Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/8cyC7UrmAoJTqgexO5BU6FNMv3M.roa
File: 8cyC7UrmAoJTqgexO5BU6FNMv3M.roa (raw, json)
Hash identifier: kT3V6DdZrNhnqnfRQ8/fUOGt8WvpL+Rx1twnX/I1pXA=
Subject key identifier: F1:CC:82:ED:4A:E6:02:82:53:AA:07:B1:3B:90:54:E8:53:4C:BF:73
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 087F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8cyC7UrmAoJTqgexO5BU6FNMv3M.roa
Signing time: Tue 29 Sep 2020 09:58:48 +0000
ROA not before: Tue 29 Sep 2020 09:58:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 218.166.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175 (0x87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F1CC82ED4AE6028253AA07B13B9054E8534CBF73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:83:b2:ee:44:c4:12:44:13:6e:57:b2:92:
c3:b8:dd:c1:c2:52:56:eb:b4:c2:fd:d2:57:c6:0b:
b9:82:e3:e9:12:9b:60:dd:ce:99:39:ae:45:cf:61:
4b:be:d7:e6:da:7a:f5:b8:c8:39:f9:5a:bc:ca:62:
2f:31:b4:9c:6d:69:f6:88:39:37:e4:1f:52:1b:a8:
47:72:e6:73:46:fd:b5:ba:75:c6:ea:19:bd:e9:49:
a6:8b:30:77:df:61:f1:35:8c:8c:ff:ce:6d:9e:c3:
e1:c6:50:67:95:63:6f:c0:fd:5d:4c:6e:17:f5:59:
d8:64:ae:a5:e5:69:a5:8c:16:c8:a9:dd:12:e1:4f:
b4:8e:6f:74:91:b0:c3:9e:37:47:e4:bd:c5:28:af:
ba:3a:d3:ac:03:28:2e:a6:55:56:69:6f:69:50:cf:
aa:42:90:ae:cb:69:e1:de:40:88:f2:e3:a0:9f:eb:
ba:20:e6:b8:1a:0b:93:1a:cd:eb:e5:08:5a:90:a5:
cd:65:16:aa:ae:9b:21:68:82:17:c0:37:6f:c9:f6:
22:1b:a3:dd:1d:04:01:3d:5c:63:5a:39:e8:de:e8:
b6:08:c1:2a:31:bd:fc:a6:24:6c:46:e1:fb:07:8e:
fa:a7:82:f0:26:17:8c:98:6d:84:c0:f2:d7:29:10:
e5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CC:82:ED:4A:E6:02:82:53:AA:07:B1:3B:90:54:E8:53:4C:BF:73
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8cyC7UrmAoJTqgexO5BU6FNMv3M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.166.0.0/15
Signature Algorithm: sha256WithRSAEncryption
55:bd:f2:1f:df:4d:5e:c9:39:d5:9a:e5:fb:64:c0:3d:de:cf:
53:f3:dd:8a:d5:12:54:2e:e2:b6:4e:2e:8f:f9:1f:70:d6:00:
05:d7:13:c0:c7:66:3e:10:a9:d4:29:b8:c7:60:e8:47:86:6a:
b2:2e:43:a0:f8:fb:b9:0a:98:da:de:6b:1a:d6:02:dc:14:be:
81:58:06:53:25:8d:26:39:ac:c6:d8:27:cf:bf:27:43:e8:e2:
01:2e:c2:e0:fe:ec:99:8f:13:28:78:d3:be:e2:ba:74:e7:92:
34:a2:22:75:df:f1:b2:1c:82:9f:2c:a7:54:8e:c8:ac:4b:34:
b1:f2:2c:34:98:38:49:43:4a:72:45:21:fc:da:35:c9:bc:dc:
c4:c2:02:33:53:22:72:8f:dc:97:69:e4:b3:9f:3a:87:1d:c7:
da:5e:e5:68:86:08:04:04:45:89:d7:ed:92:0c:57:0d:04:b0:
a3:d1:03:61:2e:ea:8c:40:89:84:02:3c:42:44:4d:8b:f3:5c:
bd:63:2c:17:2d:20:ee:ec:b5:9f:80:7b:c7:28:11:5d:41:3a:
89:2e:33:eb:ec:f4:e2:d3:53:ff:9c:54:66:26:25:94:e8:0e:
7d:6c:a2:ef:83:b6:97:1f:97:84:24:2c:d8:2c:ce:ec:f9:2f:
c5:6c:22:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org