Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/SwDoRsYpJWeNQY9ntCehWFH6y-8.roa
File: SwDoRsYpJWeNQY9ntCehWFH6y-8.roa (raw, json)
Hash identifier: EesHAeSjARe1VQGl5/E4rp9wbPuJhkuSmd/yfhTGqG8=
Subject key identifier: 4B:00:E8:46:C6:29:25:67:8D:41:8F:67:B4:27:A1:58:51:FA:CB:EF
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0AFD
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SwDoRsYpJWeNQY9ntCehWFH6y-8.roa
Signing time: Sun 07 Feb 2021 11:46:29 +0000
ROA not before: Sun 07 Feb 2021 11:46:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 10126
IP address blocks: 175.111.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2813 (0xafd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:46:29 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4B00E846C62925678D418F67B427A15851FACBEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:71:78:5f:f1:46:cb:10:3e:21:77:b1:9b:
32:d0:38:df:4c:d7:47:49:3c:4e:c4:11:91:9d:46:
5f:11:29:4a:0d:99:7b:69:4b:e3:9e:ef:dd:11:99:
bc:f7:35:9c:a0:c3:41:cd:73:b7:03:41:b6:f9:de:
6d:2b:cf:5c:04:bf:e4:62:59:38:03:29:4f:68:2e:
a4:67:7c:2c:98:f4:d8:f2:19:63:14:d6:7a:38:d3:
b3:76:38:c3:42:b9:c6:67:a0:de:3a:c4:44:ac:aa:
61:e6:a3:c1:23:b9:7b:85:c9:6e:71:7e:46:c0:cc:
64:eb:d4:f7:e7:cd:df:1e:3c:28:43:83:91:ef:25:
22:4b:7b:aa:b6:2e:17:85:61:d8:2e:12:22:67:e4:
1f:fd:1a:28:19:67:1d:d6:e4:e4:a3:1c:a0:77:42:
51:0a:8e:14:fd:57:5c:a8:b7:c6:5c:ce:97:dc:d9:
d9:cb:68:be:55:23:8c:d4:41:e1:63:c7:cc:17:89:
a2:b6:6e:1a:aa:8c:ec:ee:74:3b:8f:a6:70:d5:5b:
0a:a1:c1:04:f6:aa:a9:d8:e7:ad:6b:42:79:2f:a1:
ff:51:2e:aa:29:de:f7:04:fa:1e:91:97:45:a1:46:
76:e5:84:f2:90:81:ee:ad:dd:d6:7d:87:b0:58:79:
0a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:00:E8:46:C6:29:25:67:8D:41:8F:67:B4:27:A1:58:51:FA:CB:EF
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SwDoRsYpJWeNQY9ntCehWFH6y-8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.192.0/18
Signature Algorithm: sha256WithRSAEncryption
54:b9:35:82:3a:95:3e:a5:91:ef:76:38:2b:a8:a0:98:4a:7f:
ed:04:62:c9:76:f7:12:e5:2a:49:06:55:73:e1:3c:78:a3:23:
e8:fc:92:38:6d:ee:e8:91:82:c6:a4:ac:e2:31:34:b6:c4:22:
c6:29:4c:37:c3:02:2d:2b:88:6e:48:9f:c9:d7:84:c6:65:d1:
a5:d3:94:b6:cf:18:20:c8:7d:5e:2b:0b:fc:33:1c:c4:75:aa:
96:f0:38:c2:46:c0:ea:1a:87:21:3c:c1:bf:13:fb:6e:86:c7:
bb:f2:5e:6d:52:d9:24:8c:4c:86:cd:f8:48:0c:a0:68:c6:33:
84:5c:f8:df:80:28:4d:e2:58:40:d2:d9:97:8b:27:78:94:2f:
19:a6:70:76:c7:00:22:9e:ab:17:b6:5e:36:2e:2d:d2:86:0b:
90:1d:f4:1d:de:0a:07:cd:ec:d6:89:7c:c6:4c:a6:d9:8a:30:
42:32:47:c8:c6:16:85:28:9b:21:70:23:c8:7b:63:70:f2:47:
b2:ef:3e:07:a2:a7:cc:04:50:e8:91:a9:e5:c7:57:bc:d5:ad:
1b:1a:dd:d2:d2:db:3d:1c:51:dc:71:4a:c3:49:09:67:1d:c4:
bc:94:38:ab:91:5f:46:a0:31:3d:d4:06:0e:9d:f8:8f:e3:74:
31:32:f7:ad
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTAyMDcx
MTQ2MjlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDRCMDBFODQ2QzYyOTI1
Njc4RDQxOEY2N0I0MjdBMTU4NTFGQUNCRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJQHF4X/FGyxA+IXexmzLQON9M10dJPE7EEZGdRl8RKUoNmXtp
S+Oe790Rmbz3NZygw0HNc7cDQbb53m0rz1wEv+RiWTgDKU9oLqRnfCyY9NjyGWMU
1no407N2OMNCucZnoN46xESsqmHmo8EjuXuFyW5xfkbAzGTr1Pfnzd8ePChDg5Hv
JSJLe6q2LheFYdguEiJn5B/9GigZZx3W5OSjHKB3QlEKjhT9V1yot8Zczpfc2dnL
aL5VI4zUQeFjx8wXiaK2bhqqjOzudDuPpnDVWwqhwQT2qqnY561rQnkvof9RLqop
3vcE+h6Rl0WhRnblhPKQge6t3dZ9h7BYeQq9AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUSwDoRsYpJWeNQY9ntCehWFH6y+8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9Td0RvUnNZcEpXZU5RWTludENl
aFdGSDZ5LTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGr2/A
MA0GCSqGSIb3DQEBCwUAA4IBAQBUuTWCOpU+pZHvdjgrqKCYSn/tBGLJdvcS5SpJ
BlVz4Tx4oyPo/JI4be7okYLGpKziMTS2xCLGKUw3wwItK4huSJ/J14TGZdGl05S2
zxggyH1eKwv8MxzEdaqW8DjCRsDqGochPMG/E/tuhse78l5tUtkkjEyGzfhIDKBo
xjOEXPjfgChN4lhA0tmXiyd4lC8ZpnB2xwAinqsXtl42Li3ShguQHfQd3goHzezW
iXzGTKbZijBCMkfIxhaFKJshcCPIe2Nw8key7z4HoqfMBFDokanlx1e81a0bGt3S
0ts9HFHccUrDSQlnHcS8lDirkV9GoDE91AYOnfiP43QxMvet
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org