Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/MYRKKVWqq9OXhyeTs7beoJHkMqM.roa
File: MYRKKVWqq9OXhyeTs7beoJHkMqM.roa (raw, json)
Hash identifier: iZEwv/pPw7FOUh0boiQyvr2HsAEzaW+72jBlPuxwboU=
Subject key identifier: 31:84:4A:29:55:AA:AB:D3:97:87:27:93:B3:B6:DE:A0:91:E4:32:A3
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C7B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/MYRKKVWqq9OXhyeTs7beoJHkMqM.roa
Signing time: Wed 29 Sep 2021 02:51:19 +0000
ROA not before: Wed 29 Sep 2021 02:51:19 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 137280
IP address blocks: 203.69.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3195 (0xc7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:19 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=31844A2955AAABD397872793B3B6DEA091E432A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:54:1f:71:92:a0:86:d2:81:6a:44:c3:d5:
4f:37:ff:2f:15:ab:16:e6:d2:f3:12:98:5b:ce:05:
a7:48:aa:9b:bb:d1:3a:0f:9f:6d:f6:a9:05:89:63:
82:32:36:ee:80:b2:e7:3f:8f:51:a3:6e:64:0d:84:
b0:b8:8f:bb:98:c2:bb:be:16:2d:f2:ef:1e:6c:9b:
26:77:fe:9c:a6:a2:90:99:45:d1:0f:36:07:df:ba:
c2:50:11:a9:cd:fc:c8:64:12:47:cf:14:fc:1d:52:
d8:04:ed:37:e0:ca:7b:3a:c7:4a:63:a3:0e:a0:0b:
24:ef:f4:14:a0:9f:43:00:b4:52:2d:4c:cf:dd:a7:
7d:b8:2a:6b:48:1f:c3:47:89:01:73:d2:1d:16:d9:
7a:d5:94:3a:45:7a:04:90:9b:11:0b:ac:c4:75:0c:
5a:b1:6c:e0:43:08:f9:3e:75:d2:34:7f:ae:7f:e8:
91:8e:32:70:17:de:27:4f:2a:24:dc:e9:9f:37:da:
19:0f:3b:3b:9f:0d:08:8b:e9:a5:db:7b:f0:97:7d:
8b:3d:a9:01:78:66:55:e4:cf:05:c0:39:a2:5f:2a:
f8:ad:62:27:4c:50:b0:08:81:d8:a5:2d:31:12:57:
58:76:45:29:41:0e:b7:69:8e:2a:be:c8:ad:f9:a8:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:84:4A:29:55:AA:AB:D3:97:87:27:93:B3:B6:DE:A0:91:E4:32:A3
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/MYRKKVWqq9OXhyeTs7beoJHkMqM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.69.19.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e0:95:7d:2f:7f:a0:a9:02:83:c9:78:be:c2:71:8d:63:e5:
5f:b9:7b:c4:d4:7d:ad:82:5f:c5:2d:b3:e6:d8:eb:55:b6:a2:
81:ce:4f:d3:06:88:cc:6f:ac:cc:f2:00:e7:d1:33:b4:37:9b:
dc:eb:0c:f4:80:10:50:0a:69:e2:7c:63:26:86:b2:b9:d4:d4:
f7:b4:cb:4e:04:98:cd:57:c0:e2:23:2b:df:e6:b3:5f:6e:38:
fd:07:b2:30:b2:08:c9:0a:48:1f:c3:63:49:d9:34:60:33:d9:
05:53:5f:1c:dd:b7:42:ab:88:4a:a5:29:df:ce:47:cd:b1:91:
dc:a6:f2:eb:d7:01:ee:e1:67:8b:69:7b:2e:2e:e3:4e:93:81:
e5:e4:59:21:85:8c:38:6f:8a:0f:05:33:da:4b:a4:59:80:8d:
05:50:9a:f3:34:31:28:25:f1:5e:60:f0:00:05:58:71:4f:dd:
a9:af:8f:20:bb:26:b2:d1:a9:37:6f:95:1f:0d:78:6f:98:96:
8d:ac:fc:8d:ee:08:cb:28:e6:28:01:3f:8c:ed:28:b0:14:a4:
aa:c9:92:f2:8e:c8:53:4a:5c:7e:98:0f:40:e5:a8:3c:73:45:
22:92:7e:e5:16:91:31:2f:0d:f6:da:05:f0:a7:66:6a:76:72:
6f:14:4c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org