Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/jzorXDTssZbbJ5r85DShd3DAk4c.roa
File: jzorXDTssZbbJ5r85DShd3DAk4c.roa (raw, json)
Hash identifier: 1ZrVVZRmFonDPUvm6aYO9RWjQODi5rYx7xeJx/vePzI=
Subject key identifier: 8F:3A:2B:5C:34:EC:B1:96:DB:27:9A:FC:E4:34:A1:77:70:C0:93:87
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0CBA
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/jzorXDTssZbbJ5r85DShd3DAk4c.roa
Signing time: Mon 16 Nov 2020 06:50:49 +0000
ROA not before: Mon 16 Nov 2020 06:50:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18180
IP address blocks: 2404:178:48::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3258 (0xcba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Nov 16 06:50:49 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8F3A2B5C34ECB196DB279AFCE434A17770C09387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:12:38:0a:38:c0:29:8d:74:99:49:f3:37:
0e:19:91:2b:23:bf:38:ac:90:ed:15:20:bc:00:96:
09:cb:bb:18:72:93:51:e1:41:5d:ca:7f:c0:a8:76:
84:1f:75:86:ca:e6:c5:2e:f1:69:88:52:ee:7d:e8:
65:ab:70:85:e0:49:73:15:fb:14:bb:f4:46:7c:1e:
05:bd:54:1a:a3:8c:d1:8a:1a:d1:77:ca:8a:62:f1:
fd:7f:16:71:2a:7c:c1:05:00:29:18:ea:ac:e9:a7:
41:e0:88:56:38:eb:d4:dd:90:c6:c9:27:4f:14:a2:
bd:57:85:78:71:95:5f:1a:20:18:b0:45:0e:ef:df:
0e:8b:7b:ee:9b:74:9e:76:13:72:9d:e9:f8:df:bf:
19:24:d0:81:6d:01:4c:32:a7:34:90:c2:1e:83:3c:
29:40:0e:45:1e:c7:57:33:a9:21:7d:c4:ba:05:96:
55:bd:4e:6c:06:2c:be:2f:e3:1c:1b:d1:d9:b6:37:
c6:49:a7:f1:55:53:5e:89:32:2a:96:f6:ec:e1:e6:
26:a4:4a:74:14:4b:00:15:c5:dd:f0:b8:61:a8:30:
c2:80:cc:23:9c:47:32:43:ff:db:df:a8:a1:22:72:
db:96:b1:38:59:21:1b:2a:9c:cb:d6:2b:09:38:30:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3A:2B:5C:34:EC:B1:96:DB:27:9A:FC:E4:34:A1:77:70:C0:93:87
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/jzorXDTssZbbJ5r85DShd3DAk4c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178:48::/48
Signature Algorithm: sha256WithRSAEncryption
74:f3:33:5b:59:8e:cd:52:a1:9f:97:c7:97:42:cc:8d:47:20:
5d:70:3f:d9:7c:4d:08:5a:18:7e:ad:c8:dc:a3:82:1d:09:44:
be:b3:9d:b7:5e:92:ac:68:c6:1b:92:43:b4:b0:1b:28:8f:5f:
40:77:9a:72:0d:af:d5:bd:2d:44:a4:d3:b5:21:aa:1b:2f:eb:
e7:06:ae:6a:f5:37:ba:38:c0:57:8c:c7:c2:64:3d:ca:f8:05:
a3:83:59:f8:cd:17:6c:17:51:75:66:3e:7c:84:18:9b:b6:d4:
60:6f:d4:28:ca:97:32:5d:59:00:1a:ec:cc:7b:24:89:af:ec:
2a:67:d9:bf:31:0c:a8:87:b5:6a:3c:45:7c:02:e5:7a:40:c8:
fa:ee:a3:1b:d5:0a:11:70:36:a5:52:1f:05:67:61:2b:7b:b1:
99:9e:5b:e5:fc:a9:21:ce:f4:e3:17:08:b8:92:34:16:db:99:
d3:60:49:1f:c2:48:1b:7e:13:e9:e6:52:5e:47:e5:90:e3:30:
98:44:0f:d6:66:8d:e8:9a:22:67:77:29:fc:5b:ab:f6:bd:56:
54:5f:2a:3a:cb:82:50:7a:69:59:6e:16:f4:0f:44:4b:8f:93:
73:76:23:e3:18:b3:0a:b9:1b:82:c1:a2:6b:d3:f7:c0:75:1d:
cf:b7:fa:f4
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDLowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB
OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMDExMTYw
NjUwNDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDhGM0EyQjVDMzRFQ0Ix
OTZEQjI3OUFGQ0U0MzRBMTc3NzBDMDkzODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBTxI4CjjAKY10mUnzNw4ZkSsjvziskO0VILwAlgnLuxhyk1Hh
QV3Kf8CodoQfdYbK5sUu8WmIUu596GWrcIXgSXMV+xS79EZ8HgW9VBqjjNGKGtF3
yopi8f1/FnEqfMEFACkY6qzpp0HgiFY469TdkMbJJ08Uor1XhXhxlV8aIBiwRQ7v
3w6Le+6bdJ52E3Kd6fjfvxkk0IFtAUwypzSQwh6DPClADkUex1czqSF9xLoFllW9
TmwGLL4v4xwb0dm2N8ZJp/FVU16JMiqW9uzh5iakSnQUSwAVxd3wuGGoMMKAzCOc
RzJD/9vfqKEictuWsThZIRsqnMvWKwk4MEdLAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUjzorXDTssZbbJ5r85DShd3DAk4cwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0
p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv
MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9qem9yWERUc3NaYmJKNXI4NURT
aGQzREFrNGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAQB
eABIMA0GCSqGSIb3DQEBCwUAA4IBAQB08zNbWY7NUqGfl8eXQsyNRyBdcD/ZfE0I
Whh+rcjco4IdCUS+s523XpKsaMYbkkO0sBsoj19Ad5pyDa/VvS1EpNO1IaobL+vn
Bq5q9Te6OMBXjMfCZD3K+AWjg1n4zRdsF1F1Zj58hBibttRgb9QoypcyXVkAGuzM
eySJr+wqZ9m/MQyoh7VqPEV8AuV6QMj67qMb1QoRcDalUh8FZ2Ere7GZnlvl/Kkh
zvTjFwi4kjQW25nTYEkfwkgbfhPp5lJeR+WQ4zCYRA/WZo3omiJndyn8W6v2vVZU
Xyo6y4JQemlZbhb0D0RLj5NzdiPjGLMKuRuCwaJr0/fAdR3Pt/r0
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org