Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/QWvHiDb6t-qd09mDQTOqdADhiEU.roa
File: QWvHiDb6t-qd09mDQTOqdADhiEU.roa (raw, json)
Hash identifier: 3kzb1+2SQg5VwKSLJ2EMvPXQvKzyKu/T2DUoKMjpTmA=
Subject key identifier: 41:6B:C7:88:36:FA:B7:EA:9D:D3:D9:83:41:33:AA:74:00:E1:88:45
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 085F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/QWvHiDb6t-qd09mDQTOqdADhiEU.roa
Signing time: Tue 29 Sep 2020 09:58:41 +0000
ROA not before: Tue 29 Sep 2020 09:58:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 218.164.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143 (0x85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=416BC78836FAB7EA9DD3D9834133AA7400E18845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:98:b1:eb:67:f7:a6:89:84:30:df:82:a2:
62:4a:a3:c9:87:2c:bf:2b:ee:09:a1:9f:ce:5c:c5:
07:6f:7d:a9:e8:3a:c7:19:d2:5a:e6:4c:ec:a6:b9:
bb:c6:df:67:27:6e:8e:cd:e7:93:95:fd:8e:c4:bf:
d9:66:6e:74:da:06:b7:a3:ce:ef:a3:b6:6d:e8:3e:
03:fe:99:df:06:b4:fd:6a:ed:39:1b:55:3d:09:6b:
58:c1:d2:6f:7e:b1:41:0e:5d:c6:86:af:e0:df:b9:
2c:43:72:ef:f5:0a:89:8a:d2:e7:46:d7:f7:5b:32:
42:77:49:43:25:dc:e6:18:fc:7f:a0:c3:2e:86:8a:
ab:09:1a:21:6f:54:5b:27:d2:39:51:45:c2:bc:fb:
97:50:3d:f6:d8:63:6e:28:60:64:38:ae:34:87:d5:
05:2e:3c:17:2d:00:cd:7d:b3:ec:3e:49:98:3b:01:
81:a1:9f:f8:84:35:59:10:68:87:fa:77:84:a1:f1:
06:2e:ef:c3:d5:41:9f:86:ed:e4:cc:a7:e8:f9:33:
c2:95:f0:f6:8a:bb:4d:66:30:51:74:8f:22:04:e5:
96:33:27:2c:4b:9f:55:f6:c7:51:bc:a9:f7:69:61:
ba:73:38:ed:66:93:ca:17:ec:91:b0:f6:a9:79:ca:
0a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6B:C7:88:36:FA:B7:EA:9D:D3:D9:83:41:33:AA:74:00:E1:88:45
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/QWvHiDb6t-qd09mDQTOqdADhiEU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.164.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7d:21:ce:ca:30:8e:87:78:09:97:a7:66:26:c7:ad:e0:1b:d4:
94:9d:03:88:5c:4b:ff:93:24:41:aa:6c:21:98:56:1c:d5:a5:
11:1f:92:df:d6:fa:33:f7:5c:ae:78:ce:47:d4:de:42:9f:f8:
0c:6e:ea:9e:b7:35:28:80:11:24:10:fe:6e:e7:31:32:64:22:
e7:ba:b8:46:f6:7c:5f:97:93:ee:77:29:41:52:07:38:0d:76:
c6:be:15:c5:c4:b1:61:b7:79:1d:71:bd:c9:4f:46:40:f7:4e:
57:2d:4c:7e:59:58:24:b3:1a:5f:a2:e1:38:2e:5f:6f:ea:55:
68:d1:bc:bd:b8:5b:71:c8:da:44:e8:65:7d:04:a4:28:05:e6:
85:2d:c2:7e:4b:25:23:41:d6:a0:12:6e:94:8a:17:da:bb:1e:
df:3e:fd:61:79:f2:94:92:a4:d6:1a:b0:30:51:c5:c0:d4:08:
7b:af:07:ee:a6:94:80:b7:95:b2:23:18:da:b6:74:b4:57:0b:
a9:14:e3:91:b2:bb:d1:be:4e:37:56:0b:d9:bd:78:9c:c7:29:
a5:d7:b7:eb:0f:6c:77:a0:66:54:6b:28:05:a7:d5:7a:8b:30:
71:3f:05:ab:7e:71:73:1b:9e:b1:19:65:d6:c7:6c:aa:49:be:
be:95:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org