Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/JoB8xpc_X5f2po2ZOgHHpYMMuJk.roa
File: JoB8xpc_X5f2po2ZOgHHpYMMuJk.roa (raw, json)
Hash identifier: 82RagUVJMRULeO5raDHqcIJqj3yPpzrWaxxpYrscUIw=
Subject key identifier: 26:80:7C:C6:97:3F:5F:97:F6:A6:8D:99:3A:01:C7:A5:83:0C:B8:99
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0AAD
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JoB8xpc_X5f2po2ZOgHHpYMMuJk.roa
Signing time: Sun 07 Feb 2021 11:38:42 +0000
ROA not before: Sun 07 Feb 2021 11:38:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 218.160.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2733 (0xaad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:38:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=26807CC6973F5F97F6A68D993A01C7A5830CB899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:b6:07:28:3b:94:03:fb:fb:8b:02:bf:c4:
80:f2:58:37:74:c2:85:77:8c:ab:e7:bd:28:34:bc:
0a:19:e7:4e:71:45:59:e6:a0:9a:db:c4:10:c7:b3:
00:20:95:0f:fe:65:d9:6f:b0:14:5c:69:38:d1:56:
83:a9:18:70:5c:ad:90:1f:3d:b2:c0:77:88:45:31:
4f:21:53:ab:d7:01:ef:7c:69:f0:c8:58:75:0d:25:
a8:f0:4a:af:9d:22:42:5d:61:c7:88:aa:d0:6e:4d:
0f:06:4a:41:85:9f:50:ab:47:20:30:99:8e:18:f6:
e5:c6:f7:ed:c6:3f:4f:40:a4:e4:b2:8a:6e:13:82:
76:93:c4:ed:27:6b:21:46:54:5a:8c:97:8a:cd:b0:
3e:e4:23:38:6e:42:f1:b7:89:c2:97:02:08:96:3a:
34:bb:84:2a:81:48:1f:00:0e:86:02:b6:97:28:65:
90:c2:e3:cd:90:4c:0e:cc:cc:41:a6:59:02:95:bf:
c7:81:e1:b8:a8:fa:9a:29:2e:fb:34:3f:8b:04:96:
8b:e8:80:3f:dd:4b:57:ba:17:26:ac:38:67:1d:d3:
c6:29:ab:1d:2a:20:91:7b:d8:b8:4a:de:94:d5:19:
0f:fb:e0:41:ec:78:44:78:45:cb:ce:3b:3a:41:06:
12:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:80:7C:C6:97:3F:5F:97:F6:A6:8D:99:3A:01:C7:A5:83:0C:B8:99
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JoB8xpc_X5f2po2ZOgHHpYMMuJk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.160.0.0/14
Signature Algorithm: sha256WithRSAEncryption
b6:b6:39:79:dd:54:65:6e:4d:e9:a2:98:e5:36:c9:68:2c:8a:
92:ad:ab:5e:b4:1e:01:d0:d9:c8:1e:56:33:af:b6:2e:f3:4e:
e6:42:af:32:04:db:84:9e:92:47:cc:4d:56:15:c2:6b:49:99:
f8:dc:45:6a:82:1f:45:39:6f:77:0a:cf:f7:ce:a2:24:f9:34:
b1:fb:52:03:a4:7d:d4:dd:c7:5e:33:1e:15:27:9f:4e:28:fa:
5c:bd:1f:bc:ea:45:4a:da:f8:0a:5a:30:01:d4:90:65:14:d1:
0e:cc:9e:a3:81:0c:db:05:c9:aa:46:04:26:3f:25:ad:0d:c7:
c3:6b:83:4a:d9:a8:9d:95:d6:76:96:f3:3c:3e:a2:48:9d:88:
ee:53:1b:39:08:38:4c:73:55:4e:ff:fa:09:08:c8:8a:f1:db:
89:ea:7e:92:c6:7f:9b:47:19:a0:be:b8:33:97:c4:7c:77:bb:
ed:b2:93:eb:32:f2:9b:5c:14:6f:62:8e:22:2b:d8:3a:bb:99:
82:ca:a1:60:d5:4e:8a:85:14:c5:72:6f:ce:f9:9c:a8:a9:5a:
f1:d2:48:28:6e:b0:65:92:ff:46:59:cb:1f:a7:eb:7e:f7:a4:
68:b1:50:80:07:95:03:d8:24:09:d5:fd:a6:58:61:49:cc:f1:
ec:ef:81:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org