Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/9UT-kUUqAHk4OvK2GKt7qkz9Bbg.roa
File: 9UT-kUUqAHk4OvK2GKt7qkz9Bbg.roa (raw, json)
Hash identifier: 0V18xtiqjPZqKHGwfQo5ndgiVa75vbacl+FJE6qTKdE=
Subject key identifier: F5:44:FE:91:45:2A:00:79:38:3A:F2:B6:18:AB:7B:AA:4C:FD:05:B8
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C08
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9UT-kUUqAHk4OvK2GKt7qkz9Bbg.roa
Signing time: Wed 29 Sep 2021 02:50:46 +0000
ROA not before: Wed 29 Sep 2021 02:50:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 1.160.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3080 (0xc08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:46 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F544FE91452A0079383AF2B618AB7BAA4CFD05B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c3:05:a6:c2:13:82:3f:27:f0:19:96:53:56:
50:cf:34:3a:ac:de:97:b8:e4:4c:7b:11:ad:52:3f:
66:07:0a:21:ca:da:de:d0:49:c7:ae:e9:64:e1:cb:
97:7f:13:d6:15:cc:44:4c:0e:59:54:fb:5c:ea:90:
e0:4f:64:44:cb:3f:e2:95:f0:8d:f1:e7:36:a5:da:
cf:d7:2c:77:33:a9:00:f0:74:eb:62:b8:38:47:db:
a3:e0:03:23:85:63:36:db:a0:f5:69:91:41:f7:87:
a7:33:56:21:20:59:aa:53:ae:e3:52:51:23:8b:18:
59:37:17:29:65:2e:85:b1:df:71:8b:ab:ff:00:27:
8e:51:9f:00:51:bf:5b:71:9f:fe:8e:d0:7b:2c:53:
3c:fa:55:48:8b:a6:ac:1f:9c:2b:2e:1e:03:32:99:
cf:71:27:40:e2:33:f3:9b:2e:8c:df:f4:9e:a8:86:
1d:f8:72:ab:07:73:0c:11:2a:81:b1:68:24:df:54:
d8:7c:5a:3b:23:a5:31:f1:7e:fe:8a:38:82:ef:bb:
49:13:9e:fe:13:a1:16:bf:12:af:39:11:a0:95:30:
2c:4a:fb:82:2b:1f:3a:4f:30:10:4f:a5:4e:76:46:
74:47:63:f5:c8:d2:03:38:a3:11:5f:6e:9a:c2:00:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:FE:91:45:2A:00:79:38:3A:F2:B6:18:AB:7B:AA:4C:FD:05:B8
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9UT-kUUqAHk4OvK2GKt7qkz9Bbg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.160.0.0/12
Signature Algorithm: sha256WithRSAEncryption
66:60:6a:a0:e3:14:c8:1b:78:5b:7d:93:13:42:5e:71:33:b0:
c2:93:08:0e:d4:df:c1:f1:a3:21:8f:bc:7b:ef:48:12:1b:b6:
31:8b:42:83:15:46:db:4e:e2:fb:93:84:21:cf:7a:a0:af:61:
7c:e3:2e:cb:14:d5:c3:ea:35:e0:e9:d7:2d:72:31:cd:02:03:
81:39:6c:ac:79:7e:8a:20:9e:fd:97:00:d1:89:e5:1b:53:2b:
b0:87:2b:de:11:e7:d9:97:56:07:b6:af:77:c0:97:d5:90:3c:
cc:32:4c:07:71:7b:2e:42:55:4d:79:d2:7b:1d:05:17:e4:e7:
2c:3b:a8:3c:9d:78:60:fd:d3:8f:00:33:a9:61:32:0c:61:9d:
ed:cf:1a:9c:d2:1d:bc:68:50:c2:cc:d2:01:32:c3:af:3a:4e:
6a:56:17:a0:7f:c9:f4:94:98:da:10:94:0e:1d:7a:53:23:c3:
8f:04:98:fa:f6:fd:1b:2c:68:2c:90:0c:9a:d5:61:79:34:55:
6f:db:07:01:ed:49:34:c0:4d:05:db:7c:f9:6d:44:38:1e:96:
09:64:44:b4:04:6a:0b:43:f1:43:84:68:90:60:c3:e3:f9:a1:
56:a0:86:ca:e3:9c:13:78:54:f8:1b:d3:c0:06:0e:a1:5d:98:
c7:9f:3d:da
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTA5Mjkw
MjUwNDZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEY1NDRGRTkxNDUyQTAw
NzkzODNBRjJCNjE4QUI3QkFBNENGRDA1QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpwwWmwhOCPyfwGZZTVlDPNDqs3pe45Ex7Ea1SP2YHCiHK2t7Q
Sceu6WThy5d/E9YVzERMDllU+1zqkOBPZETLP+KV8I3x5zal2s/XLHczqQDwdOti
uDhH26PgAyOFYzbboPVpkUH3h6czViEgWapTruNSUSOLGFk3FyllLoWx33GLq/8A
J45RnwBRv1txn/6O0HssUzz6VUiLpqwfnCsuHgMymc9xJ0DiM/ObLozf9J6ohh34
cqsHcwwRKoGxaCTfVNh8WjsjpTHxfv6KOILvu0kTnv4ToRa/Eq85EaCVMCxK+4Ir
HzpPMBBPpU52RnRHY/XI0gM4oxFfbprCALTtAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQU9UT+kUUqAHk4OvK2GKt7qkz9BbgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC85VVQta1VVcUFIazRPdksyR0t0
N3FrejlCYmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEAaAw
DQYJKoZIhvcNAQELBQADggEBAGZgaqDjFMgbeFt9kxNCXnEzsMKTCA7U38HxoyGP
vHvvSBIbtjGLQoMVRttO4vuThCHPeqCvYXzjLssU1cPqNeDp1y1yMc0CA4E5bKx5
foognv2XANGJ5RtTK7CHK94R59mXVge2r3fAl9WQPMwyTAdxey5CVU150nsdBRfk
5yw7qDydeGD9048AM6lhMgxhne3PGpzSHbxoUMLM0gEyw686TmpWF6B/yfSUmNoQ
lA4delMjw48EmPr2/RssaCyQDJrVYXk0VW/bBwHtSTTATQXbfPltRDgelglkRLQE
agtD8UOEaJBgw+P5oVaghsrjnBN4VPgb08AGDqFdmMefPdo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org