Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_HdZAPcgnyPZOYmyxrHJ14-V7CU.roa
File: _HdZAPcgnyPZOYmyxrHJ14-V7CU.roa (raw, json)
Hash identifier: SnIqNr1YnlsvCcgMD54ZzAe8xp8NHLRKHpXzNOIuJCE=
Subject key identifier: FC:77:59:00:F7:20:9F:23:D9:39:89:B2:C6:B1:C9:D7:8F:95:EC:25
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C02
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_HdZAPcgnyPZOYmyxrHJ14-V7CU.roa
Signing time: Wed 29 Sep 2021 02:50:45 +0000
ROA not before: Wed 29 Sep 2021 02:50:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 20940
IP address blocks: 203.74.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3074 (0xc02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FC775900F7209F23D93989B2C6B1C9D78F95EC25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:0e:9f:97:00:5d:ee:77:03:f8:21:53:64:
b6:c0:e9:6e:e3:14:4a:86:e5:da:12:43:88:ab:e6:
5e:47:40:60:c4:db:2e:64:5b:ec:d1:46:9f:ea:18:
ad:1d:19:08:a7:c0:a2:81:0d:c7:ed:b2:17:8b:70:
d5:3a:e6:3d:c0:92:07:71:61:6a:60:38:d2:ed:ff:
01:fb:53:68:8a:e9:ce:a7:e7:ed:ba:0d:89:00:71:
76:01:98:3c:b1:cc:22:74:05:48:b6:cd:d4:3c:0f:
de:83:50:29:31:e6:39:30:c7:0f:db:51:51:21:f7:
63:43:24:9c:f6:55:09:b2:68:0c:f7:85:fb:8a:ec:
1c:78:65:08:1c:7c:cd:3e:fe:29:63:8c:db:6c:ae:
56:e5:45:76:66:8b:bd:e0:73:6b:e9:f8:0b:59:bc:
94:5e:0e:4b:28:6a:03:3f:bf:c0:61:cd:4b:10:e4:
cb:ca:b6:f4:ed:db:1e:c3:d7:d2:6a:59:39:eb:66:
d7:7b:24:69:51:21:43:b4:54:16:14:61:7d:50:80:
4b:05:3b:e0:5a:55:e7:64:97:e0:9e:76:e0:e5:70:
3a:27:d9:ed:b2:73:7d:f7:bb:f0:33:33:05:a5:36:
1e:72:a6:1b:17:c2:d5:19:b8:23:f2:69:ec:97:52:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:77:59:00:F7:20:9F:23:D9:39:89:B2:C6:B1:C9:D7:8F:95:EC:25
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_HdZAPcgnyPZOYmyxrHJ14-V7CU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.95.0/24
Signature Algorithm: sha256WithRSAEncryption
43:31:17:ff:11:f4:20:b1:20:ec:5b:97:5d:35:90:07:fd:d1:
11:12:de:67:ea:a9:ce:7b:d9:54:25:32:54:de:48:32:e9:b8:
9b:b7:59:a0:47:20:01:d6:d2:17:a6:45:30:39:13:dd:40:92:
e5:b5:11:52:7a:87:46:50:12:1a:39:f5:47:08:de:65:ed:37:
49:ec:77:a6:ef:4c:0d:4a:f5:b0:23:92:ff:1d:80:48:47:77:
93:ed:a1:4e:24:56:67:4e:f1:93:43:35:1d:30:7e:de:30:70:
d1:a8:89:65:92:3f:59:92:33:c6:c0:1c:7d:3a:13:44:3f:57:
ad:3d:e0:84:63:8b:72:b7:73:5a:4c:8f:c8:d4:05:cf:3a:94:
27:f2:7b:32:76:68:15:05:8d:66:45:3f:3f:c0:8d:ca:ac:f7:
93:d8:c8:1e:d4:f4:e4:f2:72:02:8a:5b:37:32:27:a9:8d:da:
dd:45:7c:22:5b:ab:bf:92:c1:c7:45:f4:32:15:6d:fd:f4:be:
cd:a9:2f:d7:71:55:84:4b:35:f0:c8:35:63:a7:9e:86:86:33:
f0:38:7a:da:70:6f:20:04:0c:9a:a8:cd:0a:26:ad:26:81:b3:
6b:03:83:ac:e6:3c:5c:a2:e8:07:b1:22:50:da:6a:1f:d1:48:
e1:fb:92:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org