Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/SVNGoDOxUbOgVDL3u3a0RS8B6Ww.roa
File: SVNGoDOxUbOgVDL3u3a0RS8B6Ww.roa (raw, json)
Hash identifier: UGBC6ksT46bTikBc5uvlycgZYGckZKbgl4MCaIHnGHU=
Subject key identifier: 49:53:46:A0:33:B1:51:B3:A0:54:32:F7:BB:76:B4:45:2F:01:E9:6C
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 081F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SVNGoDOxUbOgVDL3u3a0RS8B6Ww.roa
Signing time: Tue 29 Sep 2020 09:58:23 +0000
ROA not before: Tue 29 Sep 2020 09:58:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9505
IP address blocks: 175.111.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2079 (0x81f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:23 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=495346A033B151B3A05432F7BB76B4452F01E96C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:1b:dd:f7:a8:67:7f:1c:79:3d:cc:de:ab:
d3:cc:f7:cd:12:52:c0:e6:3f:0d:78:08:11:0d:c0:
e0:36:d5:5e:5a:0e:ac:27:6f:4f:fb:48:96:8e:7f:
65:ca:e4:9b:44:e1:f8:55:22:c1:2d:a4:b0:47:7b:
19:fc:a2:dd:bb:b8:58:80:7b:31:a6:d5:80:34:1b:
e7:7d:f0:e4:2d:bf:11:ae:d6:49:eb:12:4c:ed:ed:
8f:10:83:c5:b3:ea:1e:7d:2f:29:36:87:f2:d1:99:
ec:c0:ae:50:1f:49:02:d4:4f:a4:ad:d9:ef:c9:e7:
96:f2:06:c9:95:e0:27:38:be:6a:2d:e5:30:05:8b:
05:9a:39:a2:ec:ac:4c:b3:2c:ee:20:48:51:bb:81:
89:4e:fd:3d:4d:6a:b9:c7:65:21:32:ab:e3:b7:b6:
fd:ca:0c:3f:dd:f6:24:6f:17:67:57:46:53:11:c3:
a2:cb:87:65:b3:0f:e6:9a:b3:0c:8a:e8:42:1b:d3:
fb:5f:5a:8a:f8:cb:56:2f:ee:29:06:d1:f0:db:7e:
b3:47:63:90:ee:ad:89:c3:9a:5e:27:fa:95:4a:c6:
5b:4e:0e:76:52:e5:bb:03:49:cb:e3:0c:88:36:b5:
0c:c3:dc:6b:51:43:df:7e:c4:f2:b4:07:f4:c5:61:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:53:46:A0:33:B1:51:B3:A0:54:32:F7:BB:76:B4:45:2F:01:E9:6C
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SVNGoDOxUbOgVDL3u3a0RS8B6Ww.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.224.0/20
Signature Algorithm: sha256WithRSAEncryption
bf:4c:d4:3c:09:ff:ed:29:31:e0:b2:f5:2a:d6:59:3c:c2:29:
91:16:b0:33:c1:68:9b:e5:79:b6:92:55:b7:6f:23:42:61:1f:
f1:b9:a8:6e:9c:60:88:b5:8c:d4:d0:50:2b:8b:0c:6c:70:eb:
42:a2:b9:1c:f4:f4:f8:da:5b:25:ad:25:ae:bc:2f:09:0e:d2:
f4:f1:55:65:aa:e8:b7:76:c5:b0:57:06:fb:7f:9a:05:91:a2:
c4:a5:dc:e4:a0:de:6d:b4:86:dd:8a:7c:dc:05:8b:44:ed:2e:
09:b4:c3:15:28:dd:3c:7d:8e:4c:1d:3a:60:43:48:ce:90:11:
dc:66:93:63:0b:0c:6b:4a:a9:b9:08:92:c7:23:eb:3b:a5:c4:
d7:f5:45:ef:b1:e6:13:85:0c:57:69:8c:38:d7:4e:22:4a:96:
5c:6f:c8:1e:f8:ea:ec:db:ef:b2:d0:de:8a:c6:25:c5:4f:df:
da:a9:05:48:f5:eb:78:6e:ec:21:45:fc:36:75:dd:68:25:25:
c5:be:8a:06:50:4f:a5:cc:10:35:89:0d:d6:e6:b9:e5:2f:ee:
12:f4:59:69:06:fc:b3:98:d8:bb:9d:9d:08:13:28:0a:54:6c:
f2:f5:67:a0:4d:f5:8c:8f:bd:f8:4b:f6:14:f9:38:93:97:94:
a8:3a:2b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org