Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/BiQR1PlSUyUW9RWu5CiF92H_44Q.roa
File: BiQR1PlSUyUW9RWu5CiF92H_44Q.roa (raw, json)
Hash identifier: bnpMVkaMa1bwULulAn2KL2En9k2Z2HLlCHEyNtEHllo=
Subject key identifier: 06:24:11:D4:F9:52:53:25:16:F5:15:AE:E4:28:85:F7:61:FF:E3:84
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0857
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/BiQR1PlSUyUW9RWu5CiF92H_44Q.roa
Signing time: Tue 29 Sep 2020 09:58:38 +0000
ROA not before: Tue 29 Sep 2020 09:58:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9505
IP address blocks: 220.128.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2135 (0x857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:38 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=062411D4F952532516F515AEE42885F761FFE384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:3f:c0:7a:ed:06:59:57:dc:24:fa:e5:1f:
7c:78:02:18:6d:08:53:5b:ec:dc:b0:c9:43:b6:41:
34:81:6c:e8:fd:69:06:f5:15:de:75:5e:8e:fe:e3:
41:d4:a3:71:de:fa:f5:95:72:78:3c:ae:3e:bb:8d:
33:68:22:4e:ee:f9:c1:ce:47:77:57:ba:57:e9:85:
ff:2f:eb:9f:4c:93:5f:71:1f:93:7d:1d:26:84:0d:
49:25:09:0a:a2:3b:30:91:82:2f:0d:94:ad:e1:d3:
19:90:51:d8:a9:3b:2a:22:f9:77:ca:fa:9d:83:e2:
e3:42:53:10:dc:bb:64:13:86:18:c1:40:43:69:60:
f1:79:4d:c2:6c:5a:55:b7:db:1f:13:fb:93:d8:10:
e8:48:50:93:93:05:65:7a:0c:40:ec:f9:a3:79:db:
19:23:8d:62:e3:65:16:63:17:26:d9:63:63:58:23:
4b:1d:97:6c:e7:5c:07:a9:e1:b7:d5:4d:43:0e:5d:
5c:e7:ff:80:fd:1e:29:82:15:94:a3:d7:e7:6f:08:
05:04:5d:96:5c:d3:a7:23:5a:13:6b:ee:bb:48:82:
ae:51:b2:bd:79:a6:77:c0:c2:4e:09:7a:2b:59:a7:
4e:35:80:6a:c3:8a:dc:2d:49:fc:89:5c:8c:cb:f5:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:24:11:D4:F9:52:53:25:16:F5:15:AE:E4:28:85:F7:61:FF:E3:84
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/BiQR1PlSUyUW9RWu5CiF92H_44Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.48.0/21
Signature Algorithm: sha256WithRSAEncryption
55:fa:cb:6f:19:a3:0a:1d:8a:c7:51:4b:d5:7f:b8:17:2f:5a:
8a:0c:83:93:17:e1:51:9f:db:47:dc:81:46:46:a7:3a:c5:d1:
e4:f7:07:17:5d:75:9f:ba:ed:46:3f:cf:c6:a8:e5:53:77:b5:
17:fc:f5:c0:d2:f1:a9:64:f8:97:06:73:3e:7c:cf:e1:4d:25:
09:20:ef:a2:e8:a1:e8:f6:45:a6:eb:d6:7d:ed:71:b1:b4:f3:
2f:1a:a5:ce:c4:b4:ca:a4:ec:94:99:36:fd:7c:4c:75:8c:23:
7f:ba:72:c3:ba:d1:86:7c:32:b9:a1:f2:2b:04:5c:bf:c2:1a:
aa:a8:2e:99:e7:0e:3e:8d:6f:b6:56:4c:81:e2:58:f7:f1:66:
dc:8e:fd:c4:8d:4a:7e:a2:25:9b:f7:95:cd:ff:88:48:4a:8e:
f3:eb:d1:3b:20:21:29:9b:0c:d9:1f:4d:5a:2d:69:9c:23:93:
57:5e:fb:37:18:b1:c8:96:c2:03:aa:02:88:c4:78:86:06:08:
dc:ab:fc:92:81:bd:54:13:56:d5:33:b1:49:0a:1d:6b:f4:01:
f1:40:6a:e7:4a:d9:0d:b9:7b:3e:50:c9:3b:36:3c:f9:51:41:
bf:bd:f9:94:dd:2a:74:a7:6f:63:89:08:10:33:b6:58:f0:a8:
5a:d1:8d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org