Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/H9htx-Fdz6iseO0rFUcloU4R7Z0.roa
File: H9htx-Fdz6iseO0rFUcloU4R7Z0.roa (raw, json)
Hash identifier: GpTwSfC+tQ4wXCq4do29gRUKPzMowSnGH21ug/tnj6c=
Subject key identifier: 1F:D8:6D:C7:E1:5D:CF:A8:AC:78:ED:2B:15:47:25:A1:4E:11:ED:9D
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C7C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/H9htx-Fdz6iseO0rFUcloU4R7Z0.roa
Signing time: Wed 29 Sep 2021 02:51:20 +0000
ROA not before: Wed 29 Sep 2021 02:51:20 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 137280
IP address blocks: 203.69.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3196 (0xc7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:20 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1FD86DC7E15DCFA8AC78ED2B154725A14E11ED9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:70:74:c0:98:12:79:b3:64:d4:40:bb:d3:
fb:1a:03:0c:23:81:ec:a7:df:9c:8a:40:1f:6e:db:
52:c8:a0:50:45:79:ab:ab:8a:9c:29:34:0b:2c:2c:
9c:3f:68:2d:8d:57:8e:09:6e:3e:e8:74:fd:fd:c9:
d9:29:09:7e:3c:e5:23:a4:cf:43:3f:df:3c:ea:76:
21:ca:6e:a9:66:a3:7a:5d:d7:60:20:1c:61:e4:b2:
05:c7:5b:03:2f:cf:ee:c8:98:93:38:92:18:dc:57:
10:b9:7b:f3:3c:a1:85:c6:ca:30:bc:2d:23:0e:9a:
e3:c1:c3:ef:59:9f:8c:37:06:d0:b3:dd:4d:c3:97:
81:86:98:c1:9d:30:e5:bd:04:0c:62:2f:ae:8d:d0:
b5:26:28:88:54:e4:53:80:8c:9f:a9:2c:4e:47:82:
42:df:57:e2:22:9f:fe:d3:9a:95:9e:0a:23:50:41:
9f:a2:b2:c0:45:e6:ec:d5:8b:dc:42:25:62:e7:86:
50:81:13:00:d6:f2:15:dd:22:ab:36:1b:ef:f9:61:
65:75:99:05:e0:20:49:24:88:6a:4a:e8:8c:bc:db:
ab:d7:a8:d5:60:38:be:1a:e6:f7:6f:c5:3b:eb:15:
74:42:b2:c3:50:c1:e6:66:7f:35:94:ed:4f:90:d1:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D8:6D:C7:E1:5D:CF:A8:AC:78:ED:2B:15:47:25:A1:4E:11:ED:9D
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/H9htx-Fdz6iseO0rFUcloU4R7Z0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.69.33.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:9c:0f:c0:56:56:a3:df:e2:30:1a:22:3e:10:d2:33:90:33:
9b:ac:70:a1:89:99:02:70:48:5d:1a:18:bd:99:c1:d4:9f:f9:
17:6f:11:7c:6e:f8:0f:65:b6:0a:74:14:ed:ef:25:83:46:9c:
0c:76:b0:c5:f9:22:7c:34:45:e3:74:6a:5e:b1:ab:f8:9b:25:
01:f1:15:f2:4b:84:53:50:01:a2:00:8f:67:ba:7a:79:bc:ba:
21:16:d6:56:ac:e2:64:67:3e:79:de:6f:fa:fe:1b:d1:ab:47:
db:04:64:f0:e1:55:43:1a:99:c4:29:83:1a:6c:e9:35:3e:45:
aa:62:57:7d:8e:c5:27:96:b6:dc:d6:c0:b5:76:db:1d:d5:1d:
3c:27:d4:ac:84:db:8b:d6:54:6e:e6:a3:b3:00:ff:68:95:08:
12:f6:e2:90:d5:ff:e4:a4:95:0a:ba:39:53:d9:7e:40:58:ae:
c5:72:bf:f3:7e:c3:bf:ad:2b:2d:0e:74:50:19:e4:8f:60:39:
a2:4d:92:1a:9d:fa:94:2d:37:88:04:67:a6:e3:6a:26:dc:d5:
6f:50:a9:8a:2f:06:f9:d1:9b:be:85:d6:2b:75:09:bd:32:c1:
75:8b:47:c0:e1:71:31:f6:86:1b:c5:6d:34:d5:eb:c1:d2:3e:
fc:5d:64:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org