Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/bg5U4O7ypvKZsj8ibYSJuZpsX9o.roa
File: bg5U4O7ypvKZsj8ibYSJuZpsX9o.roa (raw, json)
Hash identifier: M1rEY9hyfTsJqALnjv+ElXTzqaO6fAgwky9FrmnmBZo=
Subject key identifier: 6E:0E:54:E0:EE:F2:A6:F2:99:B2:3F:22:6D:84:89:B9:9A:6C:5F:DA
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0A80
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bg5U4O7ypvKZsj8ibYSJuZpsX9o.roa
Signing time: Sun 07 Feb 2021 11:38:02 +0000
ROA not before: Sun 07 Feb 2021 11:38:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 122.120.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2688 (0xa80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:38:02 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6E0E54E0EEF2A6F299B23F226D8489B99A6C5FDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:56:1e:83:a8:c7:7d:a3:f8:73:49:e5:21:48:
73:dc:99:99:04:cb:c4:89:cc:ce:d9:7a:84:6a:27:
40:9d:04:e0:30:b5:71:8f:12:de:67:0a:3b:11:91:
b3:e8:3d:95:ec:bf:ae:26:b8:30:91:db:6a:2f:02:
8b:12:b2:3c:9c:dd:a0:0b:cd:a5:e1:3f:57:0e:ea:
d9:96:15:bd:4e:3c:7a:4a:04:e4:0d:4a:7b:2f:2d:
5a:e9:cc:d4:ef:69:a2:c9:bb:63:03:63:4d:4a:27:
98:47:e1:0e:d5:55:ce:f5:b8:3c:f2:ab:dc:55:09:
91:d8:fa:3b:c2:4f:ef:0d:aa:f2:51:11:fc:92:0c:
3f:b9:3b:84:90:d3:c6:34:54:04:0c:d2:d9:40:0a:
c9:6c:ca:60:4b:2d:d7:74:cf:9f:db:d4:ab:07:b9:
cd:6f:62:d5:bf:d8:d9:d4:65:99:45:5b:dd:9b:69:
b9:50:0a:70:d4:70:ce:16:b3:dd:db:53:8c:0c:c9:
37:64:59:2a:22:e1:44:e1:4a:a7:de:e6:c4:00:4f:
b9:ff:41:37:8d:0e:4e:e2:2b:bf:22:29:d7:f4:79:
b8:dc:5e:c1:8b:92:c4:9b:0f:6e:29:d4:4b:c9:d4:
ae:ff:94:14:91:6e:b7:29:15:67:74:01:07:9c:68:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0E:54:E0:EE:F2:A6:F2:99:B2:3F:22:6D:84:89:B9:9A:6C:5F:DA
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bg5U4O7ypvKZsj8ibYSJuZpsX9o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.120.0.0/13
Signature Algorithm: sha256WithRSAEncryption
87:99:9a:a5:68:2e:d9:14:b4:3e:a8:9e:7c:77:97:94:85:c1:
a9:f8:a7:8f:a5:7b:08:86:51:84:ec:de:b3:2a:8a:e5:0e:8c:
f6:46:01:96:ba:da:40:a7:23:0d:92:2d:7c:bf:9f:55:18:dc:
df:5b:5f:02:44:91:0e:e5:66:13:46:fb:7c:a1:cd:b5:f2:4a:
23:04:6f:90:94:05:35:41:79:f2:c5:06:df:61:31:3b:24:74:
1b:bc:ad:10:7d:05:6a:5a:01:18:08:43:3a:25:8f:d3:57:af:
9d:fa:90:5f:d2:b3:09:fd:3c:85:ba:1d:c0:c1:6a:be:27:b6:
ae:79:bf:ab:21:10:63:9e:1a:f2:37:56:2a:81:3d:36:60:3d:
dc:6f:66:3d:a8:b5:14:74:41:b8:8f:74:39:f5:9b:90:f5:a2:
cf:92:a3:02:78:c9:36:7f:91:8c:4b:9a:ea:e0:43:3f:55:a3:
7f:c2:d3:df:cb:e0:5f:1c:bb:93:6c:cd:fd:32:0a:1d:82:06:
e7:5b:1d:e8:13:f7:bf:a5:7d:38:2a:26:fe:34:60:4c:bc:c9:
f8:e8:f3:97:bd:2e:b8:de:8f:87:47:ca:7c:42:3e:c7:e3:61:
73:22:1b:fc:94:4c:56:92:92:27:e6:92:a3:17:e9:c3:cd:cb:
cf:7a:bd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org