Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/qWQ6_vgCj-t7n3jPbLIsRH2rIxg.roa
File: qWQ6_vgCj-t7n3jPbLIsRH2rIxg.roa (raw, json)
Hash identifier: p891w/NZxDRM1jxfigPaxBWKs5Fvp+G0sbFkTRgjmFA=
Subject key identifier: A9:64:3A:FE:F8:02:8F:EB:7B:9F:78:CF:6C:B2:2C:44:7D:AB:23:18
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0C72
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/qWQ6_vgCj-t7n3jPbLIsRH2rIxg.roa
Signing time: Mon 16 Nov 2020 06:12:00 +0000
ROA not before: Mon 16 Nov 2020 06:12:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18180
IP address blocks: 2404:178:12::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3186 (0xc72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Nov 16 06:12:00 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A9643AFEF8028FEB7B9F78CF6CB22C447DAB2318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:34:b2:52:21:d4:67:83:bd:21:da:87:2d:
fb:28:72:79:f1:1f:e9:45:6d:14:78:1e:61:b2:c0:
26:40:51:99:f7:ec:d7:b7:aa:5e:6e:6c:6d:da:e9:
45:dc:55:37:20:8a:a5:01:98:c9:59:f1:ec:53:27:
96:94:aa:c5:8f:a3:90:60:ed:01:a7:35:f9:06:1e:
ee:9b:96:d4:92:ed:0e:99:89:95:1b:d7:36:6c:15:
b8:a6:ed:3b:2d:6d:41:bf:ae:a1:bd:b3:02:a8:85:
10:10:a1:df:7f:5c:98:7a:c4:59:3d:04:83:a0:72:
2d:5c:69:f3:c2:71:b3:82:4c:5d:af:be:28:5e:d7:
79:82:f2:cd:4f:7d:b2:06:c4:17:a8:e5:7b:09:21:
89:85:a6:f4:6e:e5:d9:5c:d9:53:f1:e4:1f:14:50:
d7:1a:b1:55:9c:50:08:3c:31:c8:a8:1c:ef:e9:24:
65:76:07:b3:b7:d8:07:1f:95:07:3d:6f:ab:e5:f2:
17:9e:12:93:1c:27:84:c0:5c:69:63:1e:dd:ef:4e:
30:9d:df:13:7f:cd:a5:cc:bc:88:bd:06:77:88:26:
f8:86:70:0f:df:c5:b2:67:92:62:69:b1:e3:7c:b6:
1d:da:0d:1f:20:0e:18:27:fd:f2:55:49:8a:3c:68:
f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:64:3A:FE:F8:02:8F:EB:7B:9F:78:CF:6C:B2:2C:44:7D:AB:23:18
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/qWQ6_vgCj-t7n3jPbLIsRH2rIxg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178:12::/48
Signature Algorithm: sha256WithRSAEncryption
ba:a2:fe:bc:8e:df:e0:b1:07:8b:04:3b:c5:e8:48:d0:23:16:
28:bd:e6:31:32:44:98:7f:1a:6f:8e:53:99:af:89:c7:40:9b:
0f:29:60:d4:76:7f:fe:c9:68:b4:c4:05:38:98:15:bc:3b:8b:
93:50:24:59:f8:ef:24:19:b4:61:9a:d0:28:cd:4e:4c:4d:73:
63:15:27:da:ec:4c:4b:b2:cd:5f:c7:11:2e:02:72:5b:b6:39:
6d:8f:12:f1:d5:b9:5e:4e:11:0f:e9:54:38:a9:93:c8:bf:64:
2d:2b:b4:c7:6f:1d:78:41:02:b0:57:eb:2f:da:e5:14:9a:77:
e2:94:66:71:6c:31:6d:bc:4d:87:ec:a6:3a:b8:5c:62:be:b1:
c7:52:14:5c:b8:e2:33:13:30:fe:8e:5f:31:20:3c:6b:a7:8c:
c2:d5:e8:c7:cf:36:80:bb:eb:24:9a:c5:78:15:3c:66:58:67:
e7:c1:ae:29:77:08:85:57:a3:a6:36:40:a6:f3:f1:52:00:af:
3e:19:33:a1:37:2c:77:f3:c9:3a:08:01:14:ea:65:bf:25:36:
ea:9e:11:f7:8e:fd:24:d4:8d:64:f7:fa:a3:13:d2:7f:0b:db:
cf:6f:6f:d3:11:c3:74:4f:f3:19:fa:9f:10:79:8f:55:e5:68:
52:5d:43:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org