Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/xn9U13W1kO6_CcGl1aNOTDH1ATo.roa
File: xn9U13W1kO6_CcGl1aNOTDH1ATo.roa (raw, json)
Hash identifier: 08ZwTAirGarwmrFqTRCGCPYykV5vKzj+ekJvewHbA3c=
Subject key identifier: C6:7F:54:D7:75:B5:90:EE:BF:09:C1:A5:D5:A3:4E:4C:31:F5:01:3A
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0C45
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/xn9U13W1kO6_CcGl1aNOTDH1ATo.roa
Signing time: Tue 10 Nov 2020 06:15:05 +0000
ROA not before: Tue 10 Nov 2020 06:15:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18180
IP address blocks: 2404:178:5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3141 (0xc45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Nov 10 06:15:05 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C67F54D775B590EEBF09C1A5D5A34E4C31F5013A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:67:e8:6d:55:86:6a:ef:7e:77:3b:7a:5f:
5b:e0:7f:f8:37:59:6c:0c:64:15:55:bc:f1:fc:eb:
70:24:ae:f8:14:7d:cc:4c:bc:79:48:92:c5:6e:76:
03:c3:e9:98:d5:16:ba:97:4a:87:2d:44:79:b0:ae:
e0:28:a4:7d:90:8d:d4:da:bd:80:cb:f1:5f:12:72:
24:57:b6:75:60:80:32:c6:6f:01:74:4f:1c:cf:22:
3f:a8:5a:65:c1:a5:d4:47:ef:a4:66:d7:47:f5:ed:
39:ae:8c:8b:dc:2f:a1:f9:25:23:44:a5:44:6e:8f:
27:af:71:54:56:86:c4:a3:17:8f:89:41:2b:83:d6:
40:9a:72:69:10:53:d9:07:63:2e:98:13:49:32:60:
30:ec:27:e9:1f:5e:45:c5:5b:c0:7d:6b:ed:f7:f2:
12:be:43:6f:5f:d6:d9:51:88:a7:db:9b:05:89:32:
e6:8b:76:98:d7:05:76:61:2a:2e:a5:23:af:b2:91:
e2:10:93:23:75:b2:8f:8f:dc:b7:2f:37:79:3a:73:
ba:84:77:73:5f:41:b8:25:6e:c5:e9:c2:ba:56:33:
79:1e:90:66:47:61:b2:b2:61:2e:47:c1:5b:e3:e5:
d3:f9:a0:7a:f9:4f:0b:c7:22:c1:9b:6b:c3:9a:84:
e3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7F:54:D7:75:B5:90:EE:BF:09:C1:A5:D5:A3:4E:4C:31:F5:01:3A
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/xn9U13W1kO6_CcGl1aNOTDH1ATo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178:5::/48
Signature Algorithm: sha256WithRSAEncryption
73:b7:13:f0:db:b7:b3:1a:1e:c9:e7:b6:af:3f:e7:a2:22:58:
fe:0e:b6:7c:0c:56:67:31:6f:e5:0e:7f:ce:68:ad:e4:8a:b4:
37:46:04:05:70:73:a1:bd:be:9a:24:7c:1d:53:b5:e5:eb:84:
ec:61:75:67:de:09:c6:0b:f2:c1:ae:f8:6f:b6:42:85:ae:20:
26:e3:df:c5:80:99:c6:c0:72:8b:36:6d:54:ec:9b:88:dd:18:
cc:af:ad:41:8d:2b:6a:b7:6d:34:79:2f:01:02:74:48:3f:c2:
b2:01:d9:72:1b:ee:3b:e7:a6:84:9a:dd:77:cd:03:ac:f7:c5:
3e:c4:4c:2f:fd:41:36:5a:a2:69:3f:af:c4:6e:b6:83:ac:de:
73:e1:e2:16:5b:56:60:fe:2c:d0:a7:1e:76:4b:6f:fd:a7:c2:
c8:68:f4:93:5f:7c:4d:57:98:10:d6:b6:ce:79:1b:7b:83:0b:
01:98:78:fa:df:15:01:34:b3:c1:bb:9a:d7:d1:7a:a4:d4:88:
f6:e0:07:c9:4c:94:76:fa:c9:a7:a1:74:9f:5d:07:48:63:47:
e6:c4:7a:5e:ba:0c:fa:05:65:8c:3a:bc:03:0f:0f:ef:ac:f1:
be:ac:76:f3:10:cc:70:cd:99:90:ff:94:f8:f6:a7:e0:f1:ef:
8a:7c:01:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org