Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/jM06nZy059a5UP2uzdy7nKsMBfc.roa
File: jM06nZy059a5UP2uzdy7nKsMBfc.roa (raw, json)
Hash identifier: 6bWtEHANapMeSfZY6HiePu4Kdm4hHZfJx6wB8yTbV/s=
Subject key identifier: 8C:CD:3A:9D:9C:B4:E7:D6:B9:50:FD:AE:CD:DC:BB:9C:AB:0C:05:F7
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 086D
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jM06nZy059a5UP2uzdy7nKsMBfc.roa
Signing time: Tue 29 Sep 2020 09:58:43 +0000
ROA not before: Tue 29 Sep 2020 09:58:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 10126
IP address blocks: 175.111.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157 (0x86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8CCD3A9D9CB4E7D6B950FDAECDDCBB9CAB0C05F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:a5:ca:03:96:ea:38:57:9c:0a:2e:b2:a5:
22:5c:f3:06:01:66:29:b4:ec:a7:b5:16:6f:8a:03:
c5:db:a7:21:8f:92:f4:e0:a0:7f:69:96:94:be:70:
0f:07:cf:f5:08:64:e5:a4:10:2a:77:06:04:43:a6:
77:0d:3e:a2:94:19:98:e1:10:f3:09:c3:2b:63:0d:
31:52:8d:0c:b7:55:fc:cc:e1:c6:ed:2e:1c:6c:f0:
e2:d7:a2:18:3e:96:5f:33:df:00:3c:8c:43:39:d1:
61:27:0a:c8:dd:f6:2a:fa:ed:b7:10:31:91:d1:64:
d7:18:48:69:1f:e0:ee:74:46:ae:bb:d3:ce:56:bd:
e5:33:42:42:7c:cc:7a:97:7d:d6:16:cb:f1:ff:a6:
72:f3:68:a2:db:f4:a4:18:fd:fb:2e:1f:6f:65:c8:
61:6d:63:65:35:cf:7a:68:22:37:f1:13:16:c4:87:
1b:7d:11:88:c5:07:c2:92:23:87:ef:f0:91:05:d1:
67:84:a7:e2:29:b4:14:9f:1b:f0:8c:59:c9:2d:45:
e4:9d:76:55:ec:9e:7a:fe:03:b8:23:92:22:7e:e2:
01:cc:74:59:d7:a9:f7:b8:f1:bc:92:5d:8e:ab:0a:
33:cc:4e:d6:11:75:8c:0c:45:b3:aa:e2:ab:b2:53:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CD:3A:9D:9C:B4:E7:D6:B9:50:FD:AE:CD:DC:BB:9C:AB:0C:05:F7
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jM06nZy059a5UP2uzdy7nKsMBfc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.192.0/18
Signature Algorithm: sha256WithRSAEncryption
ae:73:18:12:fc:35:cf:11:31:7a:fc:79:eb:fd:2a:0c:e2:3c:
45:bb:b8:9d:91:d3:2e:0b:26:02:1a:15:b5:a9:7f:d0:24:3e:
ea:3a:37:63:13:88:1f:d2:6c:39:0e:d9:9c:5b:83:49:54:f4:
92:84:85:0f:6f:b4:d6:1e:78:c3:91:23:48:56:02:6a:a7:b6:
e3:f0:69:ad:7b:bd:3f:08:07:7c:77:48:05:9e:be:9c:08:d2:
cd:2b:4b:3c:bb:c3:08:7b:d3:d7:18:9e:1f:1e:36:94:f7:5e:
ed:bf:2e:5f:db:5a:fb:aa:28:70:60:47:30:bb:0b:e3:5b:64:
af:0f:e6:ad:6f:74:30:79:a5:e7:65:2e:89:bb:a7:3b:9b:fa:
80:f5:2a:ff:16:29:77:c4:84:e0:85:82:86:8c:1c:73:03:70:
4f:ef:8d:3c:8b:5d:a5:f8:cb:f3:e8:88:8f:b5:01:e3:05:91:
54:ca:c6:67:2d:db:2a:c3:c0:da:fc:e5:08:d7:7f:d5:dd:f1:
17:d0:cf:6d:5a:e5:59:72:56:0a:9a:d8:39:9a:7b:a9:78:2c:
f5:57:3a:dc:6a:31:6d:43:1b:4c:94:52:6d:92:83:7e:87:94:
d9:78:51:71:dc:2e:1c:ba:98:40:15:b2:ec:d7:e3:2b:17:95:
9b:3a:41:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org