Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/KvvatGw26iwrayHsvQaew_aDEs8.roa
File: KvvatGw26iwrayHsvQaew_aDEs8.roa (raw, json)
Hash identifier: GpB0u5ieZOGy01npDimz/n2lC84dkZaJrDHglnxydmg=
Subject key identifier: 2A:FB:DA:B4:6C:36:EA:2C:2B:6B:21:EC:BD:06:9E:C3:F6:83:12:CF
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0BF6
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KvvatGw26iwrayHsvQaew_aDEs8.roa
Signing time: Wed 29 Sep 2021 02:50:43 +0000
ROA not before: Wed 29 Sep 2021 02:50:43 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 54994
IP address blocks: 61.221.181.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3062 (0xbf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:43 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2AFBDAB46C36EA2C2B6B21ECBD069EC3F68312CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:de:71:b2:2a:bd:2b:dd:66:19:31:ff:3c:
b1:6e:e8:78:e3:9c:a4:24:b5:bd:52:0c:cf:90:33:
99:7e:64:bc:fe:bf:2a:35:67:1e:22:7d:62:4e:7c:
0d:e9:fd:5b:cc:e1:63:b6:6e:17:21:25:66:cb:93:
b9:46:0b:6b:f5:3a:18:ff:6e:d9:f5:89:83:dc:fc:
fa:c3:e1:96:28:06:9e:b6:60:a3:47:08:07:61:eb:
a7:57:ba:26:2e:08:31:53:69:bc:f1:aa:77:94:99:
a5:b2:d5:f4:15:2a:b0:d6:1f:ca:04:85:99:73:b7:
11:31:fc:c9:3d:34:2e:ea:cd:c4:40:15:12:4f:cc:
b5:dc:20:c4:d1:0d:61:f9:c9:b1:12:c1:f9:ef:05:
e7:8e:3c:79:3a:73:7f:69:11:3c:ba:66:3a:a9:be:
62:0e:9b:68:ac:d3:d7:c5:62:3f:b9:4a:6a:e9:cb:
aa:d8:f9:53:df:76:6a:77:6f:e2:21:df:50:2b:05:
b3:50:4a:1e:ee:f0:e9:fb:c1:4c:e1:18:65:06:9a:
d3:8d:49:65:41:c2:01:39:f7:52:d8:ad:7e:d7:e0:
81:14:ac:e8:67:f1:de:62:c3:ca:e3:76:0e:d6:0b:
3e:ed:71:35:d8:1c:69:fa:1a:4e:27:02:1b:65:d6:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FB:DA:B4:6C:36:EA:2C:2B:6B:21:EC:BD:06:9E:C3:F6:83:12:CF
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KvvatGw26iwrayHsvQaew_aDEs8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.221.181.0/26
Signature Algorithm: sha256WithRSAEncryption
a4:e4:e7:13:49:15:6d:91:a1:16:0f:66:a1:bc:75:4f:64:71:
a0:ef:32:40:7e:4c:e8:3e:51:99:51:93:f3:03:b5:46:a4:fc:
92:78:ca:9d:45:ac:a1:68:ae:3f:f2:72:ca:3d:ee:cd:28:10:
a1:34:a1:2b:46:04:78:4e:32:a0:8e:a5:73:42:d0:fa:d8:51:
67:87:f0:9f:e7:53:29:c0:99:bc:4d:f0:21:90:68:60:c0:d7:
4c:43:cf:2f:e3:db:c9:cd:ec:86:ad:f7:58:84:63:ae:28:b0:
1b:81:56:72:74:aa:a7:02:17:42:42:5e:40:11:0d:f3:ad:fd:
9a:89:db:4d:dc:1c:f3:ff:64:37:83:74:7a:f2:b3:bc:2e:97:
20:60:25:e6:fa:58:8b:d0:92:8b:fc:d4:61:3f:e5:0f:cb:26:
2c:99:2b:2e:4a:ff:b3:6d:29:38:b0:01:5d:b3:b4:dd:4a:7e:
21:4e:d7:4f:db:37:54:06:04:6b:09:65:a0:aa:3b:2f:5c:35:
e1:fb:b6:7e:ff:ce:08:8c:04:68:ba:78:ef:b4:eb:d8:da:41:
28:77:2e:ed:2b:fd:2c:a1:24:b4:36:9f:fd:49:1b:60:0b:bd:
b9:6d:60:c9:fb:8b:aa:5f:c2:7e:fd:11:94:f7:8d:b8:66:6b:
3e:17:8a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org