Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ZPXPCyJoxjwNipCOm9XVQJu2nus.roa
File: ZPXPCyJoxjwNipCOm9XVQJu2nus.roa (raw, json)
Hash identifier: MVXPJHoaSeQB0zfyzUTJONAPeB5ScF8ybCrdoq7sYXY=
Subject key identifier: 64:F5:CF:0B:22:68:C6:3C:0D:8A:90:8E:9B:D5:D5:40:9B:B6:9E:EB
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0838
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZPXPCyJoxjwNipCOm9XVQJu2nus.roa
Signing time: Tue 29 Sep 2020 09:58:28 +0000
ROA not before: Tue 29 Sep 2020 09:58:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9505
IP address blocks: 175.41.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2104 (0x838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=64F5CF0B2268C63C0D8A908E9BD5D5409BB69EEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:93:46:a1:78:b3:84:1b:f7:22:0b:c6:f4:
a9:36:eb:b1:65:2d:4f:a4:01:f4:0d:57:9f:07:fe:
e6:8b:b1:c0:cd:51:bb:94:d7:d3:21:12:02:9b:68:
5d:3d:6d:ad:b9:82:a2:49:3b:a6:b0:7c:39:d6:d4:
02:96:88:da:5e:df:b2:a0:6b:36:67:ef:23:08:3c:
08:90:b3:f1:46:a4:a3:29:cd:42:25:0b:5c:f4:fa:
26:5a:82:2d:80:d0:fd:61:53:46:3c:28:77:b6:a4:
e5:bd:90:1e:da:f1:3c:e4:67:57:85:92:10:76:de:
91:2f:4f:aa:7e:c3:82:e0:df:c6:23:b7:d8:bc:c4:
56:f3:24:dd:5d:45:02:31:e7:24:9d:9c:4a:81:1d:
ac:22:c7:f4:be:d7:cc:4d:2d:69:29:66:19:6d:2c:
69:84:dd:eb:92:6a:e3:37:30:a5:23:d7:25:36:8a:
be:da:47:48:ea:ac:50:7d:cc:a0:4d:c4:26:db:f2:
4d:85:c7:8f:17:12:ab:32:69:83:db:2e:f8:8f:bc:
0e:2f:7d:5a:a5:52:76:d3:28:d9:34:10:d0:3e:d2:
29:e8:87:2b:f3:77:57:19:67:d8:a4:5f:fe:a7:57:
32:90:a8:45:02:64:e9:38:15:03:3b:cd:a9:da:59:
0e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F5:CF:0B:22:68:C6:3C:0D:8A:90:8E:9B:D5:D5:40:9B:B6:9E:EB
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZPXPCyJoxjwNipCOm9XVQJu2nus.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.41.48.0/20
Signature Algorithm: sha256WithRSAEncryption
22:df:b6:ad:56:06:d1:19:98:ab:96:34:e6:0b:71:e3:5f:bd:
5a:60:e5:c9:d5:d5:41:dd:06:45:e2:1d:a2:12:40:13:d6:21:
61:b1:2d:2e:55:77:b9:7a:54:ca:35:af:c3:a3:24:c9:7a:10:
c7:19:62:a6:0a:01:0c:b4:2b:13:06:ba:41:79:f8:85:e4:36:
3a:19:89:c1:a9:06:cb:77:aa:18:89:0b:a0:ea:74:24:33:84:
9f:38:25:12:b3:c8:3e:fd:a4:4a:c3:fe:59:ab:a2:30:ee:47:
99:b6:ad:1e:5e:49:e5:b0:d1:5d:c7:50:35:c4:5a:9d:51:8e:
5c:2f:aa:d8:51:bf:7c:ab:39:1c:42:43:eb:9f:2e:e1:4b:7f:
a4:68:b7:22:bd:02:65:70:bd:11:da:90:5b:ce:67:72:67:4e:
56:09:b1:3d:d4:f6:d4:33:4b:00:80:0a:d3:cd:46:91:8c:90:
b6:c1:d3:56:1a:5c:c9:24:cc:11:d2:e4:d1:e8:87:cf:69:97:
76:ba:22:75:46:14:62:db:31:51:b4:64:23:88:cb:e0:36:59:
e3:e8:c6:f6:43:21:5b:65:b3:0c:44:6a:81:75:60:3a:06:ce:
5f:86:24:a4:60:2f:fd:15:da:45:e9:70:61:d8:1b:41:a1:bf:
ff:6e:19:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org