Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Lsn-JHPWxP8md7wolWzQU4O5P6c.roa
File: Lsn-JHPWxP8md7wolWzQU4O5P6c.roa (raw, json)
Hash identifier: DqzdBZ1y9qcVb7e8t9lhttDhYXbi/u7PPLvSt0TTbuY=
Subject key identifier: 2E:C9:FE:24:73:D6:C4:FF:26:77:BC:28:95:6C:D0:53:83:B9:3F:A7
Certificate issuer: /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Certificate serial: 077B
Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Lsn-JHPWxP8md7wolWzQU4O5P6c.roa
Signing time: Tue 29 Sep 2020 09:58:53 +0000
ROA not before: Tue 29 Sep 2020 09:58:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9680
IP address blocks: 168.95.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1915 (0x77b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Validity
Not Before: Sep 29 09:58:53 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2EC9FE2473D6C4FF2677BC28956CD05383B93FA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:5f:49:86:66:91:6c:af:c3:86:1f:d5:33:
f4:50:9c:bf:94:f5:44:a3:e3:cb:93:23:e0:37:a5:
ec:4a:ea:85:d0:d1:d6:0a:76:ab:92:be:1a:63:59:
fc:09:c6:23:1d:df:79:00:74:e6:27:d7:ff:8c:f5:
4c:46:24:d7:07:14:32:03:83:40:31:9a:8b:b7:51:
14:9a:db:6c:26:a9:6e:ca:46:ac:04:46:3f:38:0c:
cb:7c:a2:b9:f0:16:08:f8:19:a4:ae:e7:d6:78:59:
6f:a0:bc:57:b4:ed:b7:dc:c0:29:4f:45:bd:04:53:
a2:07:b8:02:12:bd:91:d1:64:3d:4c:67:b8:5e:c4:
4e:99:bf:df:91:78:66:2a:be:0b:ac:ac:ff:e2:1e:
28:f1:fd:89:ff:8c:7f:f3:e9:52:34:53:1e:28:d2:
b8:f1:14:08:45:3c:b0:5e:38:48:6e:a2:4e:58:70:
34:88:e2:63:74:da:ec:af:b1:d4:c9:c6:71:d5:30:
8f:a2:79:0a:bc:47:03:2d:5c:4a:7e:5b:55:70:7a:
18:a8:2c:26:60:50:22:56:62:03:8c:7d:c1:b8:43:
6a:fc:64:43:86:3a:1d:50:42:1e:c4:40:6e:aa:76:
16:cc:b9:64:90:30:7f:71:22:46:ec:c6:93:88:27:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C9:FE:24:73:D6:C4:FF:26:77:BC:28:95:6C:D0:53:83:B9:3F:A7
X509v3 Authority Key Identifier:
keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Lsn-JHPWxP8md7wolWzQU4O5P6c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
168.95.245.0/24
Signature Algorithm: sha256WithRSAEncryption
27:11:ab:04:eb:d6:29:00:99:82:b6:00:df:ab:93:d7:f9:21:
fa:5f:96:e3:4d:05:b4:69:62:28:74:d8:6a:09:21:7f:5e:e7:
2c:d7:da:0a:42:7a:0a:16:39:d3:64:23:fe:65:9f:9d:89:28:
c3:fa:88:c9:23:15:58:c2:4a:57:4a:e1:ac:f3:20:e2:95:40:
d7:3e:35:43:af:0a:2a:a6:8e:fe:17:6f:00:72:e0:9b:8c:d5:
10:3a:98:87:c3:ca:bd:68:51:ab:ba:18:7c:22:55:ad:a5:23:
79:59:d7:fd:08:e9:b6:00:a5:e7:a6:8b:4a:35:7f:e3:16:42:
87:d9:45:0b:2f:92:84:7e:21:59:4c:08:d7:24:ef:61:70:c5:
ea:68:06:75:47:09:d9:08:f5:2a:4f:48:41:3c:36:ed:ef:62:
4a:3a:85:54:c6:ea:ed:a7:8c:a4:b1:f2:29:59:f2:0e:de:b3:
ab:d3:a1:70:49:d9:1c:ec:f9:68:77:8b:d7:5d:e3:9a:45:91:
8c:c4:bd:e6:53:99:0c:ad:a0:d6:68:67:ef:08:46:90:6b:9a:
29:63:95:85:62:a7:3a:75:1a:3e:e7:5e:e8:e9:6d:b6:81:42:
8a:ef:8f:c3:e6:aa:26:e9:31:6a:2f:57:32:b5:f9:bc:84:d2:
a5:e4:f7:e3
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICB3swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg3
NkU0QjhERkFBMjI0QzAxOUQyNDY5MzFGQzNDRDdBNEZFRUQyQTAeFw0yMDA5Mjkw
OTU4NTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDJFQzlGRTI0NzNENkM0
RkYyNjc3QkMyODk1NkNEMDUzODNCOTNGQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOYF9JhmaRbK/Dhh/VM/RQnL+U9USj48uTI+A3pexK6oXQ0dYK
dquSvhpjWfwJxiMd33kAdOYn1/+M9UxGJNcHFDIDg0Axmou3URSa22wmqW7KRqwE
Rj84DMt8ornwFgj4GaSu59Z4WW+gvFe07bfcwClPRb0EU6IHuAISvZHRZD1MZ7he
xE6Zv9+ReGYqvgusrP/iHijx/Yn/jH/z6VI0Ux4o0rjxFAhFPLBeOEhuok5YcDSI
4mN02uyvsdTJxnHVMI+ieQq8RwMtXEp+W1VwehioLCZgUCJWYgOMfcG4Q2r8ZEOG
Oh1QQh7EQG6qdhbMuWSQMH9xIkbsxpOIJwKNAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQULsn+JHPWxP8md7wolWzQU4O5P6cwHwYDVR0jBBgwFoAUWHbkuN+qIkwBnSRp
Mfw816T+7SowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
V0hia3VOLXFJa3dCblNScE1mdzgxNlQtN1NvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9XSGJrdU4tcUlrd0JuU1JwTWZ3ODE2VC03U28uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9Mc24tSkhQV3hQOG1kN3dvbFd6
UVU0TzVQNmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF/1
MA0GCSqGSIb3DQEBCwUAA4IBAQAnEasE69YpAJmCtgDfq5PX+SH6X5bjTQW0aWIo
dNhqCSF/Xucs19oKQnoKFjnTZCP+ZZ+diSjD+ojJIxVYwkpXSuGs8yDilUDXPjVD
rwoqpo7+F28AcuCbjNUQOpiHw8q9aFGruhh8IlWtpSN5Wdf9COm2AKXnpotKNX/j
FkKH2UULL5KEfiFZTAjXJO9hcMXqaAZ1RwnZCPUqT0hBPDbt72JKOoVUxurtp4yk
sfIpWfIO3rOr06FwSdkc7Plod4vXXeOaRZGMxL3mU5kMraDWaGfvCEaQa5opY5WF
Yqc6dRo+517o6W22gUKK74/D5qom6TFqL1cytfm8hNKl5Pfj
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org