Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/jCcfo6IfbZaxnCzWstKA9Y7pB6U.roa
File: jCcfo6IfbZaxnCzWstKA9Y7pB6U.roa (raw, json)
Hash identifier: l+1IDWNcOTy6a8/k+dhVVB4bmFiqFtkXIVKlAPsgweM=
Subject key identifier: 8C:27:1F:A3:A2:1F:6D:96:B1:9C:2C:D6:B2:D2:80:F5:8E:E9:07:A5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0843
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jCcfo6IfbZaxnCzWstKA9Y7pB6U.roa
Signing time: Tue 29 Sep 2020 09:58:31 +0000
ROA not before: Tue 29 Sep 2020 09:58:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17421
IP address blocks: 221.120.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2115 (0x843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8C271FA3A21F6D96B19C2CD6B2D280F58EE907A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:06:31:9d:3c:53:83:a9:93:bc:d0:c3:8e:
82:4c:a0:36:91:09:f8:d8:04:de:91:54:b7:6c:c1:
f0:59:55:21:77:97:82:2d:d8:85:b0:5a:a6:2e:ba:
b1:c3:8b:02:10:3b:1e:03:eb:89:72:e5:16:53:4e:
ae:6f:e3:f5:d2:3f:53:82:b5:7c:87:90:b1:bf:7c:
b8:dc:06:f1:a9:b5:14:c3:20:01:59:b8:5e:6a:c2:
e0:87:ba:c8:d4:b3:fe:5a:11:70:b1:06:f9:10:2c:
e9:51:da:71:b1:f8:c8:b7:8a:da:37:50:11:91:2d:
b8:d2:a4:5c:eb:98:f7:af:6e:5d:f8:c5:68:89:cf:
51:5f:b0:51:a3:7c:3f:df:cd:58:82:0a:97:3d:75:
d3:89:5f:56:8c:8c:6d:c0:30:b4:fa:e5:83:34:f3:
d0:ef:bb:ad:6c:c4:56:ec:28:e8:bc:75:d2:1c:cb:
f9:df:b1:3a:5c:48:b8:d5:35:54:41:ab:5f:a5:8d:
3d:77:59:66:ec:be:08:7a:5f:84:83:34:df:50:48:
e0:9b:67:65:ce:7c:d6:de:2d:cc:e4:47:cc:6d:fe:
3e:ef:99:76:cf:6c:6a:6a:72:95:27:ad:86:34:81:
f4:06:42:cb:a4:df:b0:e6:15:3d:85:78:66:22:e8:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:27:1F:A3:A2:1F:6D:96:B1:9C:2C:D6:B2:D2:80:F5:8E:E9:07:A5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jCcfo6IfbZaxnCzWstKA9Y7pB6U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
221.120.64.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:e9:15:b3:fd:8c:a7:3f:76:45:62:8a:ac:37:e4:58:e6:92:
72:29:f4:c3:e5:b5:f5:81:10:c5:96:88:fe:3d:cc:ae:ad:22:
1a:ee:cd:a7:4b:e5:5e:f7:18:ed:b7:8d:1c:13:a8:97:f1:e7:
dd:5c:f1:6f:75:b0:64:67:05:22:2c:83:c1:0f:cc:a5:19:77:
b2:ce:15:79:04:65:56:fd:c1:58:d5:bd:80:2c:9b:df:ea:8c:
31:52:6e:07:e1:02:72:53:0a:d3:0d:d6:a9:55:72:2a:cf:05:
b4:ce:49:6e:d7:62:26:53:c6:03:b1:6d:8c:74:44:01:58:a8:
f5:bb:2a:e3:1f:f0:c7:52:5a:1a:6c:27:e2:ea:ce:13:ae:91:
39:4e:36:97:6d:21:f0:cc:ad:3d:61:e3:7b:5e:98:75:b9:f1:
bb:d1:0c:fc:d7:e4:8d:6e:2d:fb:8d:ba:86:1a:c5:a0:50:73:
88:14:9f:2c:6c:19:03:38:79:88:49:59:20:85:56:93:2d:d6:
ca:bc:c0:08:c3:2e:a4:a9:fa:0c:1d:c5:e8:36:c2:c2:7c:db:
d5:43:67:06:1f:25:c3:d6:e3:75:ed:39:42:f3:46:ff:2e:31:
a8:01:7b:a7:c2:f6:c0:f9:1b:84:9f:a1:e0:db:db:43:35:0a:
cc:0f:e4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org