Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/BSW2cDJr42rebfOYSXR7RG6TTDw.roa
File: BSW2cDJr42rebfOYSXR7RG6TTDw.roa (raw, json)
Hash identifier: i38qhn+LSzH9D7r+dAwLRf62CQXN8JXqi9MXUIsTQDU=
Subject key identifier: 05:25:B6:70:32:6B:E3:6A:DE:6D:F3:98:49:74:7B:44:6E:93:4C:3C
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0E70
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/BSW2cDJr42rebfOYSXR7RG6TTDw.roa
Signing time: Tue 15 Aug 2023 04:08:05 +0000
ROA not before: Tue 15 Aug 2023 04:08:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 23675
IP address blocks: 220.128.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3696 (0xe70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 15 04:08:05 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0525B670326BE36ADE6DF39849747B446E934C3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ea:50:33:a8:ab:2b:6e:26:eb:f0:5f:de:f0:
47:8e:71:44:50:85:96:fd:e2:d9:1a:43:68:46:ad:
21:a0:7d:51:91:08:f2:08:71:81:de:e0:29:e1:f2:
e2:51:e3:75:d7:02:77:2d:07:dc:7e:f6:e1:77:8b:
2a:f5:a0:87:15:19:e7:36:4a:68:df:9c:1f:85:66:
d2:56:c1:ff:90:d3:82:92:44:90:14:dc:8d:16:28:
0b:8e:f6:79:f4:4c:6e:0b:3e:dd:e8:21:5c:66:f9:
c3:81:e9:ff:db:2f:bf:28:d4:b9:4a:24:a5:96:44:
6d:96:d3:3f:a1:31:a3:4e:c1:24:b5:a6:0c:43:7d:
fc:dc:6b:e6:4d:f5:a1:d1:a5:bd:37:c3:ab:b0:9b:
8b:2f:b0:e9:c2:76:2d:b3:a1:36:97:bf:92:6b:55:
a3:82:88:e9:fc:a5:10:37:e5:33:33:b4:4c:60:a6:
e2:7e:c7:e4:65:8b:4a:f3:77:bd:75:16:7a:39:50:
19:b8:9b:55:66:cb:6a:fd:65:ce:fa:67:a9:5a:0b:
2f:98:ca:0f:15:ea:ea:fe:b9:f3:9f:76:72:20:75:
03:bc:66:60:3e:77:fe:e4:53:eb:40:15:e2:6b:31:
6e:18:2a:95:42:c9:ed:bc:a9:3e:ce:84:f1:63:68:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:25:B6:70:32:6B:E3:6A:DE:6D:F3:98:49:74:7B:44:6E:93:4C:3C
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/BSW2cDJr42rebfOYSXR7RG6TTDw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:28:17:40:ef:e0:b2:6d:4f:07:6c:d8:df:05:ec:74:a2:a2:
14:e9:37:da:32:f2:88:0f:7a:b9:c4:61:19:b7:6d:5b:31:47:
51:09:7c:f3:0e:b3:9d:d8:fe:c5:3b:3e:13:9f:99:2f:a4:32:
21:7f:4c:e9:b1:df:2c:1f:87:83:ba:2e:05:b0:6c:dc:5d:61:
6c:a7:ac:09:6f:8c:6e:c0:0f:ef:77:4b:5d:2e:a3:31:ed:70:
a3:23:be:12:65:d6:44:ed:f9:34:57:33:5a:38:77:1a:83:e3:
4c:38:19:c5:09:5e:0c:bc:33:50:eb:1f:db:69:b7:5c:f6:3a:
61:19:93:bc:e0:37:20:63:40:a0:ed:be:e9:c4:e2:47:60:8a:
ec:72:c2:51:f8:90:d6:be:fa:ee:c1:87:f7:80:29:e0:a5:00:
dd:8e:41:dc:c8:b3:03:61:a8:df:ad:2a:04:1b:c0:32:48:93:
b3:66:54:9e:b5:d2:b2:95:2a:50:c7:55:4a:a1:1f:30:e4:88:
da:b3:31:58:f0:77:41:82:12:4a:09:9b:e2:f0:87:b5:b2:ac:
e5:e2:18:b7:5f:4e:d0:10:d1:25:1f:e3:36:b7:d9:3b:85:86:
22:89:9c:db:b2:44:45:69:c7:45:0d:66:73:b3:0a:06:1b:f6:
e9:ba:60:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org