Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/LAqrcLgaXFPOGoKmSfaanJFCks8.roa
File: LAqrcLgaXFPOGoKmSfaanJFCks8.roa (raw, json)
Hash identifier: Ym37AygK5LqLwDz4vfBgv9i0sJPmYbxmWmDtA/eqiik=
Subject key identifier: 2C:0A:AB:70:B8:1A:5C:53:CE:1A:82:A6:49:F6:9A:9C:91:42:92:CF
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C2F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LAqrcLgaXFPOGoKmSfaanJFCks8.roa
Signing time: Wed 29 Sep 2021 02:50:59 +0000
ROA not before: Wed 29 Sep 2021 02:50:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 220.129.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3119 (0xc2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2C0AAB70B81A5C53CE1A82A649F69A9C914292CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:63:dd:ec:fd:49:74:9a:99:76:54:8c:62:
ec:cf:9c:b6:51:3c:57:52:55:bf:6f:7f:27:23:45:
77:62:0e:d7:14:99:2b:a0:d0:c3:f6:17:42:74:02:
d7:19:fd:3d:b0:90:70:8c:79:8e:ee:cc:38:94:b9:
85:05:3f:61:f7:33:9e:92:34:9b:bd:f4:fa:52:77:
f7:3a:51:18:5d:98:4a:40:f7:c7:7f:38:0e:9a:fd:
51:59:4d:8d:2a:28:6a:43:3f:f5:e9:b7:06:af:db:
fb:9c:50:e6:70:a8:6b:98:fa:d5:55:5f:f5:62:0b:
50:80:0d:6c:ae:58:5e:13:26:58:bc:12:ae:11:03:
ee:c2:20:ff:14:54:09:d3:e6:a6:75:da:76:c2:ca:
12:6f:b1:49:a9:c8:48:d9:38:3f:97:33:6e:23:81:
7a:98:9e:62:e0:48:3b:07:a4:54:4f:c7:1f:d1:9f:
cd:bd:7f:a0:32:d6:05:1b:67:67:1c:35:dc:80:53:
dc:ad:12:72:20:e1:fd:28:6f:83:56:24:74:bd:f8:
fe:b8:08:81:5a:d7:f7:af:a8:e6:1f:07:ba:91:27:
a8:ce:7c:ad:b4:05:a9:24:81:af:16:b5:90:eb:b5:
1f:9f:c2:ba:9c:77:e5:33:25:26:84:b4:06:45:e8:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0A:AB:70:B8:1A:5C:53:CE:1A:82:A6:49:F6:9A:9C:91:42:92:CF
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LAqrcLgaXFPOGoKmSfaanJFCks8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:15:9a:5c:3b:ab:f8:24:0f:e8:32:68:0c:11:e6:2b:66:19:
97:c9:d6:9c:49:79:25:5b:a2:47:d1:c1:34:38:9f:af:82:7e:
1c:36:e1:d0:2c:d1:8b:13:05:e3:e0:c7:d7:df:59:67:ca:4b:
1f:a5:44:0e:94:06:7d:3c:ca:b5:69:67:5d:c1:3a:02:17:f7:
4b:50:38:d2:54:2a:93:b1:6a:19:96:dc:cf:4b:8a:e9:3a:f7:
25:20:f2:9a:59:7e:0a:66:e8:7f:d5:21:85:1b:1e:b2:6f:cc:
f7:88:cd:2b:be:dc:45:3b:7b:45:14:94:c2:7f:dc:32:f9:54:
fe:ce:29:96:33:6d:a9:7e:72:e8:c7:b3:f0:fa:9d:82:1c:ec:
9f:1f:b2:b2:c4:51:9d:1f:64:a0:cf:3a:d2:d5:31:2b:bc:67:
ab:3b:ae:7c:db:31:e0:45:0a:97:ab:0a:c7:33:1b:4f:fd:e3:
8c:e9:19:59:aa:cc:80:7f:2c:4b:6b:4a:ee:88:1e:19:c4:00:
e8:0c:45:41:ba:7b:d9:a9:d9:5a:f9:3b:d0:75:82:70:ca:6c:
c1:c0:33:cd:77:e8:a5:a0:f3:a3:b0:e3:80:f5:2d:0c:be:2a:
3f:b3:cf:3c:4d:4f:cd:d0:39:ba:4c:ad:43:97:51:00:64:4d:
30:1d:93:df
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTA5Mjkw
MjUwNTlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDJDMEFBQjcwQjgxQTVD
NTNDRTFBODJBNjQ5RjY5QTlDOTE0MjkyQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/eGPd7P1JdJqZdlSMYuzPnLZRPFdSVb9vfycjRXdiDtcUmSug
0MP2F0J0AtcZ/T2wkHCMeY7uzDiUuYUFP2H3M56SNJu99PpSd/c6URhdmEpA98d/
OA6a/VFZTY0qKGpDP/Xptwav2/ucUOZwqGuY+tVVX/ViC1CADWyuWF4TJli8Eq4R
A+7CIP8UVAnT5qZ12nbCyhJvsUmpyEjZOD+XM24jgXqYnmLgSDsHpFRPxx/Rn829
f6Ay1gUbZ2ccNdyAU9ytEnIg4f0ob4NWJHS9+P64CIFa1/evqOYfB7qRJ6jOfK20
Bakkga8WtZDrtR+fwrqcd+UzJSaEtAZF6H37AgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQULAqrcLgaXFPOGoKmSfaanJFCks8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9MQXFyY0xnYVhGUE9Hb0ttU2Zh
YW5KRkNrczgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA3IEw
DQYJKoZIhvcNAQELBQADggEBADwVmlw7q/gkD+gyaAwR5itmGZfJ1pxJeSVbokfR
wTQ4n6+Cfhw24dAs0YsTBePgx9ffWWfKSx+lRA6UBn08yrVpZ13BOgIX90tQONJU
KpOxahmW3M9Liuk69yUg8ppZfgpm6H/VIYUbHrJvzPeIzSu+3EU7e0UUlMJ/3DL5
VP7OKZYzbal+cujHs/D6nYIc7J8fsrLEUZ0fZKDPOtLVMSu8Z6s7rnzbMeBFCper
CsczG0/944zpGVmqzIB/LEtrSu6IHhnEAOgMRUG6e9mp2Vr5O9B1gnDKbMHAM813
6KWg86Ow44D1LQy+Kj+zzzxNT83QObpMrUOXUQBkTTAdk98=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org