Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/GVVqwAyD8TiBI-0eDN3pNK55SPc.roa
File: GVVqwAyD8TiBI-0eDN3pNK55SPc.roa (raw, json)
Hash identifier: zw3+yqMm3Chnrn687i7oZyt32wvr/kH8V4lVb4FLfn0=
Subject key identifier: 19:55:6A:C0:0C:83:F1:38:81:23:ED:1E:0C:DD:E9:34:AE:79:48:F7
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0A4A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GVVqwAyD8TiBI-0eDN3pNK55SPc.roa
Signing time: Sun 07 Feb 2021 11:37:20 +0000
ROA not before: Sun 07 Feb 2021 11:37:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 54994
IP address blocks: 210.61.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2634 (0xa4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:37:20 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=19556AC00C83F1388123ED1E0CDDE934AE7948F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1d:c1:60:69:b6:8b:5e:60:3a:40:21:c5:7c:
5f:14:65:20:05:40:a0:86:6a:44:1e:ad:b6:1a:16:
cf:f3:d6:48:9c:43:27:cd:ff:3e:11:8a:27:c3:47:
a6:5d:b9:da:fa:96:37:8f:36:44:bc:6d:e3:b3:fd:
d6:ac:de:34:47:06:76:d3:5d:e8:15:04:50:00:71:
c6:21:09:8c:bb:9e:d9:ca:36:09:df:6a:e6:ad:86:
47:46:dd:a6:82:17:e5:9e:07:8d:fe:fe:1a:f5:f8:
62:ec:09:e4:e9:2f:8a:69:c1:98:f9:e8:84:9b:f4:
bf:87:f2:02:c3:1e:bc:0f:2e:e4:d8:37:68:9e:7b:
b2:ec:f4:dc:33:72:94:41:fc:dc:df:9f:49:d9:dd:
de:30:dd:67:30:08:91:ac:6e:04:a3:55:f3:a5:f5:
12:fb:dc:ff:82:d9:6d:f4:4d:9a:1a:e5:d6:bc:71:
f4:26:c5:83:37:43:de:20:dc:01:72:6f:b3:bc:90:
14:03:e7:46:01:2d:fd:5b:9e:25:3d:22:e6:55:0a:
41:70:54:b7:25:79:2a:bc:d9:a8:3f:1b:0c:f4:1f:
ef:ba:bd:0c:18:37:e5:bf:f4:94:ff:60:f8:1b:d4:
c7:ba:04:9c:c4:eb:8b:f2:78:4f:29:d9:5a:a7:23:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:55:6A:C0:0C:83:F1:38:81:23:ED:1E:0C:DD:E9:34:AE:79:48:F7
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GVVqwAyD8TiBI-0eDN3pNK55SPc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.180.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:64:69:79:e3:dc:e0:b2:57:b0:7b:82:be:bd:61:30:4c:cb:
ad:62:e3:73:8c:a5:44:2a:84:82:b8:c1:37:07:f6:e9:37:27:
80:4d:d7:9f:cc:7d:7a:5d:e6:e8:41:4d:0d:e2:51:f4:59:2e:
92:5a:62:fe:17:3c:00:d1:a1:32:e7:be:1d:c5:23:c3:06:90:
44:43:b8:70:b7:0e:c9:96:c9:6b:cb:3e:83:fc:53:d2:87:ba:
1f:31:b9:6b:98:1f:85:1d:ea:26:9d:43:8b:a5:93:ea:76:e6:
80:de:c3:b4:5c:d1:4e:69:4a:3b:65:00:30:65:9b:7d:55:0b:
c7:78:24:c5:93:8c:de:9e:da:c0:59:bc:3e:9f:31:48:86:23:
2d:f9:70:21:bd:85:76:61:40:f9:02:78:bc:d1:0e:10:d7:0c:
54:f8:d6:bd:a8:04:bf:c9:7f:12:b3:17:2b:56:85:a4:ca:4c:
51:f0:2f:53:2b:b5:46:cd:99:ec:ee:f0:79:cf:7e:3d:fc:55:
52:ea:de:27:0a:18:1b:cb:8c:c0:10:c6:78:b9:a5:de:32:62:
83:13:33:6e:1b:54:6f:0a:8c:10:5d:6c:32:9b:4b:76:bf:89:
ee:10:39:e3:ae:97:0a:d4:84:74:d6:37:e7:42:9a:6f:8d:17:
80:76:36:96
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCkowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTAyMDcx
MTM3MjBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE5NTU2QUMwMEM4M0Yx
Mzg4MTIzRUQxRTBDRERFOTM0QUU3OTQ4RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqHcFgabaLXmA6QCHFfF8UZSAFQKCGakQerbYaFs/z1kicQyfN
/z4RiifDR6Zdudr6ljePNkS8beOz/das3jRHBnbTXegVBFAAccYhCYy7ntnKNgnf
auathkdG3aaCF+WeB43+/hr1+GLsCeTpL4ppwZj56ISb9L+H8gLDHrwPLuTYN2ie
e7Ls9NwzcpRB/Nzfn0nZ3d4w3WcwCJGsbgSjVfOl9RL73P+C2W30TZoa5da8cfQm
xYM3Q94g3AFyb7O8kBQD50YBLf1bniU9IuZVCkFwVLcleSq82ag/Gwz0H++6vQwY
N+W/9JT/YPgb1Me6BJzE64vyeE8p2VqnI/ZFAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUGVVqwAyD8TiBI+0eDN3pNK55SPcwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9HVlZxd0F5RDhUaUJJLTBlRE4z
cE5LNTVTUGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j20
MA0GCSqGSIb3DQEBCwUAA4IBAQChZGl549zgslewe4K+vWEwTMutYuNzjKVEKoSC
uME3B/bpNyeATdefzH16XeboQU0N4lH0WS6SWmL+FzwA0aEy574dxSPDBpBEQ7hw
tw7Jlslryz6D/FPSh7ofMblrmB+FHeomnUOLpZPqduaA3sO0XNFOaUo7ZQAwZZt9
VQvHeCTFk4zentrAWbw+nzFIhiMt+XAhvYV2YUD5Ani80Q4Q1wxU+Na9qAS/yX8S
sxcrVoWkykxR8C9TK7VGzZns7vB5z349/FVS6t4nChgby4zAEMZ4uaXeMmKDEzNu
G1RvCowQXWwym0t2v4nuEDnjrpcK1IR01jfnQppvjReAdjaW
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org