Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/6ORtDbA-IyHGAcXNjOvMn0_GIN0.roa
File: 6ORtDbA-IyHGAcXNjOvMn0_GIN0.roa (raw, json)
Hash identifier: jQcmks+X/HzuhkDrlvCqExtg5Bg+jVpUeO3IC/diiY8=
Subject key identifier: E8:E4:6D:0D:B0:3E:23:21:C6:01:C5:CD:8C:EB:CC:9F:4F:C6:20:DD
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C1A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6ORtDbA-IyHGAcXNjOvMn0_GIN0.roa
Signing time: Wed 29 Sep 2021 02:50:52 +0000
ROA not before: Wed 29 Sep 2021 02:50:52 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 203.75.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3098 (0xc1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:52 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E8E46D0DB03E2321C601C5CD8CEBCC9F4FC620DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:5a:df:9a:12:0d:c1:cb:e6:5a:09:46:a3:
78:d9:ca:54:74:a4:82:0e:4e:4e:37:46:40:16:8a:
66:65:0f:b2:69:1a:69:7c:9b:16:ed:5e:55:52:8b:
79:dc:48:23:b6:6a:ee:97:a7:8d:26:8a:bc:13:d9:
d1:63:a1:1a:db:3b:6b:95:ff:44:6b:17:e2:de:ae:
b8:37:f7:8b:6d:86:fc:81:e1:02:f1:91:14:ec:46:
ae:84:f0:29:3a:21:55:7b:3f:98:35:89:68:c7:8b:
8e:ae:51:92:84:05:1e:2b:9b:ff:f9:6f:d8:1c:fd:
31:e4:74:d3:40:34:ac:01:76:98:bf:fa:bb:e1:3c:
3f:b2:d9:4b:02:fd:77:3b:be:65:0e:4c:d8:04:c9:
f8:17:85:17:29:0d:5f:b9:48:d3:53:34:9d:c7:ad:
32:59:1b:4b:7e:6d:67:8c:0d:e5:b8:4d:14:ea:55:
3c:33:3e:57:d1:cd:25:41:a0:21:60:d8:20:d2:65:
76:1e:db:2d:8a:a5:ef:67:9b:0c:81:b8:ca:ab:fa:
12:dc:9b:5b:d5:3d:e1:83:58:46:23:17:39:df:1e:
e2:1a:6e:29:a0:0d:a4:7d:4a:20:ef:cd:3c:36:aa:
8b:2d:75:78:54:db:d6:22:91:a1:6c:61:ac:47:60:
42:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E4:6D:0D:B0:3E:23:21:C6:01:C5:CD:8C:EB:CC:9F:4F:C6:20:DD
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6ORtDbA-IyHGAcXNjOvMn0_GIN0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:ec:2f:b1:f4:e0:94:d0:8c:d7:e3:b8:02:99:4b:42:07:91:
db:dc:30:42:53:7b:d2:d9:bd:d7:81:9d:56:7c:94:b2:a6:88:
ae:e0:bd:9b:2c:a0:d6:e0:f2:2c:95:13:78:b5:0b:70:d0:99:
6d:99:f4:18:83:4f:4f:22:58:5e:90:80:e0:b2:9a:a1:8f:91:
30:90:8e:a1:43:d1:ce:24:c8:95:88:fe:53:90:4c:cd:41:8d:
8d:00:60:54:bd:f6:48:7c:6a:ed:20:6b:ac:80:c8:c1:f3:ac:
88:ba:f6:6f:3c:04:b6:1f:f4:a2:23:19:37:9a:d4:1a:bd:b4:
25:e1:74:b1:c4:2b:b1:1f:c5:ff:39:6c:f2:a5:fc:eb:9c:f3:
01:1d:d0:64:0f:cd:17:25:ab:a3:bc:9b:db:2a:df:1f:11:a6:
e0:26:3a:ff:de:23:11:4f:c1:24:da:bd:5a:38:5d:3a:7d:7b:
99:31:dd:ca:11:b9:14:fc:26:39:44:a2:99:84:7a:22:80:9a:
58:63:b7:43:4f:93:e2:1d:51:36:7a:25:b6:98:6f:ef:df:54:
9a:8c:f3:8f:14:19:84:42:5e:c6:11:48:59:d0:53:0a:83:04:
b7:5c:3b:3b:39:32:e4:79:a6:1a:4f:57:f7:84:5a:da:55:d3:
77:b6:6c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org