Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Rqx9xK9aq-Bev0dkaRAad185nbs.roa
File: Rqx9xK9aq-Bev0dkaRAad185nbs.roa (raw, json)
Hash identifier: 7f9OiCErhjkDN3BuMVormzyrDwaflgknRtTA4Fjw3Ow=
Subject key identifier: 46:AC:7D:C4:AF:5A:AB:E0:5E:BF:47:64:69:10:1A:77:5F:39:9D:BB
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0A93
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Rqx9xK9aq-Bev0dkaRAad185nbs.roa
Signing time: Sun 07 Feb 2021 11:38:19 +0000
ROA not before: Sun 07 Feb 2021 11:38:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 210.241.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2707 (0xa93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:38:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=46AC7DC4AF5AABE05EBF476469101A775F399DBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:4c:bf:3d:14:3f:79:5e:68:ad:b1:2e:47:
5f:73:c8:23:78:f7:5d:a6:87:e9:40:1e:0c:87:dc:
eb:49:d3:e0:a5:59:da:a4:90:7d:6e:e9:15:10:2d:
57:55:db:b7:27:df:dd:03:a0:a8:fc:9c:35:dd:ba:
d7:94:89:26:12:89:0f:84:da:a8:9b:2b:9c:6e:72:
99:da:4d:4f:e2:c5:11:76:a4:f3:47:04:19:a1:9d:
1b:b6:37:9f:40:2b:28:c3:f4:0e:fe:5c:03:d9:38:
55:ed:50:e7:e3:aa:81:76:fd:15:d5:fe:72:00:37:
e5:e5:5e:5d:37:b3:ec:79:d3:b2:4e:ae:0c:b7:c5:
06:3d:fa:98:6a:6f:4a:06:bb:75:3d:cc:bf:24:4a:
b8:92:32:e7:1d:22:b9:da:08:61:fe:d4:89:55:da:
60:7c:7a:16:e1:29:71:88:cd:2f:d9:32:4c:0e:ca:
de:17:fa:62:b3:d9:ab:97:68:79:7b:23:96:81:31:
69:a4:6a:8c:e3:92:dd:a0:51:22:17:42:ab:a9:cd:
81:b5:6d:5c:ca:21:e6:18:ce:0f:84:b6:68:35:a0:
cf:8a:ca:44:52:c6:f0:0d:63:d8:17:69:6d:60:25:
5a:73:bd:af:f4:01:91:48:ee:9e:26:9b:74:6d:73:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AC:7D:C4:AF:5A:AB:E0:5E:BF:47:64:69:10:1A:77:5F:39:9D:BB
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Rqx9xK9aq-Bev0dkaRAad185nbs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.241.224.0/19
Signature Algorithm: sha256WithRSAEncryption
b0:bc:3c:01:49:06:fb:19:19:2c:2a:c1:76:c6:c3:63:10:0a:
89:59:79:d7:88:e3:6d:66:4e:5f:12:ec:b0:41:2c:ec:c8:56:
41:6e:33:06:5b:af:37:2b:f8:31:06:79:ef:04:d6:0e:ce:33:
f0:38:50:1b:5a:29:73:3b:4e:1f:41:63:f2:2b:3a:25:e4:4f:
5e:46:eb:39:25:f6:a5:50:2c:b2:90:df:f0:2a:52:79:ac:b6:
8e:5a:01:a1:12:3e:58:36:9a:93:f7:bf:ed:10:1b:21:db:41:
f4:ab:8e:5a:5c:9b:03:e7:82:24:22:8b:80:01:4a:e1:8c:29:
ec:e0:f6:47:99:18:80:c4:80:1f:c5:12:a6:d4:6d:0b:70:11:
3d:3c:d2:f6:e5:21:cb:c3:87:b9:e9:30:cf:77:3d:40:67:4d:
dc:8d:d7:33:b5:06:45:86:53:82:de:67:58:99:f1:00:f9:2d:
b0:bd:1e:02:14:58:9a:40:f2:7b:4a:de:38:d7:e2:e5:60:cb:
d0:b2:47:d7:75:36:b2:fa:cf:24:47:b9:4c:54:4c:3b:9e:e3:
fd:5b:e2:ba:ae:b4:8c:11:4c:85:9e:24:91:4b:ac:07:4e:a3:
99:c0:69:a6:20:52:fa:18:53:e0:86:02:53:4c:7e:66:03:0f:
dd:19:2d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org