Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/p3fL__ekrkE8oqrZA-YTm4-Flq8.roa
File: p3fL__ekrkE8oqrZA-YTm4-Flq8.roa (raw, json)
Hash identifier: ZsE1j4+5aNwjw4Sn6UpnM8ufutpN3SHBtrW1t0RtUEU=
Subject key identifier: A7:77:CB:FF:F7:A4:AE:41:3C:A2:AA:D9:03:E6:13:9B:8F:85:96:AF
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0874
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/p3fL__ekrkE8oqrZA-YTm4-Flq8.roa
Signing time: Tue 29 Sep 2020 09:58:45 +0000
ROA not before: Tue 29 Sep 2020 09:58:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 20940
IP address blocks: 203.74.67.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A777CBFFF7A4AE413CA2AAD903E6139B8F8596AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:8d:f3:ae:5b:a5:63:80:b3:37:77:d4:45:
b8:81:c6:73:7a:87:70:dd:3e:22:41:fb:1e:f5:5d:
66:f3:5e:8d:00:26:a9:c8:00:08:a5:57:35:3d:b3:
71:1b:b5:fb:fb:7f:00:b2:0c:2e:c5:12:42:17:26:
a8:b0:c2:66:7c:ac:e6:00:38:7d:a0:f9:aa:96:5c:
e0:b0:8f:fe:32:f9:52:cc:28:3f:7e:19:49:ac:b9:
0c:aa:dd:7b:2e:f2:cb:f8:e7:95:e8:08:59:70:3b:
f5:a1:12:8e:25:2a:91:13:af:06:63:71:f9:4b:9d:
4d:4f:f7:d8:fa:8e:09:25:73:91:0f:c8:cc:94:f6:
ea:77:ae:f4:e0:c0:dd:69:76:37:0a:f2:eb:bc:c7:
2a:ae:3f:2b:96:e1:68:57:6b:70:0a:c6:aa:63:43:
c5:73:31:37:64:ca:a1:5b:2f:ee:47:f8:c7:e2:27:
9e:99:00:94:50:c1:32:7e:90:2a:5c:b4:c4:80:e2:
fc:87:c7:94:ce:c6:7b:9b:78:9f:e2:22:74:38:f3:
16:e4:b1:c1:3e:a6:0f:8e:25:eb:0d:a7:78:e7:99:
5e:f0:01:77:62:af:63:41:03:5c:17:b0:87:c3:66:
46:74:3f:ad:c1:d6:cc:11:c2:8e:8c:92:33:c3:a5:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:77:CB:FF:F7:A4:AE:41:3C:A2:AA:D9:03:E6:13:9B:8F:85:96:AF
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/p3fL__ekrkE8oqrZA-YTm4-Flq8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.67.0/25
Signature Algorithm: sha256WithRSAEncryption
50:74:d7:1d:b6:ca:17:05:18:eb:ef:34:e6:ac:ad:73:eb:d5:
14:2d:52:d9:fe:42:f1:b9:0d:7a:7c:70:db:fa:fc:da:85:37:
dd:4a:7f:33:e9:1e:72:f2:80:6e:06:db:b6:d7:06:87:90:43:
bd:7c:36:18:8c:06:12:8a:7b:a3:2c:ae:c3:98:18:6d:1f:b0:
65:dd:89:4f:b7:1b:9c:60:50:72:a0:19:a1:f6:d6:b0:23:0e:
34:be:7d:c7:0c:14:24:29:d2:99:90:0f:d9:74:fe:a7:5c:cd:
11:e0:87:d8:60:2a:d9:b0:ed:b2:ed:b2:dc:90:c0:fe:a7:6b:
56:9e:2a:f2:c3:d4:82:4c:15:e2:0b:40:e7:37:15:55:4c:e3:
26:95:2b:12:73:c0:e7:90:f3:18:ca:ac:94:3d:b1:05:60:b9:
34:52:24:6f:bd:c4:59:b0:5c:f5:74:43:d6:cf:15:52:24:fd:
a6:b3:ef:5c:0c:f4:7c:62:9a:9f:62:6d:08:d1:c9:b8:2d:33:
c5:d8:fc:55:e9:5a:10:df:0b:21:48:6a:31:39:36:70:57:48:
18:f2:88:10:53:e3:62:d5:23:54:49:98:7a:44:1d:99:41:3d:
bf:16:75:2b:c6:2e:8e:8f:ff:17:8d:ce:b0:e5:59:93:ad:5a:
4a:58:bc:e2
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMDA5Mjkw
OTU4NDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE3NzdDQkZGRjdBNEFF
NDEzQ0EyQUFEOTAzRTYxMzlCOEY4NTk2QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDb943zrlulY4CzN3fURbiBxnN6h3DdPiJB+x71XWbzXo0AJqnI
AAilVzU9s3Ebtfv7fwCyDC7FEkIXJqiwwmZ8rOYAOH2g+aqWXOCwj/4y+VLMKD9+
GUmsuQyq3Xsu8sv455XoCFlwO/WhEo4lKpETrwZjcflLnU1P99j6jgklc5EPyMyU
9up3rvTgwN1pdjcK8uu8xyquPyuW4WhXa3AKxqpjQ8VzMTdkyqFbL+5H+MfiJ56Z
AJRQwTJ+kCpctMSA4vyHx5TOxnubeJ/iInQ48xbkscE+pg+OJesNp3jnmV7wAXdi
r2NBA1wXsIfDZkZ0P63B1swRwo6MkjPDpc1bAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUp3fL//ekrkE8oqrZA+YTm4+Flq8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9wM2ZMX19la3JrRThvcXJaQS1Z
VG00LUZscTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHy0pD
ADANBgkqhkiG9w0BAQsFAAOCAQEAUHTXHbbKFwUY6+805qytc+vVFC1S2f5C8bkN
enxw2/r82oU33Up/M+kecvKAbgbbttcGh5BDvXw2GIwGEop7oyyuw5gYbR+wZd2J
T7cbnGBQcqAZofbWsCMONL59xwwUJCnSmZAP2XT+p1zNEeCH2GAq2bDtsu2y3JDA
/qdrVp4q8sPUgkwV4gtA5zcVVUzjJpUrEnPA55DzGMqslD2xBWC5NFIkb73EWbBc
9XRD1s8VUiT9prPvXAz0fGKan2JtCNHJuC0zxdj8VelaEN8LIUhqMTk2cFdIGPKI
EFPjYtUjVEmYekQdmUE9vxZ1K8Yujo//F43OsOVZk61aSli84g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org