Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/_eTFUy9X3inWLCBdCmFLu0tAgtU.roa
File: _eTFUy9X3inWLCBdCmFLu0tAgtU.roa (raw, json)
Hash identifier: SjL1cB5njVWeI/ckxQ/FaJmmF/ILXX6iUDmTrUoW98s=
Subject key identifier: FD:E4:C5:53:2F:57:DE:29:D6:2C:20:5D:0A:61:4B:BB:4B:40:82:D5
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0C8A
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/_eTFUy9X3inWLCBdCmFLu0tAgtU.roa
Signing time: Mon 16 Nov 2020 06:45:00 +0000
ROA not before: Mon 16 Nov 2020 06:45:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18180
IP address blocks: 2404:178:24::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3210 (0xc8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Nov 16 06:45:00 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FDE4C5532F57DE29D62C205D0A614BBB4B4082D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:db:78:00:87:74:33:e0:7f:dd:72:c0:f4:
1c:64:bf:64:59:48:c2:63:de:6a:66:f0:1c:25:7c:
20:6d:9e:88:25:2d:22:c5:92:18:25:e7:15:93:19:
a6:0b:97:a0:86:83:7c:41:9c:0e:9c:41:3a:7b:b9:
55:e9:6d:1d:1a:a8:fc:83:ed:98:33:20:e0:03:a2:
67:8a:d8:46:9c:64:dc:c8:e4:91:da:7f:77:a0:4c:
47:1c:14:a8:60:fe:f5:3f:2d:40:91:ea:5b:17:1c:
83:72:0f:4f:b1:94:31:ff:8b:f6:18:f5:9d:bd:90:
25:dc:b3:3a:fa:9c:53:3f:0b:ca:29:e9:dd:29:7c:
2e:6c:f9:9e:be:72:44:55:e1:57:45:89:e4:7c:e4:
6f:f5:94:4a:05:61:39:62:fd:97:40:91:ff:3b:13:
c0:9c:b3:a3:77:e7:7e:08:e5:0a:86:84:51:ef:a7:
07:90:ab:9b:40:c9:dc:e7:de:58:82:92:cb:ab:0d:
1d:ab:da:65:ca:4a:99:62:d8:d2:a2:ff:9d:15:7d:
95:57:da:24:df:d4:c3:07:de:94:ee:2e:5f:8e:98:
9c:2e:e9:37:7a:c4:64:06:b3:01:da:82:49:42:d8:
21:23:cc:ee:fe:f4:06:60:15:89:06:fa:1c:03:f0:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E4:C5:53:2F:57:DE:29:D6:2C:20:5D:0A:61:4B:BB:4B:40:82:D5
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/_eTFUy9X3inWLCBdCmFLu0tAgtU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178:24::/48
Signature Algorithm: sha256WithRSAEncryption
9a:60:48:93:82:d7:8b:6f:60:a6:58:a4:1d:52:53:af:bb:fc:
dd:f5:8f:ed:54:30:6e:c2:ba:d0:af:48:eb:4d:0d:e4:a0:3b:
54:35:d1:45:c6:ce:6f:13:0a:28:e0:7d:23:d5:3a:45:ee:ed:
f8:42:34:ad:19:a2:96:32:86:ff:51:46:ac:36:ee:1c:21:8c:
b5:d7:ad:74:af:ac:a6:cc:ac:81:3c:51:a6:7d:d0:bd:c8:b2:
24:a7:f9:c3:05:2b:e7:e6:e2:41:bb:70:4b:66:92:02:3a:64:
0c:52:3e:16:fb:4e:18:84:64:d6:fa:12:1d:ec:ac:c1:d7:40:
b4:ce:96:6b:c6:ce:be:29:e5:54:40:81:44:d3:4a:6b:26:93:
32:21:85:0f:ed:5c:35:af:7c:9e:55:7f:2e:56:80:b6:c5:ee:
dc:00:48:b2:c6:59:cf:d8:42:fe:6e:3d:b2:df:e8:5a:b3:92:
7c:27:cb:8c:a2:cd:02:60:5d:bc:6e:c6:10:56:8e:46:70:0a:
7c:93:e8:0d:e1:58:50:e9:f2:ce:47:38:06:42:0f:05:a0:68:
13:6b:cc:b2:98:99:ab:58:eb:e3:51:69:33:a3:aa:99:ef:d2:
6b:15:c0:f8:4e:55:96:07:09:e9:16:a0:9f:f1:0a:12:79:bd:
9b:a4:90:16
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB
OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMDExMTYw
NjQ1MDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZERTRDNTUzMkY1N0RF
MjlENjJDMjA1RDBBNjE0QkJCNEI0MDgyRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDD1Nt4AId0M+B/3XLA9Bxkv2RZSMJj3mpm8BwlfCBtnoglLSLF
khgl5xWTGaYLl6CGg3xBnA6cQTp7uVXpbR0aqPyD7ZgzIOADomeK2EacZNzI5JHa
f3egTEccFKhg/vU/LUCR6lsXHINyD0+xlDH/i/YY9Z29kCXcszr6nFM/C8op6d0p
fC5s+Z6+ckRV4VdFieR85G/1lEoFYTli/ZdAkf87E8Ccs6N3534I5QqGhFHvpweQ
q5tAydzn3liCksurDR2r2mXKSpli2NKi/50VfZVX2iTf1MMH3pTuLl+OmJwu6Td6
xGQGswHagklC2CEjzO7+9AZgFYkG+hwD8AY7AgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU/eTFUy9X3inWLCBdCmFLu0tAgtUwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0
p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv
MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9fZVRGVXk5WDNpbldMQ0JkQ21G
THUwdEFndFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAQB
eAAkMA0GCSqGSIb3DQEBCwUAA4IBAQCaYEiTgteLb2CmWKQdUlOvu/zd9Y/tVDBu
wrrQr0jrTQ3koDtUNdFFxs5vEwoo4H0j1TpF7u34QjStGaKWMob/UUasNu4cIYy1
1610r6ymzKyBPFGmfdC9yLIkp/nDBSvn5uJBu3BLZpICOmQMUj4W+04YhGTW+hId
7KzB10C0zpZrxs6+KeVUQIFE00prJpMyIYUP7Vw1r3yeVX8uVoC2xe7cAEiyxlnP
2EL+bj2y3+has5J8J8uMos0CYF28bsYQVo5GcAp8k+gN4VhQ6fLORzgGQg8FoGgT
a8yymJmrWOvjUWkzo6qZ79JrFcD4TlWWBwnpFqCf8QoSeb2bpJAW
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org