Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/7xPcfMKWGS2ocXhDi1YYgXBFQNg.roa
File: 7xPcfMKWGS2ocXhDi1YYgXBFQNg.roa (raw, json)
Hash identifier: RyhwK20bqULw6Msov//RNxHAQJ9TjGkX/TLalZ8GYTQ=
Subject key identifier: EF:13:DC:7C:C2:96:19:2D:A8:71:78:43:8B:56:18:81:70:45:40:D8
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0B05
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7xPcfMKWGS2ocXhDi1YYgXBFQNg.roa
Signing time: Sun 07 Feb 2021 11:46:37 +0000
ROA not before: Sun 07 Feb 2021 11:46:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17714
IP address blocks: 175.111.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2821 (0xb05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:46:37 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EF13DC7CC296192DA87178438B561881704540D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:8c:79:bf:91:79:f7:a9:6d:b7:3a:9f:2e:
e4:fa:04:9e:12:8e:6a:64:6c:fc:f3:3d:29:b8:88:
86:15:15:d5:47:ce:6a:e1:96:4b:cf:4f:e0:b9:6e:
ca:4a:aa:b2:0d:0a:19:5e:58:f6:3d:61:6e:97:1f:
bf:d0:cb:80:11:66:94:64:cc:86:e3:38:36:8b:39:
59:e4:22:7d:9b:a2:31:0d:7a:b3:96:55:7f:c9:a6:
1c:93:cb:10:40:a0:84:f2:38:e0:88:c5:7d:19:6a:
5a:40:e2:08:de:26:e7:cb:d2:19:8c:cf:35:7e:58:
ad:f6:ad:07:43:42:1e:5e:12:19:6a:24:b2:00:9d:
e6:31:b3:28:31:a0:6a:cc:79:2a:19:a6:22:25:39:
c6:44:56:cd:3b:6e:15:38:8c:f2:c4:34:87:a7:ef:
38:7d:92:94:2f:b6:49:1b:8e:89:6a:27:6e:bb:8e:
76:19:ed:01:5e:0f:23:38:3a:ed:ee:4b:a7:12:75:
b4:7e:06:d6:ff:7a:d3:be:02:44:1b:7c:d0:66:27:
75:27:9c:85:7f:61:2f:eb:3f:7f:5b:e2:43:bf:03:
93:2f:5a:c8:3d:22:cc:e3:e0:e4:4c:19:d4:24:9c:
65:bb:cf:be:59:bc:ab:2a:32:60:bb:04:85:87:63:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:13:DC:7C:C2:96:19:2D:A8:71:78:43:8B:56:18:81:70:45:40:D8
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7xPcfMKWGS2ocXhDi1YYgXBFQNg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.255.0/24
Signature Algorithm: sha256WithRSAEncryption
12:8f:b3:f6:dc:9d:34:7c:5e:6c:11:1c:9c:b2:83:a6:0c:54:
89:0a:61:34:7f:94:79:19:3f:4b:47:e4:da:07:65:50:02:2c:
0b:38:99:59:60:fd:e8:6b:65:e4:63:c0:f4:ee:56:0f:40:f5:
d8:9f:3f:a0:c9:3b:f1:59:29:fe:8d:8f:72:63:e3:72:60:4f:
75:cb:ce:f6:77:a3:c2:dd:74:a0:40:aa:9b:7a:ac:34:fe:1f:
b2:c3:ed:f4:85:7c:85:b8:79:41:a4:ef:0f:86:32:9f:8b:92:
48:fb:2c:e1:87:8c:52:17:8e:04:b5:14:ac:b8:1f:19:e7:07:
08:f2:f6:f5:aa:8e:c2:f5:bc:d9:95:55:85:e7:b6:cc:98:96:
07:9b:e5:c7:60:2e:21:b9:37:58:ef:28:7c:8a:ad:a7:a5:26:
36:a0:04:81:68:03:d4:d9:11:72:06:ba:2b:41:d5:c8:9b:e3:
7e:5e:58:8c:5b:70:b4:dd:b5:f1:b6:f8:c5:b6:4c:a0:06:14:
7c:3d:e6:fc:8d:95:3f:42:40:79:81:86:1f:50:62:db:a6:f6:
b2:cb:e3:8c:7b:11:f8:6a:73:1f:2b:1f:8c:cd:78:73:f5:61:
cc:4b:a6:5e:25:0c:90:09:f4:5a:5b:d4:e8:bd:7c:60:01:24:
4f:ea:d6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org