Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/iIRLLNySFLOKHyMxwls4jBa1Lyw.roa
File: iIRLLNySFLOKHyMxwls4jBa1Lyw.roa (raw, json)
Hash identifier: 0lAuboJD8AXiVJ1odnfEDd/nRZLSo6pzA8HuFQ2pyrk=
Subject key identifier: 88:84:4B:2C:DC:92:14:B3:8A:1F:23:31:C2:5B:38:8C:16:B5:2F:2C
Certificate issuer: /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Certificate serial: 084C
Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/iIRLLNySFLOKHyMxwls4jBa1Lyw.roa
Signing time: Mon 09 Nov 2020 02:06:49 +0000
ROA not before: Mon 09 Nov 2020 02:06:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131660
IP address blocks: 168.95.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124 (0x84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Validity
Not Before: Nov 9 02:06:49 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=88844B2CDC9214B38A1F2331C25B388C16B52F2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:8f:27:85:f6:63:bd:c9:3d:76:38:f0:60:
59:e8:63:ed:70:48:72:35:9c:e7:59:5f:b4:01:d4:
b7:be:de:01:42:a2:9a:ac:ab:5a:66:c5:0a:d3:4f:
ba:af:78:89:e9:d0:6b:c3:a6:71:d8:57:ab:98:33:
f0:88:4c:88:38:d7:a5:fd:31:dd:9f:22:58:22:d7:
01:bc:4b:56:65:7d:2e:43:21:04:40:6a:9c:88:59:
86:c5:e9:de:a8:8b:2a:53:0c:6f:cb:2f:9d:2b:3f:
15:da:e4:e5:74:e2:aa:ee:18:9f:74:05:d7:99:1c:
39:31:f3:86:93:cf:34:bb:62:12:47:c2:a1:37:81:
1d:ea:8a:20:13:ed:69:21:66:99:50:76:29:eb:25:
f4:0f:03:76:ad:b3:18:ad:5e:c8:22:02:ec:e3:c9:
d9:98:6c:6d:19:14:ca:35:be:53:3d:18:04:69:7d:
6f:a3:55:34:0b:f3:3b:0c:87:c2:df:f2:ea:1c:e8:
a7:97:31:60:fa:8d:27:38:34:0e:36:a2:f4:d7:5a:
11:ca:47:ec:ba:b8:e7:a1:e4:16:79:c9:e4:67:10:
f3:27:a4:c1:11:a2:0a:48:19:70:40:a2:9d:fb:af:
29:ef:97:b5:6c:a4:34:c6:24:cc:f1:23:ab:55:85:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:84:4B:2C:DC:92:14:B3:8A:1F:23:31:C2:5B:38:8C:16:B5:2F:2C
X509v3 Authority Key Identifier:
keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/iIRLLNySFLOKHyMxwls4jBa1Lyw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
168.95.246.0/24
Signature Algorithm: sha256WithRSAEncryption
90:62:8f:e0:a1:bd:3d:0b:7c:93:ff:a1:f9:5a:36:6d:10:98:
f8:13:3b:8d:24:02:79:e7:fc:cc:bb:ee:45:8b:43:75:3e:85:
11:9b:a1:58:10:c9:57:d1:e7:da:41:2c:16:c9:fb:c1:5b:a6:
75:06:43:41:f5:98:06:23:7d:56:8a:6d:0d:42:19:43:f6:3c:
2f:19:fe:0e:a0:51:b8:32:1b:05:84:2c:f5:c7:30:0d:46:14:
7f:62:20:ad:3f:fd:8d:cb:99:ab:e6:a4:1e:b6:53:55:40:1d:
81:f9:54:90:01:35:d8:cd:17:7a:22:2c:f3:bb:93:83:d5:95:
21:bf:8a:88:3c:18:83:f1:b2:0d:6f:70:14:3d:0d:ac:5b:88:
ae:b7:00:37:72:5d:9a:0e:0d:df:92:9f:b8:70:26:f1:fd:c3:
78:dd:63:77:8b:ac:e0:67:9c:8a:9a:b4:4d:60:50:0d:19:2e:
42:01:01:c3:a4:84:fc:6b:2c:3b:30:8b:3a:eb:95:a6:e9:52:
e5:2e:b0:61:06:45:82:ba:e7:87:7d:0c:36:0a:13:6e:45:24:
06:10:88:45:11:e1:be:04:9c:f3:dc:cc:36:a1:31:b5:e3:2e:
2d:b2:99:27:53:d8:1d:0c:bb:fb:85:f2:35:73:76:81:87:c4:
37:aa:46:50
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg3
NkU0QjhERkFBMjI0QzAxOUQyNDY5MzFGQzNDRDdBNEZFRUQyQTAeFw0yMDExMDkw
MjA2NDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDg4ODQ0QjJDREM5MjE0
QjM4QTFGMjMzMUMyNUIzODhDMTZCNTJGMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrbI8nhfZjvck9djjwYFnoY+1wSHI1nOdZX7QB1Le+3gFCopqs
q1pmxQrTT7qveInp0GvDpnHYV6uYM/CITIg416X9Md2fIlgi1wG8S1ZlfS5DIQRA
apyIWYbF6d6oiypTDG/LL50rPxXa5OV04qruGJ90BdeZHDkx84aTzzS7YhJHwqE3
gR3qiiAT7WkhZplQdinrJfQPA3atsxitXsgiAuzjydmYbG0ZFMo1vlM9GARpfW+j
VTQL8zsMh8Lf8uoc6KeXMWD6jSc4NA42ovTXWhHKR+y6uOeh5BZ5yeRnEPMnpMER
ogpIGXBAop37rynvl7VspDTGJMzxI6tVhZVzAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUiIRLLNySFLOKHyMxwls4jBa1LywwHwYDVR0jBBgwFoAUWHbkuN+qIkwBnSRp
Mfw816T+7SowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
V0hia3VOLXFJa3dCblNScE1mdzgxNlQtN1NvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9XSGJrdU4tcUlrd0JuU1JwTWZ3ODE2VC03U28uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9pSVJMTE55U0ZMT0tIeU14d2xz
NGpCYTFMeXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF/2
MA0GCSqGSIb3DQEBCwUAA4IBAQCQYo/gob09C3yT/6H5WjZtEJj4EzuNJAJ55/zM
u+5Fi0N1PoURm6FYEMlX0efaQSwWyfvBW6Z1BkNB9ZgGI31Wim0NQhlD9jwvGf4O
oFG4MhsFhCz1xzANRhR/YiCtP/2Ny5mr5qQetlNVQB2B+VSQATXYzRd6Iizzu5OD
1ZUhv4qIPBiD8bINb3AUPQ2sW4iutwA3cl2aDg3fkp+4cCbx/cN43WN3i6zgZ5yK
mrRNYFANGS5CAQHDpIT8ayw7MIs665Wm6VLlLrBhBkWCuueHfQw2ChNuRSQGEIhF
EeG+BJzz3Mw2oTG14y4tspknU9gdDLv7hfI1c3aBh8Q3qkZQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org