Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/7WsBEekiqHf9rGnD_7h3x1fRe1Y.roa
File: 7WsBEekiqHf9rGnD_7h3x1fRe1Y.roa (raw, json)
Hash identifier: BQ+AFOAzWKQK7h4ebSgGnu7S8GQ6luRjYAfxF0wvCxA=
Subject key identifier: ED:6B:01:11:E9:22:A8:77:FD:AC:69:C3:FF:B8:77:C7:57:D1:7B:56
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0B1D
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7WsBEekiqHf9rGnD_7h3x1fRe1Y.roa
Signing time: Sun 07 Feb 2021 11:47:32 +0000
ROA not before: Sun 07 Feb 2021 11:47:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17421
IP address blocks: 223.136.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2845 (0xb1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:47:32 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=ED6B0111E922A877FDAC69C3FFB877C757D17B56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:2d:e2:f8:db:43:e8:0e:59:09:41:c8:38:
8b:8c:06:96:e0:18:f7:ec:ec:99:3c:0e:e9:50:ca:
6f:ef:b0:bf:90:cc:df:6f:12:38:c5:ae:23:a2:62:
d5:88:06:80:b4:7a:ed:37:ee:59:47:ec:38:e0:f5:
f5:9c:2e:3a:a7:c5:1b:8c:a2:e1:ea:3c:7d:89:af:
a0:44:76:cf:a2:b4:d3:df:05:b7:56:2a:35:47:fc:
6d:70:9d:4a:ce:63:79:56:20:f8:9c:6a:81:be:56:
4e:91:2f:2e:7d:2d:6c:75:cc:ba:de:99:99:d6:e7:
40:f4:ad:31:d3:12:f2:fc:37:fd:6c:ef:ae:4d:e3:
8f:f5:82:97:b5:8a:b3:59:ad:4a:1f:09:be:81:48:
75:a5:ac:fd:c4:1e:d5:46:44:43:16:45:0d:53:32:
05:34:08:11:01:5e:a5:c2:d9:af:b7:8a:84:20:58:
33:a2:4d:b5:e2:4e:2f:f3:0b:27:96:15:1f:b0:05:
44:71:5d:92:a7:97:17:f4:8d:9d:07:b4:9c:61:67:
59:68:87:3e:fc:dd:8d:46:2c:b1:98:0b:95:23:d7:
51:f6:cc:8e:84:9f:c7:e9:8b:4a:e1:98:34:7f:28:
2e:bd:74:88:f4:a4:35:56:5a:ee:03:2f:3d:c8:15:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6B:01:11:E9:22:A8:77:FD:AC:69:C3:FF:B8:77:C7:57:D1:7B:56
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7WsBEekiqHf9rGnD_7h3x1fRe1Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.136.0.0/13
Signature Algorithm: sha256WithRSAEncryption
55:61:f7:0c:3d:97:9a:aa:26:b0:a4:be:a7:15:fc:f5:7e:ca:
11:b1:7e:6d:4f:7a:f3:b9:00:c9:1d:e9:1d:dd:f7:84:5e:89:
af:40:3a:56:4c:fb:b9:4c:2c:44:cc:27:67:02:1a:39:d7:be:
ae:09:6d:5e:4a:51:8a:ae:d0:3c:4d:95:a0:4f:70:8a:26:05:
26:48:dd:9f:08:36:10:55:d0:9f:b6:33:2b:5c:a3:13:3d:de:
9d:26:25:63:e2:27:19:8e:2f:4a:73:b6:d7:ef:3a:26:fd:c2:
42:af:0d:36:31:ff:ae:fd:d9:08:27:e7:0e:57:ab:ef:68:58:
bb:77:f1:79:eb:4c:3a:ca:5a:3f:c1:90:f8:7f:d5:2f:4d:86:
0e:06:4a:37:6b:7e:a9:b7:7d:f7:2a:db:d2:0b:5e:6c:60:d8:
bd:b3:c2:7e:02:60:78:39:04:73:46:2b:87:b5:30:3e:87:6e:
93:d6:f0:12:b4:36:ce:63:ae:c9:10:f9:63:5b:78:2e:03:f0:
a2:54:31:cf:2b:6c:2d:1f:9a:25:9e:d1:4a:c7:be:5a:2e:6a:
1e:c8:ca:4f:eb:6a:66:0f:aa:c5:eb:be:c0:03:bd:da:ef:48:
27:de:f2:04:4b:cc:f8:50:03:2d:6e:19:50:a8:df:aa:01:d4:
40:df:6c:8b
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICCx0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTAyMDcx
MTQ3MzJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEVENkIwMTExRTkyMkE4
NzdGREFDNjlDM0ZGQjg3N0M3NTdEMTdCNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgfi3i+NtD6A5ZCUHIOIuMBpbgGPfs7Jk8DulQym/vsL+QzN9v
EjjFriOiYtWIBoC0eu037llH7Djg9fWcLjqnxRuMouHqPH2Jr6BEds+itNPfBbdW
KjVH/G1wnUrOY3lWIPicaoG+Vk6RLy59LWx1zLremZnW50D0rTHTEvL8N/1s765N
44/1gpe1irNZrUofCb6BSHWlrP3EHtVGREMWRQ1TMgU0CBEBXqXC2a+3ioQgWDOi
TbXiTi/zCyeWFR+wBURxXZKnlxf0jZ0HtJxhZ1lohz783Y1GLLGYC5Uj11H2zI6E
n8fpi0rhmDR/KC69dIj0pDVWWu4DLz3IFfXzAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQU7WsBEekiqHf9rGnD/7h3x1fRe1YwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC83V3NCRWVraXFIZjlyR25EXzdo
M3gxZlJlMVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMD34gw
DQYJKoZIhvcNAQELBQADggEBAFVh9ww9l5qqJrCkvqcV/PV+yhGxfm1PevO5AMkd
6R3d94Reia9AOlZM+7lMLETMJ2cCGjnXvq4JbV5KUYqu0DxNlaBPcIomBSZI3Z8I
NhBV0J+2MytcoxM93p0mJWPiJxmOL0pzttfvOib9wkKvDTYx/6792Qgn5w5Xq+9o
WLt38XnrTDrKWj/BkPh/1S9Nhg4GSjdrfqm3ffcq29ILXmxg2L2zwn4CYHg5BHNG
K4e1MD6HbpPW8BK0Ns5jrskQ+WNbeC4D8KJUMc8rbC0fmiWe0UrHvlouah7Iyk/r
amYPqsXrvsADvdrvSCfe8gRLzPhQAy1uGVCo36oB1EDfbIs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org