Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/weq72bndL1mAqXJ6ZfikHPEBnG8.roa
File: weq72bndL1mAqXJ6ZfikHPEBnG8.roa (raw, json)
Hash identifier: gjR2NNbCiDgZqQQ77bTtdcgUG8y0J/zYoUFPcoDXcMo=
Subject key identifier: C1:EA:BB:D9:B9:DD:2F:59:80:A9:72:7A:65:F8:A4:1C:F1:01:9C:6F
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0DC7
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/weq72bndL1mAqXJ6ZfikHPEBnG8.roa
Signing time: Mon 23 Nov 2020 07:23:04 +0000
ROA not before: Mon 23 Nov 2020 07:23:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18180
IP address blocks: 2404:178:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3527 (0xdc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Nov 23 07:23:04 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C1EABBD9B9DD2F5980A9727A65F8A41CF1019C6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:ce:7d:0c:10:64:51:b1:93:78:9d:61:63:
8a:75:21:ac:5f:cf:5e:67:e3:3a:5e:68:66:1d:9f:
5c:9a:e7:2e:aa:ec:c7:e7:d8:29:53:a2:82:5b:22:
77:6d:a4:22:42:ba:cb:39:9f:04:37:1f:9f:19:6b:
c5:5f:c7:cb:79:e9:96:2d:f6:60:46:65:22:cc:5f:
e8:16:2a:5b:21:e3:a7:10:18:53:a0:95:18:81:70:
f3:23:ad:0d:69:f7:86:56:96:ba:7a:d9:82:05:17:
0f:68:29:65:b2:0e:7a:cd:78:b4:63:49:cc:79:40:
8c:16:83:19:f9:79:4a:7d:0c:4e:e2:ad:45:c5:72:
99:25:bb:55:7d:e4:4e:c1:c5:23:df:15:9d:67:8f:
15:8f:44:d7:47:2e:62:2f:20:ed:3a:58:9f:6e:5c:
06:e7:fd:87:1e:95:be:35:14:fc:b4:26:1c:bf:d3:
ad:38:a1:5f:bf:e2:ff:c1:2f:a1:76:b3:57:59:09:
57:11:07:b6:d0:ec:e6:ad:28:53:b5:c7:e5:66:ab:
0d:b9:50:9b:1e:1d:17:98:d7:24:a6:ba:b6:7a:2b:
06:2a:20:6a:e1:99:df:e7:10:1e:46:e1:c2:32:8b:
ec:f4:b0:95:02:09:d8:23:f9:a4:40:58:b9:75:fd:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EA:BB:D9:B9:DD:2F:59:80:A9:72:7A:65:F8:A4:1C:F1:01:9C:6F
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/weq72bndL1mAqXJ6ZfikHPEBnG8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178:9::/48
Signature Algorithm: sha256WithRSAEncryption
7e:d3:56:f8:61:a3:68:e8:7a:29:b9:7a:ff:19:cf:8e:43:ae:
45:98:76:c0:94:dd:c0:e7:eb:f4:1f:dc:ed:ef:d9:62:f2:2b:
bc:64:cd:8a:f9:c3:eb:7f:ac:0f:f0:0d:67:a4:60:e6:1e:e8:
50:03:e1:90:1e:4b:62:4d:f4:1c:14:9e:68:da:c2:99:24:93:
c3:3d:68:40:41:ce:1b:7f:38:0d:91:17:15:22:35:10:ac:5a:
b9:b2:e1:df:3b:ab:6e:57:33:84:32:54:cc:35:6b:97:ac:7c:
f0:0a:8c:2c:33:2d:1f:97:e5:a0:e8:d5:82:16:1c:d0:52:34:
2c:8c:1e:0c:9b:de:3e:4d:e0:99:1d:3e:4b:e2:33:a4:1f:cf:
76:eb:d1:26:f4:bc:ae:ae:b0:59:37:e8:8e:15:5f:af:2a:3e:
4d:e7:a2:7a:ba:68:a4:d0:c1:c0:af:ae:20:24:32:dc:7c:5e:
b3:b1:42:db:40:2c:86:31:af:b1:7e:aa:1c:67:9a:e4:96:27:
28:64:79:64:4d:c1:ba:5f:8d:48:1c:43:67:8d:10:22:e6:8a:
0c:ee:03:fa:72:bc:09:2f:0e:74:23:a9:62:b2:d0:4e:e2:e1:
67:1d:99:c1:a8:f6:0d:c4:59:e3:bf:50:0f:b9:e0:79:79:0a:
7a:ce:bc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:20 2025 by rpki-client