Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ZYD4p3rrtR7NH8whZVTn5ur75NU.roa
File: ZYD4p3rrtR7NH8whZVTn5ur75NU.roa (raw, json)
Hash identifier: JcgqVxQhjI7+BdUqciQoSiCvqiHusUeSjV9qq54o75c=
Subject key identifier: 65:80:F8:A7:7A:EB:B5:1E:CD:1F:CC:21:65:54:E7:E6:EA:FB:E4:D5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0B0B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZYD4p3rrtR7NH8whZVTn5ur75NU.roa
Signing time: Sun 07 Feb 2021 11:46:45 +0000
ROA not before: Sun 07 Feb 2021 11:46:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17714
IP address blocks: 203.160.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2827 (0xb0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:46:45 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6580F8A77AEBB51ECD1FCC216554E7E6EAFBE4D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:83:3f:2d:9d:ee:a1:a1:84:a6:b8:0a:83:
42:0e:50:05:42:7f:b8:4d:26:b2:d1:d1:e4:84:87:
2a:06:ce:e2:e9:72:bc:5b:fc:4e:ea:36:26:c9:18:
6f:92:3f:09:81:84:03:8d:68:cc:87:21:d8:f3:45:
45:9d:c8:75:43:94:70:4d:ef:a4:81:3f:93:83:ba:
63:d7:31:ab:ae:c3:3a:3c:22:d5:bd:41:1d:f0:3f:
f3:76:fe:e8:38:ba:cd:1e:4e:9b:98:8b:74:e7:60:
b5:e5:f6:39:db:a6:83:00:79:6b:dd:9d:ac:be:dc:
5c:d3:f5:35:6c:06:51:50:38:d0:7e:a6:e4:4f:87:
5b:e2:b9:ef:33:17:06:67:42:17:b7:0c:09:61:a2:
5e:88:84:67:1f:6a:69:df:63:47:0b:9b:65:0a:65:
bf:28:f5:81:09:6c:09:7c:df:03:85:c5:34:49:4f:
da:35:cc:e5:65:91:c0:a2:72:0b:87:cb:38:64:31:
f3:c6:ce:d1:a7:60:ff:e0:8e:ec:44:8b:08:f0:ac:
ce:d3:27:51:cc:3d:df:1a:65:46:a3:f6:73:bb:99:
a0:71:31:f3:1c:95:13:ac:0f:8a:9e:b0:e6:26:d4:
5e:9d:e6:3b:13:cd:78:18:44:e1:37:f0:43:db:fc:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:80:F8:A7:7A:EB:B5:1E:CD:1F:CC:21:65:54:E7:E6:EA:FB:E4:D5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZYD4p3rrtR7NH8whZVTn5ur75NU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.160.237.0/24
Signature Algorithm: sha256WithRSAEncryption
40:07:57:1c:2d:81:b9:79:83:ea:7f:c2:7e:bf:77:c5:f3:38:
0b:0e:53:a7:8b:45:21:83:ab:c6:7c:64:6b:3e:0c:80:ca:f7:
fc:24:3a:e7:8a:35:b0:72:08:cd:8b:1e:51:e9:bc:e7:92:bd:
fd:ec:40:21:64:74:92:1a:07:38:13:50:ef:a1:8c:4d:e8:9d:
05:fc:2f:6d:61:9e:b5:e9:e2:52:8d:7a:31:74:5a:79:f8:9c:
85:2f:f7:ee:59:b8:55:e1:60:6a:ca:13:ce:5f:ca:a5:7a:a9:
bf:7f:78:49:94:dd:bb:9d:54:f0:d6:38:77:20:8d:72:c6:e9:
5b:1c:32:7a:31:de:bd:83:eb:52:21:9b:5e:e2:9d:b4:ad:a7:
8a:a3:29:6c:fe:77:67:14:e3:03:0b:b9:da:69:fb:d0:f0:9f:
23:1f:d0:6a:4b:d7:4e:08:28:44:d1:fa:21:11:1f:02:4c:30:
de:b7:44:66:2d:44:e9:47:05:76:aa:2d:13:8f:8b:b1:ee:68:
21:8b:99:61:b1:6c:16:66:f7:00:6b:33:9b:ce:37:2a:fc:00:
f1:39:cf:0b:9f:b8:15:23:5a:55:2a:b9:1e:5d:8a:2e:4b:3f:
27:66:81:51:1f:81:e7:b5:e5:7f:29:56:0a:e2:42:81:ee:a3:
f1:26:2d:94
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCwswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTAyMDcx
MTQ2NDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDY1ODBGOEE3N0FFQkI1
MUVDRDFGQ0MyMTY1NTRFN0U2RUFGQkU0RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAJ4M/LZ3uoaGEprgKg0IOUAVCf7hNJrLR0eSEhyoGzuLpcrxb
/E7qNibJGG+SPwmBhAONaMyHIdjzRUWdyHVDlHBN76SBP5ODumPXMauuwzo8ItW9
QR3wP/N2/ug4us0eTpuYi3TnYLXl9jnbpoMAeWvdnay+3FzT9TVsBlFQONB+puRP
h1viue8zFwZnQhe3DAlhol6IhGcfamnfY0cLm2UKZb8o9YEJbAl83wOFxTRJT9o1
zOVlkcCicguHyzhkMfPGztGnYP/gjuxEiwjwrM7TJ1HMPd8aZUaj9nO7maBxMfMc
lROsD4qesOYm1F6d5jsTzXgYROE38EPb/BPzAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUZYD4p3rrtR7NH8whZVTn5ur75NUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9aWUQ0cDNycnRSN05IOHdoWlZU
bjV1cjc1TlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy6Dt
MA0GCSqGSIb3DQEBCwUAA4IBAQBAB1ccLYG5eYPqf8J+v3fF8zgLDlOni0Uhg6vG
fGRrPgyAyvf8JDrnijWwcgjNix5R6bznkr397EAhZHSSGgc4E1DvoYxN6J0F/C9t
YZ616eJSjXoxdFp5+JyFL/fuWbhV4WBqyhPOX8qleqm/f3hJlN27nVTw1jh3II1y
xulbHDJ6Md69g+tSIZte4p20raeKoyls/ndnFOMDC7naafvQ8J8jH9BqS9dOCChE
0fohER8CTDDet0RmLUTpRwV2qi0Tj4ux7mghi5lhsWwWZvcAazObzjcq/ADxOc8L
n7gVI1pVKrkeXYouSz8nZoFRH4HnteV/KVYK4kKB7qPxJi2U
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org