Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/1feL45pxLIfoI7Fa_4Kk1KeKjEo.roa
File: 1feL45pxLIfoI7Fa_4Kk1KeKjEo.roa (raw, json)
Hash identifier: WZWd2kIwzMrqWba9opPrkLw/uqTvjgpCphc2s19WQvk=
Subject key identifier: D5:F7:8B:E3:9A:71:2C:87:E8:23:B1:5A:FF:82:A4:D4:A7:8A:8C:4A
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C5C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1feL45pxLIfoI7Fa_4Kk1KeKjEo.roa
Signing time: Wed 29 Sep 2021 02:51:11 +0000
ROA not before: Wed 29 Sep 2021 02:51:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17421
IP address blocks: 221.120.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3164 (0xc5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D5F78BE39A712C87E823B15AFF82A4D4A78A8C4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:a7:76:9e:32:47:50:33:f6:d7:f0:d9:82:
c3:e6:55:78:0f:07:4f:18:f7:ca:bf:18:2a:77:22:
db:ff:b8:20:dd:31:11:2f:19:2b:4c:b3:76:75:f5:
e2:2c:94:51:33:82:fe:e8:30:81:74:ac:4d:45:34:
02:73:d5:33:6d:37:4f:bb:7a:e2:3b:ee:93:fb:0b:
7b:70:ad:6e:dd:6b:ce:56:5f:51:40:62:c2:35:fc:
88:aa:96:ab:33:28:9b:34:82:e5:7a:5b:0a:fb:a7:
1f:f4:e8:ae:13:ee:cc:86:d7:95:e9:56:97:ff:0e:
29:c4:36:50:e7:21:bf:bd:79:ce:30:44:63:3e:70:
4b:b8:03:0d:5c:df:f5:e9:92:6d:b7:f8:4b:ca:c5:
8b:d1:42:72:a3:a6:b4:d6:6f:cc:65:70:a2:30:18:
f1:75:74:88:0b:d6:7f:5f:79:2d:f5:d1:b3:46:b9:
b7:df:ff:91:ba:5d:af:57:59:fb:fb:6d:1f:06:2d:
19:91:77:71:8e:83:72:d4:77:1a:e5:82:b5:47:e6:
98:82:cd:3a:50:eb:38:f0:78:cd:c5:51:b5:d7:5f:
5f:3a:20:58:c6:87:46:96:fd:55:e5:d2:cc:28:64:
8e:d1:29:89:a5:a6:6c:c5:08:2d:2b:94:da:54:8d:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F7:8B:E3:9A:71:2C:87:E8:23:B1:5A:FF:82:A4:D4:A7:8A:8C:4A
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1feL45pxLIfoI7Fa_4Kk1KeKjEo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
221.120.64.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:1a:d0:6d:33:09:e7:5e:d8:be:09:64:f8:ce:e1:f0:ce:c3:
41:44:25:f6:66:d9:9f:54:9c:57:e8:e4:28:a4:1c:37:98:42:
66:ba:10:60:f7:73:ea:f0:39:31:5f:8d:05:1d:23:14:cf:40:
df:4a:ba:fd:91:82:3e:00:f8:18:85:b4:ad:f3:77:02:c4:70:
d6:d3:08:d7:2b:9f:6f:d7:ef:26:bf:95:f0:dc:d9:b1:89:53:
bf:57:b9:6f:43:d2:9b:f9:04:0c:92:45:a2:c7:28:49:a9:a8:
7e:68:7f:b9:00:b6:d1:50:61:83:0b:22:6e:45:1c:c3:b4:66:
aa:26:50:dd:7c:e3:ee:27:e3:2c:4e:1a:7e:46:a8:01:a0:e7:
a3:60:dd:c1:cc:67:57:25:e3:18:ba:d7:75:58:4a:3d:6b:30:
2f:3d:32:6f:00:a8:86:f1:f8:6f:58:ec:b5:50:2a:e8:88:7e:
2b:1d:d5:8b:9d:a0:83:80:61:26:99:59:09:d9:c1:26:67:1b:
23:d6:e0:68:20:06:6b:1c:ec:7f:37:a5:8b:c2:87:7f:bf:f5:
49:3e:31:c2:43:ab:ab:ce:86:be:01:1c:77:15:71:8b:2f:da:
41:c5:ab:ae:7b:4b:c8:21:d0:f6:3a:3e:f7:d1:60:eb:77:2b:
12:32:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org