Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/GAJnMzdPB2POEEbr9GLCLmLSuzs.roa
File: GAJnMzdPB2POEEbr9GLCLmLSuzs.roa (raw, json)
Hash identifier: XR+xcsJ7JHndaaBosNvthmPc5IpSajJ5ixPvdiqGnN0=
Subject key identifier: 18:02:67:33:37:4F:07:63:CE:10:46:EB:F4:62:C2:2E:62:D2:BB:3B
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0868
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GAJnMzdPB2POEEbr9GLCLmLSuzs.roa
Signing time: Tue 29 Sep 2020 09:58:42 +0000
ROA not before: Tue 29 Sep 2020 09:58:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9680
IP address blocks: 202.39.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2152 (0x868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=18026733374F0763CE1046EBF462C22E62D2BB3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bf:7d:f6:ec:c1:72:40:35:4f:c8:6b:c3:30:
86:94:f8:45:00:77:e8:41:3f:94:0a:37:33:f5:c7:
c8:4e:0c:1f:79:28:65:49:fb:36:31:72:f4:92:d4:
e3:a2:22:76:6a:9d:77:3c:be:01:64:c8:2e:52:23:
ab:10:ee:9e:5c:18:06:8b:a7:b1:ca:03:99:1b:07:
31:08:9d:bb:a9:5c:06:7a:79:d6:06:bb:99:f7:1e:
53:74:ea:b7:4c:de:41:45:6a:a5:e3:25:0c:90:e5:
d1:45:51:1a:26:09:76:52:67:82:56:ab:4a:9b:9a:
5f:11:de:50:9f:31:4c:c3:d8:94:5c:9b:eb:61:54:
47:2f:b0:de:eb:53:16:1c:79:77:3b:32:38:24:86:
95:36:b8:2e:96:da:70:5d:34:4b:9f:fe:73:4d:76:
df:ee:39:d8:95:1c:67:7e:8d:3e:25:14:34:45:4f:
2c:92:af:46:78:8f:a4:89:1c:35:a9:8a:99:4b:d9:
f8:d5:ac:60:94:93:2c:64:0d:0f:9e:91:e3:26:94:
ee:39:6a:a8:90:c6:2e:e4:ea:fb:48:7c:c2:4d:cd:
ec:08:50:00:16:cf:28:40:b1:c5:9f:fd:32:04:60:
62:45:8e:a8:ca:bc:d5:7f:41:2d:aa:df:dc:fb:03:
e4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:02:67:33:37:4F:07:63:CE:10:46:EB:F4:62:C2:2E:62:D2:BB:3B
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GAJnMzdPB2POEEbr9GLCLmLSuzs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.80.0/20
Signature Algorithm: sha256WithRSAEncryption
24:99:28:37:75:06:fa:61:c8:71:41:9c:cb:b2:e9:1e:b7:58:
e8:e0:ed:a2:93:1b:e8:fc:57:8f:ea:5e:36:34:88:37:17:69:
78:0e:df:df:29:a1:1a:31:69:5d:d6:63:da:d8:57:39:18:5f:
0c:c3:f4:fa:c3:7e:68:0a:37:52:f8:25:34:37:2d:21:de:87:
b7:a1:a8:2c:4b:af:bf:20:4a:1a:b5:1c:09:af:9a:65:b4:4c:
2b:8e:05:8f:7d:42:a4:0d:00:8d:78:c2:92:57:84:c9:72:6a:
92:4a:55:28:3b:9f:5c:d9:26:5a:6e:32:41:08:95:3f:1f:d3:
15:91:a7:21:87:24:1d:16:bb:a7:93:e5:50:e9:77:06:85:9a:
de:e3:6c:32:89:95:70:54:ef:9d:e5:8e:b9:df:88:77:38:6e:
30:ff:5a:1a:48:fe:1a:d0:07:d4:9b:44:21:5b:95:43:38:ba:
e5:6a:fa:a4:64:4f:97:6d:ff:c8:cf:95:e9:f2:fb:f3:07:53:
96:53:87:d9:42:01:ba:fd:da:66:56:38:47:b4:c6:93:38:12:
cb:e9:ca:b2:cf:80:32:ef:6f:c5:35:e4:c7:ca:ff:d0:79:52:
db:3f:f0:62:98:fe:b9:be:c8:f4:d2:60:67:77:4f:78:ef:b7:
68:50:39:d6
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCGgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMDA5Mjkw
OTU4NDJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE4MDI2NzMzMzc0RjA3
NjNDRTEwNDZFQkY0NjJDMjJFNjJEMkJCM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpv3327MFyQDVPyGvDMIaU+EUAd+hBP5QKNzP1x8hODB95KGVJ
+zYxcvSS1OOiInZqnXc8vgFkyC5SI6sQ7p5cGAaLp7HKA5kbBzEInbupXAZ6edYG
u5n3HlN06rdM3kFFaqXjJQyQ5dFFURomCXZSZ4JWq0qbml8R3lCfMUzD2JRcm+th
VEcvsN7rUxYceXc7MjgkhpU2uC6W2nBdNEuf/nNNdt/uOdiVHGd+jT4lFDRFTyyS
r0Z4j6SJHDWpiplL2fjVrGCUkyxkDQ+ekeMmlO45aqiQxi7k6vtIfMJNzewIUAAW
zyhAscWf/TIEYGJFjqjKvNV/QS2q39z7A+TBAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUGAJnMzdPB2POEEbr9GLCLmLSuzswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9HQUpuTXpkUEIyUE9FRWJyOUdM
Q0xtTFN1enMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyidQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAkmSg3dQb6YchxQZzLsuket1jo4O2ikxvo/FeP
6l42NIg3F2l4Dt/fKaEaMWld1mPa2Fc5GF8Mw/T6w35oCjdS+CU0Ny0h3oe3oags
S6+/IEoatRwJr5pltEwrjgWPfUKkDQCNeMKSV4TJcmqSSlUoO59c2SZabjJBCJU/
H9MVkachhyQdFrunk+VQ6XcGhZre42wyiZVwVO+d5Y6534h3OG4w/1oaSP4a0AfU
m0QhW5VDOLrlavqkZE+Xbf/Iz5Xp8vvzB1OWU4fZQgG6/dpmVjhHtMaTOBLL6cqy
z4Ay72/FNeTHyv/QeVLbP/BimP65vsj00mBnd09477doUDnW
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org