Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/SdjGir0N1JywB_VpuVNXBDeV5NE.roa
File: SdjGir0N1JywB_VpuVNXBDeV5NE.roa (raw, json)
Hash identifier: kkYsrMe7pJ03Uu3y2MPFpvmakRY9CjN/6Tim42pXguA=
Subject key identifier: 49:D8:C6:8A:BD:0D:D4:9C:B0:07:F5:69:B9:53:57:04:37:95:E4:D1
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C3E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SdjGir0N1JywB_VpuVNXBDeV5NE.roa
Signing time: Wed 29 Sep 2021 02:51:04 +0000
ROA not before: Wed 29 Sep 2021 02:51:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 61.220.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3134 (0xc3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=49D8C68ABD0DD49CB007F569B95357043795E4D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:09:9d:cc:60:e3:0c:9e:e2:7c:c9:a4:32:e2:
0a:32:30:cd:ec:dc:64:df:39:0f:1c:da:fb:46:bb:
3f:19:72:65:fd:73:30:0a:d1:c3:8a:6f:d3:31:2f:
92:75:fe:60:8c:75:d3:80:c1:b6:1a:1a:bc:7b:75:
dc:a5:ac:4b:c9:2e:78:da:d9:0e:04:46:47:e4:36:
91:19:03:15:1e:5a:6a:f9:fb:4d:d6:bd:4e:79:8f:
bb:5e:2a:91:0f:8d:07:37:d8:c1:b4:72:86:2f:92:
92:0f:2d:c5:61:bc:7b:48:08:f2:58:da:37:4c:5e:
fa:cd:11:ef:f8:d7:6d:ef:d7:18:e4:a7:7a:12:c0:
49:4b:e3:c7:a3:41:4d:aa:a4:40:53:33:a2:f3:c7:
97:01:5f:88:c4:75:ca:4d:4c:22:83:0a:f9:60:3a:
4d:0d:0f:3c:87:a8:ed:f1:14:a2:17:98:27:3b:5d:
1e:60:41:e5:05:18:36:04:b9:f4:8b:f0:2f:1b:9e:
f9:25:5f:1e:90:95:93:e0:9b:25:3b:19:40:47:b8:
fb:9e:ab:af:b6:41:e1:f6:20:c6:49:11:95:04:42:
2a:d7:1e:00:00:f9:df:90:ac:f8:23:f4:4e:5f:e1:
ca:d2:89:cf:73:ba:89:4a:27:41:9e:65:97:21:a9:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D8:C6:8A:BD:0D:D4:9C:B0:07:F5:69:B9:53:57:04:37:95:E4:D1
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SdjGir0N1JywB_VpuVNXBDeV5NE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.220.0.0/14
Signature Algorithm: sha256WithRSAEncryption
1b:01:cb:4f:0a:28:83:a0:6f:5d:ec:d6:91:21:f3:82:12:f5:
ca:3f:9d:0e:b0:79:a3:6e:d5:cb:46:44:6b:69:fe:6f:a8:75:
65:3c:ad:c2:2b:b4:99:d1:f8:be:f0:59:df:92:1e:9f:f5:07:
76:37:0b:85:48:3b:21:3f:5f:53:c9:e2:58:45:07:43:c8:1a:
20:39:53:d2:cd:55:f1:33:91:63:5a:77:1a:98:b1:5a:8e:e0:
c0:d8:e9:a6:c5:00:eb:92:0a:85:b1:89:37:28:f1:e0:0e:55:
8a:8e:85:a3:8c:a6:a4:09:f6:c5:19:0d:c2:47:73:07:4a:9c:
3d:1d:08:7a:99:f9:bc:f1:e9:f2:d6:84:ce:3f:54:0e:1c:d3:
41:fa:ef:5b:82:0e:25:a2:1c:af:2d:14:7b:46:66:c7:ec:27:
29:3d:d2:22:f8:44:71:9a:ec:13:9e:a2:54:07:64:5d:65:4c:
ee:f1:65:5c:b6:8b:a8:e3:f8:ff:70:c5:dc:fb:15:3a:d5:e6:
f5:ed:ba:ac:ff:08:48:2a:58:d4:1a:fe:71:53:bf:e9:47:cc:
c8:51:51:ed:a9:1a:86:a3:4c:4d:98:d0:e9:a7:ba:cf:37:94:
26:4f:ae:7b:8d:13:4d:86:d4:9f:c0:e0:a8:26:2d:73:69:dc:
00:48:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org