Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/zczUx7E5SldzO4SpuNMfnnurQQ4.roa
File: zczUx7E5SldzO4SpuNMfnnurQQ4.roa (raw, json)
Hash identifier: FFeoAXJDjaBAd0+rNdN6PkB4VH9Psjfl1cxyW/zNtYM=
Subject key identifier: CD:CC:D4:C7:B1:39:4A:57:73:3B:84:A9:B8:D3:1F:9E:7B:AB:41:0E
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 104C
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/zczUx7E5SldzO4SpuNMfnnurQQ4.roa
Signing time: Thu 15 Sep 2022 02:37:13 +0000
ROA not before: Thu 15 Sep 2022 02:37:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 14618
IP address blocks: 2001:dc1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4172 (0x104c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Sep 15 02:37:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CDCCD4C7B1394A57733B84A9B8D31F9E7BAB410E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:53:54:a4:08:09:07:c9:83:f5:35:1f:e8:
1f:6a:44:19:d2:40:6d:ac:96:fc:5a:3f:9a:68:51:
6e:a1:ee:3c:66:af:42:7f:4c:7d:80:b4:13:a3:67:
ed:c0:29:40:bc:82:02:69:e9:90:3d:2a:69:19:e2:
28:06:45:d0:21:6d:00:71:42:85:60:90:7a:6b:c7:
03:ad:3f:ce:0e:f8:8f:65:8e:c2:ac:49:58:63:cf:
1f:51:3e:dc:1d:59:75:dd:fe:61:6e:6c:88:0a:86:
18:81:d5:62:4a:5e:5c:90:da:ab:2b:a1:cb:42:78:
f7:ee:7f:86:af:ed:f5:4c:c6:dd:4f:90:16:53:35:
03:87:92:1a:62:62:09:df:8d:ac:1a:15:93:f8:54:
fd:4d:98:44:63:00:8d:86:6d:c1:39:34:be:b8:b0:
e6:95:f6:cd:e7:c7:1e:73:67:eb:52:90:26:2f:20:
00:06:71:f5:b9:8b:be:df:5b:3e:ba:61:39:b6:fc:
6a:38:3c:c4:ca:49:6a:b4:96:ca:9a:27:a7:14:04:
3e:ee:8a:d6:02:c0:70:1f:c7:e8:c3:85:f9:d4:d2:
5f:e0:95:ff:05:de:ca:1c:51:b2:a2:2d:88:16:bf:
80:21:d7:10:d7:8e:77:0f:3d:96:e9:69:df:24:2a:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CC:D4:C7:B1:39:4A:57:73:3B:84:A9:B8:D3:1F:9E:7B:AB:41:0E
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/zczUx7E5SldzO4SpuNMfnnurQQ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:dc1::/48
Signature Algorithm: sha256WithRSAEncryption
a3:d1:9b:4d:fc:4b:97:d2:7e:dc:ba:09:a0:36:6c:1c:b6:c2:
63:0e:f5:80:59:2b:42:ef:fd:2a:2a:7a:6e:52:2c:10:14:58:
2c:26:3f:3b:45:58:cc:82:31:81:8e:c2:ab:11:22:6a:f0:25:
d2:82:8d:4b:29:87:94:d4:b6:40:ce:bb:dc:ef:c2:d5:49:6b:
41:0e:10:f3:15:f4:49:0c:00:a9:6a:f4:34:39:ab:e2:02:f9:
a6:d2:78:bd:18:5f:a0:bb:d5:8b:f7:fc:60:6b:e4:ca:0d:4e:
9e:f5:34:8a:60:a8:40:37:a4:06:f7:53:f1:38:d9:ed:f3:75:
81:4c:76:05:5a:bc:b1:86:a2:f2:9b:e6:53:c9:03:7d:1b:45:
a8:b0:be:29:66:78:d4:83:d1:cf:46:b7:80:8f:c7:6f:99:d4:
95:93:55:87:af:30:0f:2b:38:9d:88:10:7e:c6:e3:ea:3f:6a:
05:e0:7c:c5:8c:f1:8b:fa:57:08:3b:09:ee:cb:9b:88:38:98:
c3:f0:7a:5c:a8:1a:0f:f0:35:97:e1:a1:7c:4f:df:f4:98:c1:
6e:14:a2:9f:08:3e:a6:71:85:e3:e2:68:a5:43:4e:b4:66:cc:
f3:ce:a0:9e:f4:dc:bd:cc:8b:c9:cc:f4:c0:ef:74:0f:88:84:
b2:ab:bc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org