Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/w1MH9szR5Ls-UdbyfYRSVtttrC8.roa
File: w1MH9szR5Ls-UdbyfYRSVtttrC8.roa (raw, json)
Hash identifier: oIPoanGHkeI0tcki0Ovrim8udztDJkPlpavvgWpF8aM=
Subject key identifier: C3:53:07:F6:CC:D1:E4:BB:3E:51:D6:F2:7D:84:52:56:DB:6D:AC:2F
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0CB4
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/w1MH9szR5Ls-UdbyfYRSVtttrC8.roa
Signing time: Mon 16 Nov 2020 06:50:17 +0000
ROA not before: Mon 16 Nov 2020 06:50:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18180
IP address blocks: 2404:178:45::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3252 (0xcb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Nov 16 06:50:17 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C35307F6CCD1E4BB3E51D6F27D845256DB6DAC2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f4:a0:8e:06:59:79:a4:24:e1:d0:9e:22:9d:
98:2d:37:05:4b:8d:93:3b:83:9d:f0:de:57:bf:85:
41:ae:4d:d3:4e:ab:4b:b3:4e:1c:ed:e7:3c:72:e2:
66:dc:cb:e8:9c:bf:2b:de:54:f4:5b:a2:c1:40:9e:
a3:03:53:fa:5a:c5:83:d6:06:94:71:9b:da:42:94:
cc:21:11:6b:ce:02:2b:19:c9:fe:e6:1c:36:39:3e:
29:30:7e:20:52:1c:07:af:0d:b1:de:2e:be:ea:02:
36:f0:5a:79:f9:ff:b5:cd:75:6b:9e:08:c7:66:cc:
53:a8:73:61:60:0c:f0:77:74:8d:e3:6a:37:c3:fe:
07:0c:fd:0c:5a:a5:bb:bf:16:d9:6f:85:29:52:66:
32:5b:73:a5:79:a8:dc:62:2b:3b:46:1b:f1:e7:c4:
12:20:9b:e8:a2:a0:76:18:8a:9b:fe:c8:57:60:ef:
fc:a4:1b:5f:e4:66:39:43:6a:60:7e:50:f7:c5:7f:
2c:62:79:f0:d9:29:a5:53:ca:9e:05:d8:28:59:1a:
23:71:1b:5c:60:5a:b2:e1:a0:30:a2:4f:1f:c7:3a:
d1:ac:8b:d2:40:da:b8:7e:91:10:62:e1:dd:1c:c5:
1b:2f:ae:7c:1d:6e:2f:4d:08:bb:24:73:9c:91:a3:
7c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:53:07:F6:CC:D1:E4:BB:3E:51:D6:F2:7D:84:52:56:DB:6D:AC:2F
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/w1MH9szR5Ls-UdbyfYRSVtttrC8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178:45::/48
Signature Algorithm: sha256WithRSAEncryption
8a:32:20:52:d3:ad:23:5d:4c:52:29:2d:ca:14:3a:93:33:49:
0d:55:4b:5c:a1:5b:03:53:d6:ef:ae:c8:a0:e2:dc:af:11:43:
30:a0:1b:ea:97:10:40:e1:2a:08:83:94:be:2e:9f:8f:c8:c9:
3e:c3:90:96:b1:b2:1e:2c:f0:67:fe:cc:53:0b:19:af:f9:35:
b5:16:b3:d6:3e:a3:70:58:ba:6b:fc:5f:7b:82:7e:4f:dd:5a:
30:03:40:7b:27:71:34:25:38:80:f1:89:b5:79:9c:b0:13:10:
bf:c8:cc:d0:73:65:34:99:a9:69:a8:04:6b:fa:52:d8:fc:ad:
86:f6:7e:24:5e:1a:4b:b2:4b:d2:be:ab:55:82:d7:0e:c5:c1:
cf:4e:37:43:e8:8f:0e:05:fd:3f:c9:97:4c:bc:80:55:1d:c9:
2f:e9:8c:f9:b1:4d:0a:1f:e9:6d:f1:83:68:83:86:4b:7e:d3:
7d:ec:2e:01:00:05:c1:ff:13:dd:e9:28:6d:dc:8f:f5:37:0f:
87:2b:c8:5e:47:df:b8:52:ed:a4:f9:ef:88:f4:8c:29:dd:95:
5c:dd:58:38:60:78:62:0a:76:31:fb:5b:ac:6d:41:e7:a4:73:
52:9c:81:5a:0c:72:a5:4d:1f:3e:a7:54:32:41:97:63:a1:85:
ed:d7:ea:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org