Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/YyYPUrECYNr65gupshA1TuZZ5KY.roa
File: YyYPUrECYNr65gupshA1TuZZ5KY.roa (raw, json)
Hash identifier: zEKFrv02+H71Z2tQSvasmgWXAgSVfDnZHfOojvTpz6c=
Subject key identifier: 63:26:0F:52:B1:02:60:DA:FA:E6:0B:A9:B2:10:35:4E:E6:59:E4:A6
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0C86
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/YyYPUrECYNr65gupshA1TuZZ5KY.roa
Signing time: Mon 16 Nov 2020 06:14:02 +0000
ROA not before: Mon 16 Nov 2020 06:14:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18180
IP address blocks: 2404:178:22::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3206 (0xc86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Nov 16 06:14:02 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=63260F52B10260DAFAE60BA9B210354EE659E4A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:04:34:5a:a3:ba:f2:db:57:b0:f7:78:48:9e:
66:bd:8c:8e:ca:44:e8:7d:05:c0:05:62:d3:34:3e:
40:fa:7b:af:b0:33:82:29:75:30:8b:71:f0:bb:76:
cd:e2:12:ec:1f:68:39:e7:17:b6:bb:e7:b3:71:8a:
48:86:0f:6e:10:84:c6:a1:12:63:46:da:2b:8b:0a:
77:46:2c:c1:f9:a6:0a:b0:2f:cd:61:ec:6e:9a:de:
bf:4d:53:57:8c:bf:70:f2:e0:5a:ec:14:dc:34:75:
be:f7:8a:ae:69:32:f6:ab:bb:92:44:41:ea:e6:df:
e4:13:1d:ab:4c:78:97:22:1a:3e:f0:f0:6c:a1:60:
f5:1c:87:35:3d:18:fb:25:31:77:bd:5d:fe:21:f2:
83:c4:54:c0:80:a2:7c:11:23:4f:76:e0:32:72:5b:
c0:1f:e4:1d:4f:49:ec:fa:ac:2a:84:ae:8f:52:ab:
b4:e5:4a:0b:66:71:88:39:c2:6d:a9:81:85:b0:04:
29:c3:3a:23:01:be:84:52:20:5f:e3:28:dd:76:fc:
36:ef:16:35:a3:b8:f0:1b:d7:b1:2a:ac:0e:5d:03:
3f:80:95:f1:5d:5f:35:24:b0:02:10:d2:1c:4e:3c:
fa:c3:44:bb:06:36:44:59:ca:2a:be:7b:f1:63:44:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:26:0F:52:B1:02:60:DA:FA:E6:0B:A9:B2:10:35:4E:E6:59:E4:A6
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/YyYPUrECYNr65gupshA1TuZZ5KY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178:22::/48
Signature Algorithm: sha256WithRSAEncryption
09:1d:0c:ea:1f:91:b1:0d:9d:00:c3:af:23:29:06:1c:3f:18:
b4:31:84:93:55:73:af:01:3b:0a:f5:2b:df:a9:28:77:c5:c8:
01:e6:7f:75:35:6a:57:de:7d:28:7e:27:b9:53:e1:4b:fa:ef:
5d:94:c9:83:9a:cb:9e:7d:a7:3c:ce:9a:7f:42:fa:9b:95:b9:
93:7a:ae:a6:8f:e2:63:01:92:c7:9a:e3:59:05:f5:e6:93:47:
e1:6d:dc:f1:de:5a:8c:ac:cb:e5:79:45:cd:79:cc:31:f4:a1:
9f:be:88:f1:6c:95:2b:51:78:40:81:06:c8:7d:68:e0:25:c1:
ca:38:e3:cc:47:cc:19:fe:52:9c:66:00:f5:1e:14:59:0b:60:
b5:7e:36:2c:77:3d:7e:80:82:3f:a6:42:30:12:6c:e6:6c:66:
cc:5d:b9:ce:28:50:44:47:8e:47:87:a6:9c:7e:09:37:00:36:
0e:f9:84:09:c2:cd:d0:3a:db:ed:41:06:98:36:08:6e:a6:76:
83:71:9c:bf:85:5c:a7:b6:84:26:3a:e7:00:74:ba:9c:70:5b:
ee:d4:8e:f9:d1:6c:9b:a3:6e:9a:91:ca:94:15:27:69:64:ea:
97:b0:13:4f:c4:1c:76:64:35:3a:ec:66:4c:ce:4e:f5:ce:66:
d0:f4:ac:8a
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB
OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMDExMTYw
NjE0MDJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDYzMjYwRjUyQjEwMjYw
REFGQUU2MEJBOUIyMTAzNTRFRTY1OUU0QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHBDRao7ry21ew93hInma9jI7KROh9BcAFYtM0PkD6e6+wM4Ip
dTCLcfC7ds3iEuwfaDnnF7a757NxikiGD24QhMahEmNG2iuLCndGLMH5pgqwL81h
7G6a3r9NU1eMv3Dy4FrsFNw0db73iq5pMvaru5JEQerm3+QTHatMeJciGj7w8Gyh
YPUchzU9GPslMXe9Xf4h8oPEVMCAonwRI0924DJyW8Af5B1PSez6rCqEro9Sq7Tl
SgtmcYg5wm2pgYWwBCnDOiMBvoRSIF/jKN12/DbvFjWjuPAb17EqrA5dAz+AlfFd
XzUksAIQ0hxOPPrDRLsGNkRZyiq+e/FjRGWTAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUYyYPUrECYNr65gupshA1TuZZ5KYwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0
p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv
MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9ZeVlQVXJFQ1lOcjY1Z3Vwc2hB
MVR1Wlo1S1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAQB
eAAiMA0GCSqGSIb3DQEBCwUAA4IBAQAJHQzqH5GxDZ0Aw68jKQYcPxi0MYSTVXOv
ATsK9SvfqSh3xcgB5n91NWpX3n0ofie5U+FL+u9dlMmDmsuefac8zpp/QvqblbmT
eq6mj+JjAZLHmuNZBfXmk0fhbdzx3lqMrMvleUXNecwx9KGfvojxbJUrUXhAgQbI
fWjgJcHKOOPMR8wZ/lKcZgD1HhRZC2C1fjYsdz1+gII/pkIwEmzmbGbMXbnOKFBE
R45Hh6acfgk3ADYO+YQJws3QOtvtQQaYNghupnaDcZy/hVyntoQmOucAdLqccFvu
1I750Wybo26akcqUFSdpZOqXsBNPxBx2ZDU67GZMzk71zmbQ9KyK
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:29 2025 by rpki-client