Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/qRveTtU2YzkrwwKPRot_LxvLTp0.roa
File: qRveTtU2YzkrwwKPRot_LxvLTp0.roa (raw, json)
Hash identifier: xnMmVoFM2x6j8CHmoVGlZ8t1cQmLKNvn+h81L7kcvL0=
Subject key identifier: A9:1B:DE:4E:D5:36:63:39:2B:C3:02:8F:46:8B:7F:2F:1B:CB:4E:9D
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0AA5
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qRveTtU2YzkrwwKPRot_LxvLTp0.roa
Signing time: Sun 07 Feb 2021 11:38:35 +0000
ROA not before: Sun 07 Feb 2021 11:38:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 211.22.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2725 (0xaa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:38:35 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A91BDE4ED53663392BC3028F468B7F2F1BCB4E9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:c9:91:42:91:21:d9:06:34:6d:eb:62:07:
a3:6f:ec:dc:ab:7f:eb:5c:df:aa:1c:72:da:6d:ba:
ce:8c:e0:82:b0:8f:4e:14:2f:fb:c4:c6:6b:fb:c0:
af:3e:41:14:6a:2a:d7:95:22:18:3d:70:8e:4c:06:
42:26:a3:b9:73:29:1d:99:eb:8a:b1:5e:06:99:8c:
75:ac:80:6c:34:6c:53:7b:fb:39:fa:80:e8:29:b3:
d0:dd:50:8c:b1:21:9f:20:06:e1:fe:02:df:92:de:
db:86:aa:0f:fc:36:d3:33:d6:15:04:4b:ee:1b:46:
b6:f4:90:a0:d1:6b:16:70:2e:52:ec:70:7d:30:43:
69:1b:08:a0:d4:a5:51:b7:7b:4a:6c:f9:60:82:61:
03:5d:10:b2:62:af:ed:4a:b0:aa:7c:df:72:b3:e2:
f6:6f:f1:df:bd:36:06:af:36:9f:67:55:dd:fc:09:
93:c2:3a:59:46:1b:57:7e:00:61:00:28:b9:8a:b6:
88:e1:40:45:13:7b:3d:5a:38:08:0e:3c:70:98:ee:
d8:d9:1f:cb:77:4f:08:b3:62:d4:e5:a9:8c:36:f2:
9d:5c:3d:86:ab:c3:cd:36:c6:e2:07:07:4f:90:bd:
ce:8b:fb:bb:52:c7:9a:dd:61:0a:ce:d7:e6:38:61:
8d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1B:DE:4E:D5:36:63:39:2B:C3:02:8F:46:8B:7F:2F:1B:CB:4E:9D
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qRveTtU2YzkrwwKPRot_LxvLTp0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.22.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:b1:76:60:a7:52:38:e4:7f:56:f3:87:a3:32:a9:59:85:a5:
05:bb:6d:05:46:d6:c6:13:39:7c:20:61:c8:ba:9c:c7:cf:b9:
47:7f:a3:ef:5b:b0:80:a4:71:4c:22:fc:34:3d:ca:a6:c8:0a:
4d:21:bc:b3:12:be:98:92:2c:1a:af:9d:61:12:f3:0c:c9:d9:
d3:4b:b0:2b:d4:91:7a:a0:8a:de:23:97:65:99:2c:f7:48:b5:
b0:43:7f:81:17:3d:e4:61:a7:8b:f2:f2:04:f8:84:8f:71:7c:
8b:9b:92:6e:04:97:21:71:ba:74:26:f8:50:35:e3:8f:29:aa:
94:51:08:9d:b7:b7:6c:0c:7e:cc:32:21:8f:dc:54:1d:f7:34:
cd:64:a4:61:16:44:57:fb:4f:73:80:a9:3e:40:6a:7e:76:cc:
e5:1b:22:73:ad:62:e3:8b:f7:66:25:ec:b0:52:40:ab:84:2a:
95:a7:3a:e6:71:81:f7:f7:7a:20:35:3f:b3:78:2e:9e:98:94:
db:f7:4b:f6:61:83:00:49:c1:9e:78:92:74:28:85:dc:ca:1a:
39:c7:b4:13:0b:e6:43:79:74:d9:75:88:3a:82:d2:6a:68:76:
5b:f4:c9:d9:84:25:92:21:c4:f5:69:43:4d:cd:93:aa:2a:ee:
d5:22:08:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org