Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/7jG6kVf9fWXoJfb7Kx_0gYe0-b0.roa
File: 7jG6kVf9fWXoJfb7Kx_0gYe0-b0.roa (raw, json)
Hash identifier: 8UDFQ2DELxQ7zTuzOVRwQxmQ11I29mXddvIgJxJdhoU=
Subject key identifier: EE:31:BA:91:57:FD:7D:65:E8:25:F6:FB:2B:1F:F4:81:87:B4:F9:BD
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0BF7
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7jG6kVf9fWXoJfb7Kx_0gYe0-b0.roa
Signing time: Wed 29 Sep 2021 02:50:43 +0000
ROA not before: Wed 29 Sep 2021 02:50:43 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 54994
IP address blocks: 61.221.181.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3063 (0xbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:43 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=EE31BA9157FD7D65E825F6FB2B1FF48187B4F9BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:90:77:dc:69:ef:07:43:4a:4e:04:cf:8c:f8:
62:0b:38:c1:f7:66:b8:10:fc:63:2b:cb:55:41:ec:
48:7a:7e:64:1f:8f:a1:84:20:2b:cb:5d:d3:0b:98:
2a:6e:ac:d6:33:d1:ad:43:40:c3:ba:04:fd:3b:06:
ee:dc:a4:9b:09:1d:e4:ec:07:fd:9a:20:93:c7:ab:
aa:3c:8a:0e:97:04:d0:e8:04:74:a2:ed:43:dd:e2:
d8:85:27:0c:8c:26:09:12:4b:e7:14:64:ba:0b:02:
ff:99:d6:9c:15:8d:0c:af:7f:1d:6b:88:92:b6:83:
6a:c0:ef:9f:b7:66:d0:5c:d1:a4:ee:da:b8:97:cd:
c0:e9:14:46:6d:a0:ee:c3:da:d1:3e:f0:67:30:31:
b2:b2:d5:57:f3:eb:4a:6d:aa:cf:07:61:70:20:3a:
8c:5c:9f:b6:c8:31:d9:78:86:a6:37:31:02:ba:f8:
4b:84:14:8f:82:03:cc:15:14:bc:12:86:01:e9:1d:
7e:51:97:50:12:4a:56:d4:e8:fa:80:dd:66:ad:31:
79:96:a8:bb:4d:8b:83:3f:09:2f:97:68:74:eb:64:
6b:4f:eb:2a:fd:a2:10:1a:30:61:5d:9a:67:12:88:
4d:96:b7:b7:be:b8:24:f0:0d:95:a0:2c:de:1c:e3:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:31:BA:91:57:FD:7D:65:E8:25:F6:FB:2B:1F:F4:81:87:B4:F9:BD
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7jG6kVf9fWXoJfb7Kx_0gYe0-b0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.221.181.128/25
Signature Algorithm: sha256WithRSAEncryption
3a:b3:28:08:a7:b9:31:6f:e2:ad:82:d8:85:67:71:70:c1:b5:
ab:d4:d9:78:a2:c4:28:4f:62:fe:49:87:df:ed:1e:3d:05:1c:
e7:bb:45:83:22:6b:12:52:56:5a:83:41:b9:d7:8f:04:b4:cd:
f5:a3:3b:bd:55:7a:2f:bb:1e:e0:1e:a0:91:1a:b2:38:90:a5:
e5:27:1f:c4:e3:78:52:3a:27:82:32:3b:3b:a2:54:d3:ff:2f:
af:13:32:98:d0:32:87:01:ad:f3:a0:5f:16:10:26:3f:df:83:
65:c8:14:63:6a:72:97:47:cd:bd:0a:0f:50:d3:cc:20:67:16:
24:3f:64:8b:a7:7c:f0:dc:63:38:96:ea:c1:49:50:c1:4b:2a:
81:2b:77:ac:a4:f6:13:b2:e9:90:90:6d:d5:12:d6:91:86:16:
b6:9c:88:b9:09:24:5d:7d:96:50:4b:52:0c:d7:9b:a2:64:0c:
11:5d:57:89:6c:4f:b7:4f:6d:de:fb:fd:c3:86:00:32:1f:89:
84:a4:e9:7d:60:00:e7:fc:0d:06:80:4a:82:46:f1:b0:25:ba:
f2:df:81:32:6d:fa:c7:a3:8a:fa:64:7b:1e:b8:1e:df:fe:fc:
e3:29:27:6f:17:98:02:ca:44:f6:9e:6c:b7:f2:17:ad:84:ca:
8c:3e:fc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org