Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/f0XAj6ybqiPdR6IX5MO6s8xJrEA.roa
File: f0XAj6ybqiPdR6IX5MO6s8xJrEA.roa (raw, json)
Hash identifier: ycah0PU5cMXTgPu6W1w/wRgn6EKvMu2KlMiOzzqV04s=
Subject key identifier: 7F:45:C0:8F:AC:9B:AA:23:DD:47:A2:17:E4:C3:BA:B3:CC:49:AC:40
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0A9F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/f0XAj6ybqiPdR6IX5MO6s8xJrEA.roa
Signing time: Sun 07 Feb 2021 11:38:30 +0000
ROA not before: Sun 07 Feb 2021 11:38:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 210.71.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2719 (0xa9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:38:30 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7F45C08FAC9BAA23DD47A217E4C3BAB3CC49AC40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:a3:00:f3:f9:0c:8e:50:e9:04:75:05:88:
f6:4e:24:78:01:89:06:a5:05:ad:87:40:d8:ec:22:
20:64:2f:7a:1a:89:34:9b:d5:51:e8:12:f0:f4:20:
c6:de:b4:1c:b6:ab:9b:4d:6c:84:a0:da:2a:84:0c:
f6:b8:b9:e5:b8:8a:38:45:b2:64:03:80:f4:79:13:
51:ba:79:57:a1:e0:07:ac:3b:f0:da:0a:13:53:4a:
52:59:ae:12:96:b6:3a:71:0b:0f:45:fb:7b:ed:53:
dc:a2:7c:74:4b:01:2c:86:ff:a7:bc:4f:cb:cf:16:
19:40:ec:10:a3:e3:fa:a8:b0:29:cc:c6:9f:e9:1a:
aa:40:2b:6d:cd:0b:34:89:ee:b2:5f:b3:ef:cf:b6:
57:d6:e2:c7:4f:77:48:1f:73:a5:35:9e:67:b1:09:
69:32:de:f0:ea:30:d2:64:4f:9d:fd:2e:b8:ba:a7:
65:cb:bd:7c:3b:42:dc:51:85:71:39:a6:09:40:ee:
22:a1:5d:fa:14:94:ea:4d:46:93:e1:43:2c:29:3e:
c1:df:34:6f:a3:7b:4d:89:a4:d1:90:50:c9:44:da:
c1:9f:11:47:9f:81:f5:9b:56:64:c1:f9:26:4d:98:
78:65:ca:e0:c8:d6:98:91:7c:28:f0:ed:53:51:fe:
d6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:45:C0:8F:AC:9B:AA:23:DD:47:A2:17:E4:C3:BA:B3:CC:49:AC:40
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/f0XAj6ybqiPdR6IX5MO6s8xJrEA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.71.128.0/17
Signature Algorithm: sha256WithRSAEncryption
25:c2:81:d6:f4:7b:29:4c:4d:62:aa:b0:a1:7b:21:3b:bd:dd:
29:d5:08:f0:e2:66:5d:df:7e:b3:23:a4:34:c9:04:17:85:6d:
0d:ce:86:c2:1e:89:46:a4:ca:2e:2c:a2:f2:04:39:25:6c:3e:
56:67:35:b9:be:c0:47:31:0b:c1:1f:61:cc:bb:ee:a7:b9:e8:
fb:96:21:1c:79:ff:01:26:f1:44:a5:62:da:0c:78:83:01:27:
55:7e:1e:73:a1:00:6d:5e:88:ea:c0:42:e8:66:2c:42:8f:c6:
ae:d7:f0:4a:01:ba:db:c8:08:c5:09:fb:f8:3f:c6:08:14:75:
5f:07:c4:a9:c5:ec:6e:67:de:90:e1:3a:1d:0d:96:0f:12:51:
94:e9:32:08:25:a1:e4:6b:ea:7a:ce:a0:b7:53:ae:c3:d8:3d:
05:2b:16:9c:a3:5e:40:43:01:2c:96:c2:da:6c:5c:91:8e:d1:
55:b8:6e:55:e3:cc:c6:54:d2:78:62:ac:88:9c:e3:43:77:e8:
4f:58:82:6d:63:17:20:0e:b0:3c:e1:4e:a2:b1:5c:0f:23:9f:
b1:60:5d:2b:8b:49:c0:d4:74:2e:a6:1e:60:bd:e7:36:c5:26:
73:28:ac:d5:b1:fb:79:e6:74:53:81:e0:2c:c4:1a:29:af:a1:
86:62:db:31
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCp8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTAyMDcx
MTM4MzBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdGNDVDMDhGQUM5QkFB
MjNERDQ3QTIxN0U0QzNCQUIzQ0M0OUFDNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZzaMA8/kMjlDpBHUFiPZOJHgBiQalBa2HQNjsIiBkL3oaiTSb
1VHoEvD0IMbetBy2q5tNbISg2iqEDPa4ueW4ijhFsmQDgPR5E1G6eVeh4AesO/Da
ChNTSlJZrhKWtjpxCw9F+3vtU9yifHRLASyG/6e8T8vPFhlA7BCj4/qosCnMxp/p
GqpAK23NCzSJ7rJfs+/PtlfW4sdPd0gfc6U1nmexCWky3vDqMNJkT539Lri6p2XL
vXw7QtxRhXE5pglA7iKhXfoUlOpNRpPhQywpPsHfNG+je02JpNGQUMlE2sGfEUef
gfWbVmTB+SZNmHhlyuDI1piRfCjw7VNR/tZdAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUf0XAj6ybqiPdR6IX5MO6s8xJrEAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9mMFhBajZ5YnFpUGRSNklYNU1P
NnM4eEpyRUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0keA
MA0GCSqGSIb3DQEBCwUAA4IBAQAlwoHW9HspTE1iqrCheyE7vd0p1Qjw4mZd336z
I6Q0yQQXhW0NzobCHolGpMouLKLyBDklbD5WZzW5vsBHMQvBH2HMu+6nuej7liEc
ef8BJvFEpWLaDHiDASdVfh5zoQBtXojqwELoZixCj8au1/BKAbrbyAjFCfv4P8YI
FHVfB8SpxexuZ96Q4TodDZYPElGU6TIIJaHka+p6zqC3U67D2D0FKxaco15AQwEs
lsLabFyRjtFVuG5V48zGVNJ4YqyInONDd+hPWIJtYxcgDrA84U6isVwPI5+xYF0r
i0nA1HQuph5gvec2xSZzKKzVsft55nRTgeAsxBopr6GGYtsx
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org