Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/rDHBm1bLB8Ctm8qaRT-uvzHHv6Q.roa
File: rDHBm1bLB8Ctm8qaRT-uvzHHv6Q.roa (raw, json)
Hash identifier: sXvQeNPYj0a/a8JY5lczvJ5MwZXsByh2h2ADQ4+RCMA=
Subject key identifier: AC:31:C1:9B:56:CB:07:C0:AD:9B:CA:9A:45:3F:AE:BF:31:C7:BF:A4
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 083C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/rDHBm1bLB8Ctm8qaRT-uvzHHv6Q.roa
Signing time: Tue 29 Sep 2020 09:58:29 +0000
ROA not before: Tue 29 Sep 2020 09:58:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 54994
IP address blocks: 210.61.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2108 (0x83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:29 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AC31C19B56CB07C0AD9BCA9A453FAEBF31C7BFA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:61:31:ce:c6:0c:07:06:52:9f:63:72:0a:80:
42:76:32:75:a5:16:30:58:10:f8:86:5e:a2:c3:2d:
96:e8:42:0f:02:05:d6:3a:e5:e7:08:d0:e3:ea:9d:
50:d4:7a:c1:31:c5:ea:c2:12:a5:fd:0f:42:22:a4:
61:3a:76:86:38:94:8a:30:22:7e:ac:0f:ff:2c:b9:
8d:ad:e7:40:61:d9:89:6b:12:be:56:69:4c:1e:b6:
30:eb:dc:65:33:d9:48:0f:f1:eb:80:8f:9f:29:e2:
e4:62:7a:1f:84:8f:97:4a:32:8c:4a:b3:3e:5a:79:
a6:26:0b:ba:f3:62:03:6d:6d:74:cb:5a:ac:1c:1f:
73:de:94:2b:83:2c:78:2f:46:7f:35:ed:d6:49:1c:
ff:05:a7:17:b5:41:b9:b4:88:49:24:8d:54:5d:f2:
0b:52:7d:6b:bd:c3:7d:fe:11:47:eb:2b:f3:3d:79:
eb:44:67:d1:dc:88:36:12:5e:8e:0d:2d:d6:8d:8f:
a8:31:e7:67:e3:9f:54:99:5a:77:a7:9a:01:ab:38:
57:ef:fa:91:7c:49:57:c5:89:ba:6e:17:b7:fb:07:
00:c1:77:f9:53:2a:a6:52:fa:e6:7d:54:1a:00:77:
17:04:a3:e9:57:77:6b:06:11:be:d2:6f:59:d7:f3:
f6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:31:C1:9B:56:CB:07:C0:AD:9B:CA:9A:45:3F:AE:BF:31:C7:BF:A4
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/rDHBm1bLB8Ctm8qaRT-uvzHHv6Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.180.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:18:04:ff:e1:56:cf:43:fd:0a:f4:e2:a3:59:a7:3a:63:2f:
10:3c:e2:c1:16:6f:d9:66:b8:db:93:31:c1:07:51:31:8f:fe:
5e:fa:66:ee:60:00:cd:a1:14:d7:f5:79:1b:c6:89:b3:29:e6:
3a:27:73:3d:cf:08:49:e9:a6:f7:22:db:96:37:8c:99:d9:75:
42:69:71:a7:c6:62:48:83:3b:c8:f8:3c:1a:d0:f4:48:25:71:
ac:ae:e7:7b:8a:d6:b8:a8:dc:ee:0f:51:89:38:4a:fc:c7:b4:
70:6a:db:be:1f:ad:35:ed:73:68:e5:5d:c4:8a:ce:6d:2e:f5:
23:69:74:b3:19:5e:5f:7b:9d:1a:5b:dc:03:20:52:b5:c8:7c:
2e:49:3e:fe:a3:a5:77:6f:63:4a:5f:4c:bc:db:e9:48:c6:86:
14:c2:28:18:ad:5b:2f:f6:8b:5b:88:d9:a7:74:e1:21:cc:46:
3c:93:d4:fd:0e:9d:51:dc:83:53:66:d2:07:79:4d:b4:cb:66:
41:e3:18:31:c5:cd:ec:5d:27:13:c5:db:f2:8f:3b:96:9c:7e:
85:b4:65:ff:ff:7d:e4:49:35:b0:e7:a8:54:c7:de:29:17:8f:
5c:aa:9f:66:8c:19:ec:9c:a6:ac:32:80:0f:0a:a7:d2:21:44:
92:08:2f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org