Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/IPHHwARG6ToujpI2kGFq6_f4Blw.roa
File: IPHHwARG6ToujpI2kGFq6_f4Blw.roa (raw, json)
Hash identifier: UyyvOp4CvYKGrGk6+q3tKVjT+ES6vxCm8JICOwazJzA=
Subject key identifier: 20:F1:C7:C0:04:46:E9:3A:2E:8E:92:36:90:61:6A:EB:F7:F8:06:5C
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0828
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IPHHwARG6ToujpI2kGFq6_f4Blw.roa
Signing time: Tue 29 Sep 2020 09:58:25 +0000
ROA not before: Tue 29 Sep 2020 09:58:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 20940
IP address blocks: 210.65.144.192/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088 (0x828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:25 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=20F1C7C00446E93A2E8E923690616AEBF7F8065C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:63:c0:ec:f6:86:09:27:a0:b2:53:76:45:
0c:68:c6:e5:e3:36:0b:da:2a:e0:db:61:2f:80:1d:
32:1c:53:a5:3d:9c:10:3e:ff:68:3d:db:09:ec:ac:
50:5e:0d:59:74:56:35:a3:e3:3b:be:66:0c:a0:d7:
3e:e8:d7:06:4f:93:2a:c5:52:71:74:63:01:e1:98:
8b:d3:89:50:94:0f:c3:2f:b3:68:f8:ff:44:4d:23:
a5:b0:13:fd:4a:55:4c:9e:58:9c:c7:d8:e6:63:06:
b0:24:56:e1:ff:5c:49:2b:77:e5:ca:9a:f5:0b:02:
fe:ed:df:b1:83:67:1d:e1:39:11:2c:55:1f:c4:21:
bd:3a:cf:7e:b7:ee:3f:12:b9:b6:17:60:1e:ae:a8:
5e:0a:9e:7c:bb:74:31:a6:d7:25:df:32:2e:1c:2a:
5a:de:1e:dc:d9:c5:91:6d:c9:86:6c:06:c4:7c:7e:
01:1f:19:cc:f4:58:8e:52:69:6e:65:a8:e9:c7:0e:
8d:da:96:bf:46:e5:e5:38:58:3a:2f:4e:8b:fd:fb:
a1:62:d5:60:1a:ca:72:69:d6:58:f4:19:c3:1f:8a:
29:5e:96:76:74:63:f9:40:9d:cd:6e:6c:04:46:5c:
26:51:ae:fc:e2:64:af:a1:2a:98:11:05:93:4b:2f:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F1:C7:C0:04:46:E9:3A:2E:8E:92:36:90:61:6A:EB:F7:F8:06:5C
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IPHHwARG6ToujpI2kGFq6_f4Blw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.65.144.192/26
Signature Algorithm: sha256WithRSAEncryption
8f:2b:2c:19:49:5c:76:86:36:aa:86:8f:ed:b3:52:08:53:6c:
38:84:0e:78:ee:14:24:b9:f7:a6:d7:44:85:71:d0:9b:4d:fe:
2d:b7:ef:29:a5:9f:d1:be:31:91:04:10:c1:fa:e3:94:c2:ca:
09:79:c1:77:fa:47:30:e0:22:e0:7b:a7:67:19:c8:a1:d9:39:
6f:b8:5d:9d:7e:7e:96:3b:65:ef:6f:67:af:e6:9c:e1:98:a9:
be:92:42:8a:73:e3:3f:56:03:0c:3f:98:a5:64:9c:0f:83:af:
fb:53:04:eb:d7:76:ad:b6:a4:84:2b:aa:87:84:9d:51:26:93:
0c:68:c2:22:a3:18:58:9c:9a:5f:77:9e:02:00:27:0f:bc:f9:
52:c5:47:39:11:a0:91:73:99:3b:99:e1:7c:4c:ea:45:bc:64:
ac:e6:bd:58:60:ea:5b:fe:8c:d0:47:b3:6f:45:67:46:dc:eb:
33:03:28:bc:70:9c:80:bf:71:88:0a:50:04:79:d1:11:82:be:
fa:c5:d5:d5:f6:51:d3:4a:e4:b9:ac:b5:ee:28:c6:ae:81:8f:
c7:35:db:34:a1:6f:1f:26:d6:dd:b8:89:1b:64:6a:5e:9a:3b:
78:c6:be:1e:42:f5:a0:2e:47:60:cd:7a:78:56:f2:e2:98:8e:
28:f4:8d:9b
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICCCgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMDA5Mjkw
OTU4MjVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDIwRjFDN0MwMDQ0NkU5
M0EyRThFOTIzNjkwNjE2QUVCRjdGODA2NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbpWPA7PaGCSegslN2RQxoxuXjNgvaKuDbYS+AHTIcU6U9nBA+
/2g92wnsrFBeDVl0VjWj4zu+Zgyg1z7o1wZPkyrFUnF0YwHhmIvTiVCUD8Mvs2j4
/0RNI6WwE/1KVUyeWJzH2OZjBrAkVuH/XEkrd+XKmvULAv7t37GDZx3hOREsVR/E
Ib06z3637j8SubYXYB6uqF4Knny7dDGm1yXfMi4cKlreHtzZxZFtyYZsBsR8fgEf
Gcz0WI5SaW5lqOnHDo3alr9G5eU4WDovTov9+6Fi1WAaynJp1lj0GcMfiilelnZ0
Y/lAnc1ubARGXCZRrvziZK+hKpgRBZNLLzO3AgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUIPHHwARG6ToujpI2kGFq6/f4BlwwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9JUEhId0FSRzZUb3VqcEkya0dG
cTZfZjRCbHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUG0kGQ
wDANBgkqhkiG9w0BAQsFAAOCAQEAjyssGUlcdoY2qoaP7bNSCFNsOIQOeO4UJLn3
ptdEhXHQm03+LbfvKaWf0b4xkQQQwfrjlMLKCXnBd/pHMOAi4HunZxnIodk5b7hd
nX5+ljtl729nr+ac4ZipvpJCinPjP1YDDD+YpWScD4Ov+1ME69d2rbakhCuqh4Sd
USaTDGjCIqMYWJyaX3eeAgAnD7z5UsVHORGgkXOZO5nhfEzqRbxkrOa9WGDqW/6M
0Eezb0VnRtzrMwMovHCcgL9xiApQBHnREYK++sXV1fZR00rkuay17ijGroGPxzXb
NKFvHybW3biJG2RqXpo7eMa+HkL1oC5HYM16eFby4piOKPSNmw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org