Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/ZXZY3B0kewITwl392_iAqpT0d9Y.roa
File: ZXZY3B0kewITwl392_iAqpT0d9Y.roa (raw, json)
Hash identifier: hMSVoHHFraPC82RVi4nZOTeU6UgJXXitpHFpPQ5wiwA=
Subject key identifier: 65:76:58:DC:1D:24:7B:02:13:C2:5D:FD:DB:F8:80:AA:94:F4:77:D6
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0DC1
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/ZXZY3B0kewITwl392_iAqpT0d9Y.roa
Signing time: Mon 23 Nov 2020 07:22:37 +0000
ROA not before: Mon 23 Nov 2020 07:22:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18180
IP address blocks: 2404:178:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3521 (0xdc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Nov 23 07:22:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=657658DC1D247B0213C25DFDDBF880AA94F477D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:a1:73:27:58:75:75:9d:55:ec:21:8a:bf:
e2:ec:23:81:c4:3b:dc:84:20:28:dc:0a:ad:1e:ec:
6b:2c:4a:67:44:e5:a6:72:ed:66:ff:5f:2e:17:b6:
3e:b1:e1:ad:9f:ad:29:23:70:38:ac:94:92:8b:50:
43:98:0b:92:ba:34:cf:60:3b:b0:cb:e4:63:89:2e:
1b:80:b3:59:70:42:27:44:a6:a1:68:7a:34:d0:a0:
33:46:1a:fb:10:9f:08:5b:33:b2:2f:a9:e6:ca:fb:
fc:71:6e:83:3b:87:61:2a:c0:57:98:cb:fc:17:4b:
2a:04:1f:27:f5:d0:cd:df:60:dd:a3:92:22:1f:2a:
aa:fa:7d:4e:63:6f:3b:22:81:4e:78:6b:fe:c3:5c:
75:e2:43:eb:8e:84:b7:05:85:2c:1a:b7:8c:90:cd:
74:f0:2b:29:a2:89:6b:6c:0d:39:d2:2f:ed:0c:0b:
8e:fd:73:83:02:82:2b:b9:d7:48:02:c9:fd:95:39:
16:c0:81:83:5b:5c:e9:55:26:30:ca:d2:e7:64:39:
8c:3e:ab:fb:06:09:dc:f0:9f:11:a4:9d:2b:a5:4c:
19:e3:f8:2d:f0:dd:27:2b:4d:82:9c:0b:fe:2c:75:
48:a0:ac:51:e0:c8:d0:46:22:fd:9a:86:8c:b8:7b:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:76:58:DC:1D:24:7B:02:13:C2:5D:FD:DB:F8:80:AA:94:F4:77:D6
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/ZXZY3B0kewITwl392_iAqpT0d9Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178:6::/48
Signature Algorithm: sha256WithRSAEncryption
93:db:3d:8e:5b:bf:6f:ce:e2:fe:48:de:6c:fc:d7:bc:97:8c:
de:3c:ab:2c:15:b0:8c:a0:77:47:d9:36:78:a4:87:33:8a:0e:
e5:30:bb:d9:10:41:d9:56:17:6b:8e:8d:e3:eb:f6:8e:f7:50:
fc:80:d2:b9:2f:d3:8a:87:bd:58:56:c2:cf:66:16:16:f1:9a:
ba:8d:79:1b:00:df:cd:d7:e5:c0:3a:75:58:e4:f0:f4:85:3a:
87:71:ee:f2:39:d7:54:a7:94:db:4e:1a:bb:ec:54:87:47:78:
fc:87:27:3f:74:0c:a1:0c:87:b2:20:26:71:8f:d8:a5:64:f5:
27:df:95:9e:e9:df:58:8b:24:91:3a:e4:f5:27:ba:45:37:f8:
81:79:0d:52:f7:31:23:f7:76:a4:2b:30:88:a0:5b:ff:25:1a:
76:86:0d:05:c4:a6:a6:87:a8:26:3f:8a:8e:ba:78:4d:16:24:
c0:10:ed:8d:e4:79:80:e2:df:a1:2b:e0:15:9a:42:b2:57:7c:
88:47:a7:a5:22:4b:06:b5:85:03:9e:4b:64:a8:f8:69:5e:39:
30:23:40:26:2e:9f:0c:89:61:6f:2f:72:75:d5:57:2b:9d:fb:
6e:e6:e8:99:60:fc:54:80:e1:b6:1d:38:14:35:77:1f:f6:d4:
cd:32:f0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org