Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/3TZxxW0aqiA8cwTXziQ7LEJBhNI.roa
File: 3TZxxW0aqiA8cwTXziQ7LEJBhNI.roa (raw, json)
Hash identifier: K6QHJwL9a2JFaOOFeSWCcKPMADk8fumEocy1NMB5GiE=
Subject key identifier: DD:36:71:C5:6D:1A:AA:20:3C:73:04:D7:CE:24:3B:2C:42:41:84:D2
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0836
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3TZxxW0aqiA8cwTXziQ7LEJBhNI.roa
Signing time: Tue 29 Sep 2020 09:58:28 +0000
ROA not before: Tue 29 Sep 2020 09:58:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 103.25.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2102 (0x836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DD3671C56D1AAA203C7304D7CE243B2C424184D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:d3:ad:51:c9:1d:e0:fe:65:00:3b:b1:c0:
7e:c6:bf:49:1a:71:8f:a7:73:03:11:e5:2e:1e:81:
4a:06:e8:f9:d5:24:a9:10:5c:ae:21:b4:d4:e3:14:
87:c0:4b:b7:f8:5b:9d:d0:1e:e5:59:3b:9a:99:07:
0c:bd:ed:b4:80:d5:ce:3c:c2:b6:3a:42:82:c6:f8:
64:0e:b8:27:da:f3:fe:15:f6:ea:37:e5:41:7d:1a:
b1:fb:0f:1a:2f:11:e7:a1:31:c3:a6:ac:cf:62:e3:
f8:9a:fa:db:3e:d0:db:1b:2d:8e:09:36:bf:ca:55:
a4:66:8c:9d:15:57:c7:2b:4a:91:2f:3e:0d:d3:8a:
73:be:ea:8e:79:77:c4:d3:d2:a0:d8:38:ce:0f:42:
cf:a9:60:c9:14:40:ab:18:9f:82:44:56:21:8f:63:
0c:cd:75:26:9c:4b:df:f3:ce:16:96:d3:e4:50:90:
66:bc:71:3c:95:85:6c:56:2c:3c:a7:61:09:2f:8c:
db:f6:bc:9d:23:52:cb:c7:1f:54:da:03:9a:db:ca:
72:04:74:e2:71:73:ae:d3:5f:bb:22:f8:ae:80:5a:
50:b0:d5:74:29:55:32:a9:f8:0d:d6:c5:a3:e1:0c:
82:a1:a8:11:9c:65:8c:d8:cd:31:83:57:7e:88:3a:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:36:71:C5:6D:1A:AA:20:3C:73:04:D7:CE:24:3B:2C:42:41:84:D2
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3TZxxW0aqiA8cwTXziQ7LEJBhNI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:42:ac:e4:31:cc:19:0f:ac:6f:14:c6:ea:f1:58:9d:39:10:
f4:5b:ce:09:85:88:dc:98:fe:97:9b:60:c1:f0:82:c3:5b:ee:
85:51:5f:df:9f:5b:52:85:14:5d:04:75:46:c9:49:4e:08:c2:
48:dc:5e:6d:47:c0:4e:08:33:cb:0e:f9:52:a9:bb:6a:69:0f:
37:b0:6d:ed:3b:1c:77:26:bd:ea:c8:da:9f:6f:c4:c2:4d:d0:
b6:b0:3c:39:81:93:72:24:10:a3:e0:aa:65:d6:19:22:1a:7c:
0c:f7:18:28:a1:dd:7b:52:e1:3a:99:6f:ae:92:50:1b:38:12:
1d:2b:34:99:36:07:a5:e1:9d:99:75:c6:ef:d4:43:a4:02:8b:
e8:cb:4c:fe:f3:6f:6c:cd:74:f1:99:c8:e1:b4:e8:e1:c5:a4:
1a:6e:b8:ac:ba:8e:fc:58:a0:90:e2:3f:69:e0:54:b0:41:dd:
88:c5:5e:a3:12:a1:3a:48:c9:33:37:08:c4:16:a8:bf:3c:22:
20:cc:ec:64:25:e8:27:92:3d:4c:01:59:65:a0:8c:e7:b5:b9:
2c:06:73:b2:22:8d:5d:16:c1:40:9e:85:8f:8b:d3:d0:85:1d:
cd:74:56:20:45:dc:4b:4b:4c:4d:70:13:13:dd:9b:b4:31:ad:
84:ca:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org