Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/mLYjL4Lq1vjO9ejW1hCS4SoExsQ.roa
File: mLYjL4Lq1vjO9ejW1hCS4SoExsQ.roa (raw, json)
Hash identifier: uzX15dSmdKhO0/bm4Sxb2kNBLcL0jK9UrZr/bmIHY9s=
Subject key identifier: 98:B6:23:2F:82:EA:D6:F8:CE:F5:E8:D6:D6:10:92:E1:2A:04:C6:C4
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0B22
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mLYjL4Lq1vjO9ejW1hCS4SoExsQ.roa
Signing time: Sun 07 Feb 2021 11:54:04 +0000
ROA not before: Sun 07 Feb 2021 11:54:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 221.120.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2850 (0xb22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:54:04 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=98B6232F82EAD6F8CEF5E8D6D61092E12A04C6C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:6e:c0:ad:c7:d8:7e:ca:b0:ec:0e:2b:f9:
56:91:0f:53:06:f3:a1:6f:78:70:22:1e:21:e0:a3:
3d:de:f1:53:68:38:c6:73:db:05:48:c0:8c:8d:c3:
e2:2f:65:9f:4d:11:c9:06:e8:d1:9f:19:75:71:1c:
ef:1f:2b:34:7f:01:fd:09:a0:db:b8:26:2b:4b:46:
e2:8f:a1:a7:d8:39:c0:d1:ec:91:31:4c:fc:73:c3:
47:b1:77:6f:65:92:0d:17:b8:6e:c5:a4:97:c1:b3:
7b:f0:20:8a:2c:df:63:9e:ac:34:63:0b:b9:e4:c8:
33:b5:06:45:4a:be:c3:66:4b:41:70:f5:d8:79:21:
81:34:8d:88:57:a5:a2:36:5b:a8:fe:e3:21:92:0a:
39:b8:d0:21:50:64:a0:c2:1c:c7:5f:df:6c:8f:80:
8c:9a:d3:75:bd:de:dd:5a:45:ec:98:38:58:29:1c:
ea:8d:ec:7b:76:67:8f:e9:5e:42:2f:85:70:45:b4:
87:93:43:50:7a:30:cb:8a:b0:f8:c1:09:27:e4:63:
da:ed:e3:23:dd:6f:e3:9e:0e:54:25:3a:19:4d:1c:
c8:36:78:ef:b7:c8:88:18:70:5e:2b:b3:04:02:b9:
03:65:0a:ec:59:f8:d9:e6:9a:d1:95:e3:3b:2d:b4:
9a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B6:23:2F:82:EA:D6:F8:CE:F5:E8:D6:D6:10:92:E1:2A:04:C6:C4
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mLYjL4Lq1vjO9ejW1hCS4SoExsQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
221.120.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c4:09:9d:5f:94:44:96:24:cb:58:52:cb:c5:21:64:10:14:
41:be:78:f2:c6:33:a0:0d:87:e4:77:61:61:e9:f1:4f:9b:07:
27:20:02:1e:d7:68:f4:83:1e:b2:e6:f7:e0:86:36:a1:b8:28:
40:f5:82:cb:6f:96:01:9c:7f:80:f5:0c:05:39:44:c5:cf:50:
81:b5:28:94:9c:d5:c3:e1:6c:87:41:1b:42:29:26:72:13:ba:
45:e9:80:12:9b:31:30:3a:13:19:47:a4:7a:00:83:ea:1d:a4:
1a:fc:cb:98:34:55:a1:36:34:bf:67:a0:00:77:83:ad:b7:86:
53:1f:4d:62:9b:77:f7:ad:d2:9c:9c:d0:bb:2b:6b:12:d2:3b:
37:c0:e2:1d:77:7b:ae:cb:9f:62:0d:71:67:eb:ed:2e:e8:7e:
66:09:a0:7c:97:86:8a:3a:e7:ca:49:75:f2:d0:eb:07:43:8a:
cf:77:55:33:ba:4d:dd:2a:67:26:5e:7b:ff:ce:10:f1:14:bb:
a7:bf:a8:4d:8e:47:f2:89:ec:2a:22:90:08:ca:1b:d4:b7:11:
c9:76:83:79:d7:d0:47:07:86:e2:a2:54:7c:60:f7:75:c7:57:
ed:55:4b:8a:24:80:2b:42:76:1c:42:4d:64:22:22:88:b9:9e:
4b:9c:23:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org