Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/jzf55u884XApiMChakhw_p826qU.roa
File: jzf55u884XApiMChakhw_p826qU.roa (raw, json)
Hash identifier: w+fYlOTTfd5FFhw13dtBlkCrSJd+YBwj6b9NO2K2Ss4=
Subject key identifier: 8F:37:F9:E6:EF:3C:E1:70:29:88:C0:A1:6A:48:70:FE:9F:36:EA:A5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0881
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jzf55u884XApiMChakhw_p826qU.roa
Signing time: Tue 29 Sep 2020 09:58:48 +0000
ROA not before: Tue 29 Sep 2020 09:58:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7481
IP address blocks: 210.62.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2177 (0x881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8F37F9E6EF3CE1702988C0A16A4870FE9F36EAA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:43:0d:b7:47:84:75:e1:c1:83:f1:a1:41:
c3:82:df:fc:02:d1:31:87:e0:58:5b:7e:6c:5d:e7:
41:89:96:58:24:e7:55:d4:30:84:80:99:c7:ea:47:
b9:c6:07:87:d0:7c:2f:2d:7a:a3:d0:fa:29:b0:93:
86:73:16:af:44:b3:a7:14:c2:57:ac:36:28:1e:14:
0c:8b:6d:34:ae:92:e6:da:86:25:20:f4:be:70:12:
3f:b8:74:5f:59:9c:6f:a6:23:59:8e:69:7b:a9:1a:
60:d1:58:92:5d:c2:25:97:dd:87:90:d1:81:ad:e1:
77:9a:68:fc:ff:68:05:97:29:ef:06:28:9b:d8:26:
67:f1:ad:1e:b5:e9:f1:8a:18:bb:49:ff:96:a8:59:
91:94:a5:62:bb:d5:35:bf:cf:72:ec:13:f1:de:36:
ae:d1:1e:76:d7:47:36:58:0c:50:31:02:76:62:45:
4b:71:c0:96:36:7e:56:92:f3:0b:c1:1a:65:54:50:
36:0f:f1:46:3c:3e:33:76:87:ab:fc:c0:36:2d:4c:
83:37:46:18:94:8c:f7:0f:96:b4:be:24:89:93:e7:
5b:8b:70:2e:68:05:a8:96:11:57:b9:1b:26:d2:ad:
65:c0:d6:96:b2:42:0d:22:92:a0:c8:8c:7e:b7:8b:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:F9:E6:EF:3C:E1:70:29:88:C0:A1:6A:48:70:FE:9F:36:EA:A5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jzf55u884XApiMChakhw_p826qU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.255.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:02:22:7e:06:01:76:de:99:5e:1b:ab:b7:c5:ed:ed:90:56:
dc:cf:35:67:29:53:22:a5:fb:db:cc:83:d2:f4:bc:30:b2:93:
7d:cd:d5:20:e1:9c:40:4a:6e:cb:ca:06:45:7b:29:2c:55:b4:
c0:60:32:a0:06:5c:ed:11:6b:46:ef:8c:c1:e3:ed:09:21:68:
e3:fd:dd:5b:41:94:2b:c4:cc:83:6a:d7:0a:15:8f:ff:b7:0c:
2b:db:37:21:0b:3f:84:8f:24:0c:f2:50:4c:94:41:80:9a:41:
34:75:b7:d0:25:55:b2:7c:df:c6:14:da:99:c2:0a:3f:55:8f:
75:46:63:32:32:09:31:66:4a:5f:2d:53:82:f7:9c:da:8c:3b:
17:14:1f:c4:ac:11:bd:52:3a:d7:43:9a:3a:75:64:46:94:d2:
49:14:fd:73:15:4e:a7:3e:b2:ea:a1:4f:e0:71:9a:66:cf:bd:
f1:ca:cf:f0:cd:ad:9b:89:7b:c2:e6:ce:72:e3:35:fd:40:87:
0b:6c:e2:6a:b0:51:34:42:d3:79:a5:7d:c2:6e:c2:b6:3e:5e:
f0:60:9e:e4:a7:87:b6:5e:60:90:6a:eb:45:92:27:1d:02:e6:
25:1c:0b:06:62:3f:f1:a9:19:f7:0a:7e:9e:93:d2:8b:21:31:
76:7f:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org