Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/noSPjT_5S_OlviT9JcRp-_gRurI.roa
File: noSPjT_5S_OlviT9JcRp-_gRurI.roa (raw, json)
Hash identifier: Ssip0a5/EyWztzd8E1v8AMbuKsXZiMOMy0kIFVvySfU=
Subject key identifier: 9E:84:8F:8D:3F:F9:4B:F3:A5:BE:24:FD:25:C4:69:FB:F8:11:BA:B2
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0C92
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/noSPjT_5S_OlviT9JcRp-_gRurI.roa
Signing time: Mon 16 Nov 2020 06:45:39 +0000
ROA not before: Mon 16 Nov 2020 06:45:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18180
IP address blocks: 2404:178:28::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3218 (0xc92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Nov 16 06:45:39 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9E848F8D3FF94BF3A5BE24FD25C469FBF811BAB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:97:6b:0f:26:6b:4f:54:52:59:9c:4a:30:
bf:cb:2e:62:ad:0f:90:08:01:b6:4a:45:11:b4:e3:
60:26:23:00:83:1e:3d:23:a3:09:74:11:79:57:9e:
0d:d6:d6:67:ac:ad:1d:37:fa:49:d0:c8:77:cc:b4:
e5:90:0b:67:e8:c4:99:43:c8:f4:3f:d3:f0:78:72:
be:3e:77:48:37:80:f7:52:88:bb:e7:af:f6:73:57:
ee:c9:e1:84:6e:72:91:12:33:bb:e5:cd:91:79:d0:
50:1a:33:17:cd:85:fb:8f:dd:e6:38:82:24:9c:a4:
80:02:64:32:13:24:37:0c:c8:71:0c:56:ab:bc:f4:
61:d6:2e:44:7e:60:5b:29:65:ab:df:9e:3b:53:60:
2e:7d:d5:e1:33:6e:09:b4:28:74:7a:02:f8:b6:4a:
02:b1:20:1b:1a:5c:95:9f:4d:c4:b4:c0:cc:89:40:
c7:0b:be:26:79:b9:b1:ab:81:1d:e1:ea:03:49:7d:
fd:b4:26:57:3e:b4:b3:e4:a8:02:df:ab:95:2a:9e:
26:3e:46:01:ed:6e:8d:9c:3c:d9:5e:bf:a8:83:44:
9b:9e:ca:c5:58:72:cd:8c:99:d0:b9:01:aa:f9:b0:
a6:70:af:c6:f4:9c:09:08:52:44:bb:41:68:a2:a7:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:84:8F:8D:3F:F9:4B:F3:A5:BE:24:FD:25:C4:69:FB:F8:11:BA:B2
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/noSPjT_5S_OlviT9JcRp-_gRurI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178:28::/48
Signature Algorithm: sha256WithRSAEncryption
0d:30:d5:33:a0:c3:c9:cd:e8:4a:11:fe:c8:31:47:9b:ac:65:
e8:ba:23:ea:2d:b1:5e:73:33:34:79:cb:e4:7f:06:bc:49:9d:
fa:bc:3a:6f:7b:52:42:c5:5a:9f:20:95:91:59:95:1e:3f:79:
27:4c:01:ea:83:64:ee:28:b2:f1:f0:98:5c:e9:25:bb:35:a7:
a5:1a:df:fe:1f:44:86:ce:73:6b:b9:b4:1a:fa:73:7f:82:1c:
a0:01:3b:b9:eb:6c:be:43:06:c5:ee:39:42:b4:48:db:62:3c:
e2:22:7b:a2:27:e9:a9:9c:91:9a:b8:a9:4b:bb:c2:4c:0f:4b:
31:a2:b1:6d:a4:35:b9:03:2d:dd:ca:03:ac:6a:26:9f:25:52:
9c:12:8d:5d:8f:6f:ba:d4:4e:e1:4b:03:b1:f0:b0:9d:55:68:
1c:21:c8:28:6e:43:a4:53:aa:18:07:4f:7d:de:52:fe:a0:15:
00:8a:b7:90:03:2f:06:8a:c7:f6:d1:32:36:e0:15:ce:19:3c:
eb:d9:5f:7f:9b:13:d2:3f:6c:ee:2f:87:70:36:bc:f4:03:5b:
b9:9c:5e:06:01:4b:13:6b:81:6f:ca:f8:d8:0a:67:1f:cd:08:
f9:3a:2d:17:b0:a9:f9:c6:ae:d1:e7:38:9e:7a:20:01:18:07:
13:e3:ff:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org