Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/vpE9x9bgaVwgW69E6D6y76LwDjs.roa
File: vpE9x9bgaVwgW69E6D6y76LwDjs.roa (raw, json)
Hash identifier: FMEgwfd2dB6i/02NEYTAIfJszFXPir5MVNxsb90ZBqE=
Subject key identifier: BE:91:3D:C7:D6:E0:69:5C:20:5B:AF:44:E8:3E:B2:EF:A2:F0:0E:3B
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0C8E
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/vpE9x9bgaVwgW69E6D6y76LwDjs.roa
Signing time: Mon 16 Nov 2020 06:45:20 +0000
ROA not before: Mon 16 Nov 2020 06:45:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18180
IP address blocks: 2404:178:26::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3214 (0xc8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Nov 16 06:45:20 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BE913DC7D6E0695C205BAF44E83EB2EFA2F00E3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:97:47:4a:35:be:8a:6c:a3:fb:42:34:c8:
cc:23:5d:8e:1f:69:2c:10:68:de:d8:f1:e8:b3:de:
50:f9:18:af:34:ca:8e:30:a9:68:ad:ba:7e:28:c7:
47:89:23:d7:37:cd:de:df:73:ba:a1:bd:7c:73:e9:
e3:80:e1:fc:d3:b2:62:f0:2f:3d:30:c6:6b:65:d7:
ae:2b:d6:a1:d5:5c:e0:e2:93:c5:69:6a:b2:e8:2a:
8b:19:ae:8a:2b:60:3c:3f:5f:c8:7b:82:b6:14:24:
86:98:76:3d:56:f9:aa:c6:58:3e:7f:52:cc:f9:82:
c8:1b:d8:21:b6:6f:88:28:89:9d:37:49:b4:cb:4a:
2c:92:ec:f5:f9:af:18:34:98:88:d7:21:fa:7e:7f:
86:78:ae:4a:e1:cd:8e:27:f3:6e:72:36:4a:73:d8:
db:39:6b:8a:91:1a:f3:0a:3d:28:88:7b:0b:77:bb:
b6:0a:a7:cc:35:91:40:dc:72:5f:20:16:c1:6b:b8:
ed:ac:fb:b8:52:6f:00:3a:71:e0:5a:ea:8b:b1:2a:
32:1f:04:15:82:22:3c:f8:d9:df:cb:e4:cd:4d:33:
d9:95:7b:a1:b2:83:16:77:0e:25:e3:db:30:b7:fc:
fd:64:d8:05:fb:da:9d:a5:af:e0:9a:7c:14:11:9f:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:91:3D:C7:D6:E0:69:5C:20:5B:AF:44:E8:3E:B2:EF:A2:F0:0E:3B
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/vpE9x9bgaVwgW69E6D6y76LwDjs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178:26::/48
Signature Algorithm: sha256WithRSAEncryption
0d:50:f8:4c:e9:a4:4d:3e:5a:84:ca:e6:ff:1b:2c:57:14:20:
20:0d:4d:cd:ff:18:e1:3f:99:53:b0:85:e0:53:42:d3:5e:47:
7d:3a:91:62:55:ee:22:9b:ff:e1:6c:53:eb:6f:e7:cc:50:22:
d6:5f:75:b2:c3:14:f7:80:5e:ed:c1:ac:c2:e6:a6:04:79:99:
9a:4c:5c:e2:cb:78:72:46:69:2a:f1:a3:55:95:b3:dd:70:7f:
6b:24:84:34:6e:ff:f3:e1:2b:ac:22:18:09:b8:25:3f:64:a9:
00:42:d8:a7:af:9e:4b:6f:4a:26:0e:85:8e:d7:0b:0d:44:55:
83:10:e2:7c:4f:89:ea:e4:af:78:08:72:e0:78:df:53:df:d5:
1e:19:89:66:8c:01:4d:c3:61:d0:8c:b3:22:f7:5e:78:4b:b8:
c1:6f:31:36:7c:0f:4e:aa:91:c3:5b:47:9f:87:04:9a:00:9a:
84:47:c7:b9:d3:f5:ab:13:ce:67:4d:5f:12:a8:28:e0:45:ea:
73:4b:20:0b:e7:e2:0f:5f:59:00:7f:cb:59:d4:25:fb:93:fb:
73:c6:49:bd:69:5e:ca:ab:54:38:d5:43:75:b7:69:92:65:4c:
46:de:57:64:43:02:19:85:f9:01:47:c7:94:28:61:03:f3:6c:
c4:22:f1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org