Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/f4yYJ1EQ4oLOpzZBB25JFZ-2Xo4.roa
File: f4yYJ1EQ4oLOpzZBB25JFZ-2Xo4.roa (raw, json)
Hash identifier: u/mCDE4vPd6/RcBs2VQsEIgL9HeAb3DHS5w0iDyORTo=
Subject key identifier: 7F:8C:98:27:51:10:E2:82:CE:A7:36:41:07:6E:49:15:9F:B6:5E:8E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C00
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/f4yYJ1EQ4oLOpzZBB25JFZ-2Xo4.roa
Signing time: Wed 29 Sep 2021 02:50:45 +0000
ROA not before: Wed 29 Sep 2021 02:50:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 20940
IP address blocks: 203.74.67.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3072 (0xc00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7F8C98275110E282CEA73641076E49159FB65E8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:d7:cd:75:d9:9a:b6:f1:5e:24:03:e9:5c:
4d:26:1b:ec:b0:d2:35:cd:bb:29:61:35:91:1c:5f:
61:8b:3d:18:24:d0:bd:ab:16:ca:0c:c8:f8:14:6e:
7a:d5:a6:cf:5a:c5:31:cb:2a:da:94:c1:da:9b:bf:
ae:60:56:75:99:10:e8:91:2c:26:94:b8:5b:b3:ea:
86:bd:60:b5:88:30:ca:92:56:21:83:00:b1:3a:e9:
78:4d:6d:aa:3b:85:b9:c8:33:99:36:69:30:b5:19:
15:bc:39:12:1c:18:f3:b9:b0:4b:bb:d3:ca:83:61:
1a:2d:30:ec:ef:bb:32:30:b8:e6:b0:8d:25:b1:bf:
e0:e4:0f:9e:f0:9c:89:cc:4e:78:bf:97:a5:a8:3e:
92:62:db:50:85:92:4b:fb:0f:c9:99:70:4a:28:10:
fa:39:0b:17:06:e1:ff:59:2c:00:7c:ee:1f:fa:13:
a5:8a:93:07:ae:f7:61:fa:fb:29:a9:de:5a:e8:cf:
0a:77:6a:9e:72:17:ac:d8:94:bd:e2:17:07:80:8a:
e1:fb:18:1e:86:c1:33:83:bf:92:99:46:a7:b3:d9:
c0:48:4b:11:52:3b:75:14:81:7d:d5:db:af:2d:72:
5d:1c:e6:72:60:68:a8:9a:36:dc:5e:44:31:c0:59:
3e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8C:98:27:51:10:E2:82:CE:A7:36:41:07:6E:49:15:9F:B6:5E:8E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/f4yYJ1EQ4oLOpzZBB25JFZ-2Xo4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.67.0/25
Signature Algorithm: sha256WithRSAEncryption
30:06:ee:f2:ed:f2:8b:eb:61:f6:4c:34:6c:c5:7c:b2:0a:a2:
8d:75:b9:03:99:ac:2e:86:40:28:e2:e4:0b:7f:b0:2e:3d:d7:
e9:53:bc:5d:11:a0:a1:9e:0b:e6:a2:ea:a5:31:fa:49:7b:51:
73:25:9a:0c:e7:98:24:38:49:94:00:07:3e:33:b4:92:f0:27:
a9:d5:f7:94:02:33:c5:81:eb:f8:3b:9a:b7:70:8d:9a:e1:e8:
81:2c:fd:45:0a:f6:5f:1a:3a:64:2d:15:c4:10:c2:92:ca:f8:
74:33:5e:b7:28:f9:d2:2c:ef:ab:dc:23:fa:c8:84:13:1e:02:
17:11:5f:81:8a:a1:10:67:3b:96:29:f8:0d:a3:6b:c6:c5:df:
a3:e7:50:26:ec:b4:64:c7:4a:a8:2f:77:26:cc:89:25:06:70:
e3:bd:ad:18:73:ef:00:1f:75:c4:d2:52:3b:e7:50:df:17:38:
1d:96:be:89:59:91:d7:74:ba:be:97:a5:5f:1e:55:3f:e8:09:
03:7f:50:f6:a6:e7:3f:ac:14:30:e1:24:4d:87:05:9f:9c:27:
ad:b8:2e:9c:5f:56:b0:29:70:c6:dd:20:66:8f:ba:15:37:6a:
ae:6d:af:0e:7d:65:c8:9a:38:08:46:02:7b:db:c3:8f:02:d0:
71:f5:b5:70
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICDAAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTA5Mjkw
MjUwNDVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDdGOEM5ODI3NTExMEUy
ODJDRUE3MzY0MTA3NkU0OTE1OUZCNjVFOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpMNfNddmatvFeJAPpXE0mG+yw0jXNuylhNZEcX2GLPRgk0L2r
FsoMyPgUbnrVps9axTHLKtqUwdqbv65gVnWZEOiRLCaUuFuz6oa9YLWIMMqSViGD
ALE66XhNbao7hbnIM5k2aTC1GRW8ORIcGPO5sEu708qDYRotMOzvuzIwuOawjSWx
v+DkD57wnInMTni/l6WoPpJi21CFkkv7D8mZcEooEPo5CxcG4f9ZLAB87h/6E6WK
kweu92H6+ymp3lrozwp3ap5yF6zYlL3iFweAiuH7GB6GwTODv5KZRqez2cBISxFS
O3UUgX3V268tcl0c5nJgaKiaNtxeRDHAWT6VAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUf4yYJ1EQ4oLOpzZBB25JFZ+2Xo4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9mNHlZSjFFUTRvTE9welpCQjI1
SkZaLTJYbzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHy0pD
ADANBgkqhkiG9w0BAQsFAAOCAQEAMAbu8u3yi+th9kw0bMV8sgqijXW5A5msLoZA
KOLkC3+wLj3X6VO8XRGgoZ4L5qLqpTH6SXtRcyWaDOeYJDhJlAAHPjO0kvAnqdX3
lAIzxYHr+Duat3CNmuHogSz9RQr2Xxo6ZC0VxBDCksr4dDNetyj50izvq9wj+siE
Ex4CFxFfgYqhEGc7lin4DaNrxsXfo+dQJuy0ZMdKqC93JsyJJQZw472tGHPvAB91
xNJSO+dQ3xc4HZa+iVmR13S6vpelXx5VP+gJA39Q9qbnP6wUMOEkTYcFn5wnrbgu
nF9WsClwxt0gZo+6FTdqrm2vDn1lyJo4CEYCe9vDjwLQcfW1cA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org