Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/jYhnUg3RYLop_G-PViJJEPblt1U.roa
File: jYhnUg3RYLop_G-PViJJEPblt1U.roa (raw, json)
Hash identifier: oBY+iFm8V9sn4W2fmHsW++iBVnhIby+8cg6ntaP9vTo=
Subject key identifier: 8D:88:67:52:0D:D1:60:BA:29:FC:6F:8F:56:22:49:10:F6:E5:B7:55
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0880
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jYhnUg3RYLop_G-PViJJEPblt1U.roa
Signing time: Tue 29 Sep 2020 09:58:48 +0000
ROA not before: Tue 29 Sep 2020 09:58:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 20940
IP address blocks: 203.66.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2176 (0x880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8D8867520DD160BA29FC6F8F56224910F6E5B755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:d2:58:17:23:8b:42:74:80:9e:bb:7b:48:
5e:c1:ae:7c:2b:0f:ae:3d:84:89:4f:59:ad:bf:80:
63:50:87:be:6c:1f:98:63:00:d9:1d:1b:21:9b:4b:
c0:3e:bd:8c:55:43:a7:99:55:e8:62:72:93:c7:b3:
c4:a8:49:db:cf:31:e6:4d:b1:d9:a3:96:9c:0f:8f:
05:08:f5:3d:f4:02:1f:bb:98:e6:45:32:14:f4:af:
92:11:d7:dc:c7:37:df:6c:09:95:a8:90:37:0e:ad:
48:bc:04:4a:56:fb:46:1b:98:ee:a4:21:27:99:f6:
cf:7b:64:73:71:93:06:13:a0:a4:8e:3e:a1:6f:1b:
c5:b6:e7:0d:98:06:87:99:e6:e6:81:c1:53:e7:be:
61:ff:69:04:4b:93:7c:70:a2:33:99:8c:92:68:98:
e0:e1:11:df:ec:90:8b:b2:ea:e1:4e:6b:5a:08:3f:
b0:d3:b1:69:e4:91:27:ec:f4:45:70:45:06:33:6a:
3f:1b:11:72:e5:29:43:2b:de:3d:8b:55:07:27:40:
12:72:77:77:fa:a4:fc:97:00:59:04:35:70:c2:e3:
26:97:6b:b8:22:65:db:b3:3b:d8:39:6a:66:a7:25:
eb:3d:df:0c:a1:49:6e:51:9a:7e:e9:ad:61:65:df:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:88:67:52:0D:D1:60:BA:29:FC:6F:8F:56:22:49:10:F6:E5:B7:55
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jYhnUg3RYLop_G-PViJJEPblt1U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.66.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a8:ef:b9:2a:f6:58:e0:7d:e1:77:e3:89:a9:a4:c3:6e:a4:
86:55:d7:db:d4:ba:13:92:76:9a:ed:4b:ab:a4:37:f8:ec:c6:
0c:ab:74:d4:a0:f5:9e:4c:1e:ae:c4:86:cd:4c:04:e2:1b:84:
e4:ca:5e:4c:c3:4f:36:26:ed:2d:33:9a:78:1c:de:ba:c1:94:
e4:f1:43:73:33:35:20:cc:a8:76:9c:47:91:cb:11:e2:89:c8:
65:fd:22:44:74:c0:59:cb:27:70:cf:26:c7:1f:7b:01:73:b4:
c6:56:3c:9a:f0:0c:8f:f8:47:ea:95:dc:b1:27:24:31:e4:b6:
2a:1b:95:4a:39:79:b9:23:6e:f1:be:5a:61:31:c6:3e:16:c2:
b0:82:63:f0:8a:bb:2f:fc:9d:7a:64:48:05:6b:5f:d2:1c:82:
66:6c:69:4e:4a:f2:99:7e:19:63:69:b5:77:0d:9d:85:3e:91:
ae:d8:37:08:1b:e9:49:8d:e9:7a:29:7e:c2:a5:23:fc:12:38:
73:9d:f5:99:aa:92:dd:a7:28:10:e7:0e:64:29:aa:e1:10:a5:
90:02:6b:dc:d9:70:69:fa:f5:15:da:54:f3:9c:f4:ba:d3:3e:
f6:81:6a:ac:61:2f:2f:08:d9:66:84:b8:ed:f3:a7:75:9b:ca:
2e:f5:ba:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org