Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/IWJ-3rzluMCC6eH4-ue0OPfAy-c.roa
File: IWJ-3rzluMCC6eH4-ue0OPfAy-c.roa (raw, json)
Hash identifier: 5N2IfMHmG3hUxeZJpWrAj9XL49Zle9DgoaDdwyefcDc=
Subject key identifier: 21:62:7E:DE:BC:E5:B8:C0:82:E9:E1:F8:FA:E7:B4:38:F7:C0:CB:E7
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C1C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IWJ-3rzluMCC6eH4-ue0OPfAy-c.roa
Signing time: Wed 29 Sep 2021 02:50:53 +0000
ROA not before: Wed 29 Sep 2021 02:50:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 210.242.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3100 (0xc1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:53 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=21627EDEBCE5B8C082E9E1F8FAE7B438F7C0CBE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:d6:8e:ee:91:5f:1f:af:4b:69:47:74:3c:
eb:08:ff:6b:05:77:18:c8:78:e6:12:27:85:80:a7:
e4:00:5f:7e:09:1a:3e:24:fa:c8:b3:06:cc:08:75:
92:8d:56:56:bc:21:b8:e3:cf:2f:02:7a:bc:ce:59:
39:98:ff:1f:23:96:87:6b:72:92:00:60:4d:a4:f8:
92:06:16:b6:4a:7a:7b:94:c5:51:52:0c:2f:f3:df:
fa:40:a5:ed:3c:0d:34:27:66:cf:52:92:81:bb:16:
f9:b8:cb:49:f1:63:57:9e:e0:8c:5d:17:44:06:9d:
73:be:84:be:e7:6b:79:60:a9:e3:f0:e2:d3:36:b7:
22:55:0f:41:e8:2f:d6:b9:ba:81:e5:d3:ab:37:04:
d2:65:5a:10:42:fc:9e:28:64:68:de:15:38:99:9d:
59:7f:95:18:62:ef:ca:8b:9d:64:7a:00:32:bf:ca:
5a:01:51:be:3f:fd:3e:6b:eb:68:9a:0a:4b:e6:cb:
66:f3:72:b2:63:e0:51:44:63:99:0c:fb:30:c6:a0:
9d:2d:86:2c:da:8e:45:6f:6e:4a:14:f4:25:d4:ac:
96:c8:4d:03:95:b9:4e:a1:7c:c7:12:c0:b6:b8:ca:
b8:83:7d:b1:28:c9:87:68:8a:85:a9:7c:35:ee:02:
38:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:62:7E:DE:BC:E5:B8:C0:82:E9:E1:F8:FA:E7:B4:38:F7:C0:CB:E7
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IWJ-3rzluMCC6eH4-ue0OPfAy-c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c5:96:99:18:24:1f:d1:b9:c1:1b:69:f6:1b:21:c2:a3:f5:ce:
eb:0d:4f:56:3a:74:cb:95:2e:b0:ac:19:94:d2:34:75:74:4e:
0a:ec:cf:22:8b:de:54:77:1d:f0:0d:e5:1b:e7:97:7f:bf:31:
a0:eb:dd:08:d6:3c:52:3a:dc:67:03:c7:2d:74:9e:e1:e6:25:
74:9f:50:1b:2d:25:dc:6e:3c:b6:bf:61:59:94:9a:f1:51:12:
57:4f:29:80:b9:d7:a1:65:ef:c4:e7:63:18:74:42:44:fd:a4:
0d:23:4e:71:e5:7b:f8:18:a4:d2:ac:09:11:c1:50:5d:fc:34:
b6:4c:c3:b0:3f:18:34:1d:da:b6:db:c5:d6:53:ff:87:ad:f6:
40:6c:8d:64:ba:ab:35:cf:0f:69:cc:4d:13:31:b1:a8:db:c8:
48:79:7a:f2:b9:6b:11:d1:29:15:62:80:b3:e4:f7:29:d1:5f:
f2:4d:ba:b2:53:8c:85:48:80:fa:65:35:f8:af:57:d3:88:4f:
f5:22:5c:cd:da:3a:fe:41:73:95:f2:08:da:33:f5:39:a1:b0:
7b:d0:3e:cc:33:e7:3f:18:27:e7:c0:9d:bc:06:24:45:ed:0b:
af:82:31:d5:8a:4c:3b:cc:51:8b:18:83:88:1f:a2:f4:8a:5f:
55:6c:f5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org