Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ZeYHA6aIE5_Od_OTovMV3Jbwxs4.roa
File: ZeYHA6aIE5_Od_OTovMV3Jbwxs4.roa (raw, json)
Hash identifier: sX2Z4Xd9KDa2AyT7L3nfJ6nd1Me41S7m23YpX2Wkylo=
Subject key identifier: 65:E6:07:03:A6:88:13:9F:CE:77:F3:93:A2:F3:15:DC:96:F0:C6:CE
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C41
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZeYHA6aIE5_Od_OTovMV3Jbwxs4.roa
Signing time: Wed 29 Sep 2021 02:51:04 +0000
ROA not before: Wed 29 Sep 2021 02:51:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 202.39.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3137 (0xc41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=65E60703A688139FCE77F393A2F315DC96F0C6CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:9d:22:42:30:10:20:60:1b:f7:ae:ce:6f:
f2:78:28:eb:d9:e7:90:93:5e:f0:26:39:3f:89:41:
da:c1:aa:3c:1b:9f:39:b5:0e:98:9e:ff:6a:4c:25:
49:ba:76:b5:70:d3:e6:a1:d8:52:bc:fe:14:a3:1e:
9f:7d:de:7c:48:48:8b:42:25:1a:ee:af:15:28:93:
a9:50:bc:db:b5:08:a0:37:5b:15:ce:c7:27:82:66:
2f:a5:10:67:7c:1f:8e:b3:d6:65:b2:b8:99:9a:9b:
e7:bd:35:a9:63:91:16:5a:00:66:a7:a2:cc:43:26:
af:69:94:36:ff:ec:58:dd:81:58:b3:2f:ac:90:c9:
c4:d2:0c:8d:68:ac:e6:17:0b:12:8e:f3:6d:1f:94:
c9:58:63:65:5a:7d:70:92:26:29:b3:66:a9:8b:40:
5d:1f:21:e9:69:5c:60:9e:e2:08:e3:29:ec:91:ff:
79:f1:ca:25:99:a8:6a:eb:05:24:30:15:be:38:f8:
b9:9f:6f:fa:fc:92:b4:9f:09:cd:82:de:fe:37:5f:
21:e9:0b:bd:93:ad:8d:e2:df:e8:56:40:0b:b6:ba:
da:e5:82:f2:3d:5b:88:63:7b:6f:93:0a:4b:e2:a2:
fb:98:a4:cc:45:83:a4:6a:b7:0f:9b:82:c7:df:1c:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E6:07:03:A6:88:13:9F:CE:77:F3:93:A2:F3:15:DC:96:F0:C6:CE
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZeYHA6aIE5_Od_OTovMV3Jbwxs4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.64.0/19
Signature Algorithm: sha256WithRSAEncryption
09:90:80:f2:47:c9:ce:98:3f:c7:73:50:54:21:30:88:be:2a:
00:e7:23:07:ec:c2:0a:cc:65:43:8a:26:96:18:6c:c1:16:9d:
12:76:c0:33:3a:c0:21:a8:43:20:b6:41:ab:6b:a9:51:97:de:
45:05:59:31:b4:fe:4c:6b:52:59:cf:75:89:fb:37:2f:14:58:
b4:23:aa:07:fb:cf:64:c0:fe:fe:4e:93:e2:8b:96:53:6d:bc:
53:f5:32:71:a6:69:5a:13:e8:eb:5a:3b:48:6d:c8:ed:12:3d:
d5:f4:59:d5:75:4b:d7:33:e7:fc:f4:e5:fe:24:9a:cc:ff:cc:
c3:18:7c:ac:54:2f:cf:29:4d:5b:4b:0e:d0:0d:72:d4:e5:c3:
a3:fc:13:20:7e:06:fe:33:64:9c:aa:4e:a4:c7:12:2e:e5:9f:
ec:cd:c8:b2:27:2d:b3:ed:22:f4:cd:f4:1a:a1:9d:d5:5d:69:
f4:36:42:77:c5:99:c6:9b:97:6d:ab:e2:8c:e8:02:ff:6c:01:
3a:87:ee:ed:c5:19:b8:b1:39:b3:02:ff:b4:e0:31:99:f8:33:
3b:9d:0a:48:c0:72:ff:a9:0c:e2:a8:b0:7e:ee:c7:54:09:40:
4a:a2:64:fd:9c:11:9f:b8:da:88:52:f0:9e:b6:33:aa:45:af:
51:a7:3f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org