f3:
a9:ca:8e:6f:5a:f4:f5:91:ac:e9:4f:33:16:9c:83:
e3:48:e7:da:00:a0:db:9c:e3:c7:4c:12:0b:b4:12:
45:62:77:d5:f6:be:c0:3b:b2:5f:2f:f6:05:3b:d6:
17:e3:32:24:9e:20:bc:58:70:7f:30:66:4a:0a:b8:
7d:2b:7c:d1:93:1a:45:db:a7:58:6b:18:96:ae:7c:
ee:d4:79:d2:63:47:b1:53:04:41:a0:35:d6:d1:ce:
f9:97:bf:02:1c:9f:54:ba:0e:cd:78:99:4b:b2:cf:
a2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C4:BF:E9:F0:38:3A:E7:8D:63:5C:4A:52:5C:A4:43:8D:73:03:E1
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/XcS_6fA4OueNY1xKUlykQ41zA-E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178:21::/48
Signature Algorithm: sha256WithRSAEncryption
56:ae:cb:05:fa:4f:c5:d2:ed:d0:34:7c:26:e5:43:ca:bd:75:
52:b3:b6:5e:fc:46:d8:7e:4b:c0:3f:18:1c:da:54:40:ac:68:
46:33:b9:fe:6a:36:e9:11:3e:7e:50:08:92:cd:c7:9c:8f:48:
9f:9e:7d:6e:68:0b:76:26:3a:24:26:f7:dd:ea:df:84:9e:03:
ae:c6:78:47:8d:81:fb:e9:50:34:78:ac:58:9c:29:82:3e:c8:
7e:22:d8:2c:fd:ce:21:9c:36:ea:bb:4f:f9:6c:91:b9:01:e0:
62:d5:27:7d:17:90:2c:ae:7f:73:73:a7:ca:45:31:b6:13:5b:
c9:b9:03:48:b8:a5:14:2f:7d:e7:db:70:81:2c:15:35:6f:08:
d6:ec:39:ac:1f:4f:0b:d9:2b:e3:c0:01:da:77:70:43:32:c6:
b3:79:84:fe:85:4d:2b:fc:14:9e:d8:2b:72:40:bd:d2:76:5e:
c3:ed:ec:75:e8:bf:64:46:47:a8:c0:ed:10:9d:a6:8b:b4:54:
36:9b:43:59:bc:fd:40:e5:38:6e:2b:92:34:10:f4:af:35:27:
0b:2c:65:33:9c:c2:d0:63:bc:ea:a1:f0:9c:6e:64:3d:0c:8e:
34:9b:3c:5a:63:7a:c8:e2:fb:7f:de:7e:ad:f7:b8:c7:82:b6:
12:60:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org