Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/MXv3Rtlvs4jt1oSz7h4JCg2jSdM.roa
File: MXv3Rtlvs4jt1oSz7h4JCg2jSdM.roa (raw, json)
Hash identifier: fhwI/GEFx4hm74cAKF75u+DfjpokZWhlJIZuBShlsDw=
Subject key identifier: 31:7B:F7:46:D9:6F:B3:88:ED:D6:84:B3:EE:1E:09:0A:0D:A3:49:D3
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0BC9
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/MXv3Rtlvs4jt1oSz7h4JCg2jSdM.roa
Signing time: Mon 27 Mar 2023 23:14:05 +0000
ROA not before: Mon 27 Mar 2023 23:14:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18424
IP address blocks: 2405:8700:3000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3017 (0xbc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Mar 27 23:14:05 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=317BF746D96FB388EDD684B3EE1E090A0DA349D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:30:12:7e:d1:eb:2e:e4:91:52:e2:b6:58:
ac:83:1f:c1:be:41:c6:89:db:a7:d9:dc:49:15:a7:
df:b1:c2:c8:fe:6e:8f:1c:86:39:8c:33:b8:11:e9:
ed:c3:54:40:9c:c9:ea:41:c0:e3:0a:89:b3:82:c5:
85:e5:0b:01:1c:57:d3:58:0f:74:e3:f3:e4:0f:c0:
9e:02:73:bb:c9:68:df:ba:8f:07:ae:20:52:94:3a:
f7:0f:4d:a3:81:b8:14:06:42:2f:72:b7:4f:39:b5:
e6:5a:7e:9c:52:52:fa:ff:b8:21:93:9e:d6:3f:ca:
71:ee:eb:98:a8:7a:04:a2:7b:de:82:6f:95:eb:e4:
44:9a:cd:e2:5b:9e:33:6d:89:74:4b:32:ba:7c:91:
30:12:58:85:a8:67:2f:d1:2c:db:ba:64:fe:ca:5c:
f2:0e:94:e5:39:ef:97:7e:66:59:38:c0:79:df:85:
58:2d:2b:9c:4a:aa:e9:22:04:f1:34:95:9a:ec:72:
21:c6:0f:58:ef:de:5d:75:18:cd:d6:0c:a7:87:71:
6c:4a:1a:c6:86:a8:36:6b:03:24:d3:13:9f:4b:8a:
11:32:f6:dd:dc:9b:69:9d:5a:b4:b6:fb:8d:31:a8:
ca:d6:9b:d6:b4:86:04:87:91:f4:55:e1:d6:27:a9:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7B:F7:46:D9:6F:B3:88:ED:D6:84:B3:EE:1E:09:0A:0D:A3:49:D3
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/MXv3Rtlvs4jt1oSz7h4JCg2jSdM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:8700:3000::/48
Signature Algorithm: sha256WithRSAEncryption
5f:13:5c:b2:d9:7a:98:91:d6:ba:df:f8:82:3a:e5:80:d5:09:
c2:fb:96:2b:9e:e1:ca:05:81:53:62:3a:de:5f:56:59:84:ca:
aa:78:a4:f7:2e:d7:c4:f8:04:9e:fc:17:d8:88:87:e9:ad:31:
3a:83:1f:4d:1f:b9:39:c9:8a:2d:98:7e:f4:b5:b5:6c:4d:89:
53:34:65:b3:30:ea:1e:6e:73:20:bf:eb:59:5f:22:9b:8f:47:
cd:b3:8e:c8:79:47:b3:12:ee:cb:09:53:46:e3:df:c8:6c:d0:
68:b5:02:b7:5c:63:05:d7:df:9c:62:f1:7f:65:17:d4:c0:93:
47:70:b9:01:57:b6:1b:15:62:46:6b:53:dd:89:2d:01:c0:87:
79:f3:03:09:a3:26:a2:af:27:d9:da:4e:9e:ac:2c:f0:58:59:
0e:b4:98:be:3d:28:8f:95:df:10:9c:b2:15:3f:da:7a:d9:06:
8d:0f:ef:12:61:1f:75:c7:8b:73:e8:22:76:6a:d0:34:d9:fe:
78:20:63:23:a0:8c:d5:7c:50:d7:60:18:71:b5:7b:a9:69:99:
45:4e:51:2e:f9:52:2f:50:07:14:af:e6:4d:a7:4e:27:7a:f3:
e9:be:6f:4b:b1:74:b2:a1:5d:51:55:5f:07:98:09:60:15:75:
0b:65:0c:8c
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICC8kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMzAzMjcy
MzE0MDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDMxN0JGNzQ2RDk2RkIz
ODhFREQ2ODRCM0VFMUUwOTBBMERBMzQ5RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9sDASftHrLuSRUuK2WKyDH8G+QcaJ26fZ3EkVp9+xwsj+bo8c
hjmMM7gR6e3DVECcyepBwOMKibOCxYXlCwEcV9NYD3Tj8+QPwJ4Cc7vJaN+6jweu
IFKUOvcPTaOBuBQGQi9yt085teZafpxSUvr/uCGTntY/ynHu65ioegSie96Cb5Xr
5ESazeJbnjNtiXRLMrp8kTASWIWoZy/RLNu6ZP7KXPIOlOU575d+Zlk4wHnfhVgt
K5xKqukiBPE0lZrsciHGD1jv3l11GM3WDKeHcWxKGsaGqDZrAyTTE59LihEy9t3c
m2mdWrS2+40xqMrWm9a0hgSHkfRV4dYnqTHFAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUMXv3Rtlvs4jt1oSz7h4JCg2jSdMwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL01YdjNSdGx2czRq
dDFvU3o3aDRKQ2cyalNkTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAkBYcAMAAwDQYJKoZIhvcNAQELBQADggEBAF8TXLLZepiR1rrf+II65YDV
CcL7liue4coFgVNiOt5fVlmEyqp4pPcu18T4BJ78F9iIh+mtMTqDH00fuTnJii2Y
fvS1tWxNiVM0ZbMw6h5ucyC/61lfIpuPR82zjsh5R7MS7ssJU0bj38hs0Gi1Ardc
YwXX35xi8X9lF9TAk0dwuQFXthsVYkZrU92JLQHAh3nzAwmjJqKvJ9naTp6sLPBY
WQ60mL49KI+V3xCcshU/2nrZBo0P7xJhH3XHi3PoInZq0DTZ/nggYyOgjNV8UNdg
GHG1e6lpmUVOUS75Ui9QBxSv5k2nTid68+m+b0uxdLKhXVFVXweYCWAVdQtlDIw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org