Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/mIQUF5HRZ21sB3gLBi6S2qAKHaE.roa
File: mIQUF5HRZ21sB3gLBi6S2qAKHaE.roa (raw, json)
Hash identifier: dP9T2h+eF9RwFN8emTfVZ7EbM9AekWEkZFlh4hE7RAk=
Subject key identifier: 98:84:14:17:91:D1:67:6D:6C:07:78:0B:06:2E:92:DA:A0:0A:1D:A1
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0AF5
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mIQUF5HRZ21sB3gLBi6S2qAKHaE.roa
Signing time: Sun 07 Feb 2021 11:46:21 +0000
ROA not before: Sun 07 Feb 2021 11:46:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9505
IP address blocks: 175.111.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2805 (0xaf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:46:21 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9884141791D1676D6C07780B062E92DAA00A1DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:1f:00:47:3a:d3:1f:b1:95:73:aa:4c:b7:
bb:6e:f6:95:3d:13:52:bb:2c:b4:cd:02:d8:f7:47:
75:58:09:09:78:14:fe:58:09:3a:a7:d5:f1:7e:29:
de:c4:f9:aa:70:d6:c0:89:c7:57:1b:e3:c7:37:9f:
d5:f6:e0:80:9b:c4:f1:e4:d3:c6:6e:83:57:75:c9:
60:c2:9d:69:50:90:37:2a:b9:86:d6:3d:21:ea:dc:
95:bd:4f:c5:11:a8:eb:3b:84:63:7b:89:e2:80:ab:
f8:3e:0f:61:a1:63:9b:0d:02:0e:6a:a5:5f:63:5e:
f9:f3:b8:59:d8:c0:ee:33:77:b7:0a:d1:82:e3:68:
b1:d8:3d:22:be:98:92:9c:94:f7:44:e7:d2:90:33:
22:a2:b9:42:1e:a0:69:ad:1c:57:b5:a3:5e:14:f6:
ca:49:b6:e9:43:7a:2b:15:fb:b8:89:ae:c2:c0:e4:
56:ea:8e:ff:3e:47:fb:dc:71:d9:b7:92:df:26:c7:
22:67:82:39:cc:45:a3:70:c2:9d:2e:54:e9:2a:10:
ef:59:f7:05:1a:41:3a:34:37:f5:65:9f:b8:e4:22:
51:ae:4c:30:68:39:ac:7e:46:49:cd:93:e4:63:a8:
3c:7e:dc:b1:59:96:98:83:53:1d:7f:5a:80:cf:f1:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:84:14:17:91:D1:67:6D:6C:07:78:0B:06:2E:92:DA:A0:0A:1D:A1
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mIQUF5HRZ21sB3gLBi6S2qAKHaE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:cd:1a:cc:8c:02:af:a2:cd:ff:2a:cd:7b:da:29:ab:a0:cd:
48:66:96:05:dd:27:4b:b1:d8:d0:1b:9a:e1:e6:97:69:58:1a:
64:31:fa:69:ea:58:d2:3f:43:e8:52:94:70:d8:87:9e:90:48:
77:0f:45:18:15:08:5b:6f:85:20:f8:ca:06:c5:2b:88:81:e3:
00:6a:b9:2b:7e:d9:05:56:3e:3e:35:8d:ad:a2:a9:86:60:b1:
f9:1e:72:b8:da:08:66:29:32:33:4b:46:bb:c6:92:5b:5b:91:
b4:77:1b:a8:b1:50:24:0e:b6:a7:b3:af:a6:84:46:c2:c3:6e:
2c:61:38:6e:b1:5f:c7:21:c3:e3:6c:74:30:1e:1f:37:7b:33:
01:5e:87:ed:5b:e1:97:c4:46:cf:d8:fe:91:79:41:e0:7f:d5:
9f:bc:4b:bc:45:6f:47:77:58:78:a8:ae:79:0e:68:2d:62:a2:
ed:92:93:dd:3a:14:d4:df:5c:f6:39:7e:b6:ee:a3:55:d4:e6:
38:24:6f:97:78:a8:23:30:4d:3b:e4:98:0a:3a:f2:16:2c:c0:
ed:c3:e7:f0:81:9d:fc:ef:f4:cd:b6:33:00:c7:c9:24:61:6b:
95:69:e5:3b:e3:13:db:3a:c9:24:56:c1:01:c5:ce:c0:99:d7:
a4:be:81:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org