Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/h-ptmTZuAm-rOtskXUJZ_TXyQq8.roa
File: h-ptmTZuAm-rOtskXUJZ_TXyQq8.roa (raw, json)
Hash identifier: AJbq3u67wV00y4NozZfhSe7bFcxNJmQICo2ZHW7Py6k=
Subject key identifier: 87:EA:6D:99:36:6E:02:6F:AB:3A:DB:24:5D:42:59:FD:35:F2:42:AF
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 087A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/h-ptmTZuAm-rOtskXUJZ_TXyQq8.roa
Signing time: Tue 29 Sep 2020 09:58:46 +0000
ROA not before: Tue 29 Sep 2020 09:58:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 211.23.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2170 (0x87a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=87EA6D99366E026FAB3ADB245D4259FD35F242AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:7e:bb:db:31:86:77:a6:38:78:06:d1:9e:
04:a9:d2:ce:9c:3d:80:4d:6e:32:2d:63:31:d1:32:
e9:69:35:aa:da:70:cf:24:29:44:f6:a6:ef:7b:7f:
2b:e5:7c:6e:67:77:77:40:43:d4:24:4a:18:d0:13:
f2:c6:bb:42:67:4c:fd:5e:cf:59:a9:10:2e:95:5f:
fd:83:3a:ab:b5:d6:3d:cf:8a:78:e0:59:f8:29:18:
3e:38:01:a0:35:04:13:52:64:b6:bd:00:c7:9a:8d:
92:c6:f3:3f:7d:5c:8d:9c:2d:f9:ff:ae:dd:d6:77:
7b:d0:1e:b5:18:aa:34:5f:94:c6:61:af:c6:eb:f6:
db:ca:17:a4:e0:c7:e7:a9:e5:aa:48:a8:99:55:c8:
b0:7f:a3:3a:03:7a:37:3c:f9:dc:a5:3c:46:cf:44:
0f:1f:d0:f0:2c:6f:ec:b4:66:8a:a6:a8:8e:d6:dc:
9c:82:1e:65:68:0c:a5:34:f5:5c:83:43:0e:8a:6a:
cb:9f:18:9a:a1:b1:4a:96:92:78:f1:1f:4b:91:df:
1a:58:53:b6:65:97:47:c1:da:ab:61:65:82:01:a1:
ca:f4:19:eb:24:2c:35:9e:da:99:3c:90:de:e8:8c:
2d:85:f9:6b:cb:dc:99:d5:26:06:af:df:19:f1:27:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EA:6D:99:36:6E:02:6F:AB:3A:DB:24:5D:42:59:FD:35:F2:42:AF
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/h-ptmTZuAm-rOtskXUJZ_TXyQq8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.23.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:82:82:7f:1a:72:72:0c:7d:7c:32:38:2d:20:1d:f8:40:aa:
4c:5e:25:21:53:0f:e4:f9:b1:af:a3:d9:d2:be:dd:7a:e7:be:
85:99:99:42:2c:14:ce:97:4d:b3:95:df:0c:a9:84:e8:67:2a:
a2:6f:b1:be:57:64:ae:c0:46:fb:02:9e:38:51:c9:1c:ef:4c:
6a:10:7c:45:5a:6c:a7:fb:34:25:90:c6:43:08:34:79:07:c3:
e9:c3:13:01:38:81:00:31:1e:27:75:62:de:f1:d8:50:fd:5b:
b6:d5:51:06:c0:92:f9:00:c6:31:7d:ba:e7:da:43:d1:ba:a6:
89:58:0d:62:f6:70:ee:29:a4:27:e5:8c:0a:df:02:52:d2:47:
75:76:25:bd:df:5f:68:44:66:d8:7c:87:4c:5f:ab:4d:4d:1a:
8c:05:92:43:7e:e6:74:2f:e0:cc:61:8c:98:b8:bb:85:7d:de:
d5:34:41:55:43:dd:bf:f0:95:7d:31:e5:e7:ff:ae:19:e9:a8:
df:3e:57:1d:2a:fd:f4:52:68:57:55:1f:f6:16:b6:5a:09:7f:
86:29:20:ad:ff:51:82:b8:c1:37:42:89:81:27:9c:99:70:c0:
a0:27:a6:f1:ee:4b:cf:ac:ae:14:9b:d6:11:2c:ce:96:8c:13:
89:16:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org