Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/sCe_TB06-SlCGgP44xsWFABYR_Q.roa
File: sCe_TB06-SlCGgP44xsWFABYR_Q.roa (raw, json)
Hash identifier: rarVf8FR3mpyLhbm72GupbbUPRt1LWlYWP2y07GTFPo=
Subject key identifier: B0:27:BF:4C:1D:3A:F9:29:42:1A:03:F8:E3:1B:16:14:00:58:47:F4
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C2A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/sCe_TB06-SlCGgP44xsWFABYR_Q.roa
Signing time: Wed 29 Sep 2021 02:50:57 +0000
ROA not before: Wed 29 Sep 2021 02:50:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 218.166.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3114 (0xc2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:57 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B027BF4C1D3AF929421A03F8E31B1614005847F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:b6:2b:d7:8c:f2:3a:27:c4:17:da:a0:4f:
10:4f:48:13:e3:78:27:aa:a6:4b:da:bc:0c:f9:b0:
b4:7d:66:0a:ea:9b:8c:a9:4d:c3:e5:60:27:3f:57:
03:3e:cc:dd:dc:b8:e4:b3:dc:11:89:33:45:8f:f5:
db:aa:aa:8b:38:fc:f6:cf:64:70:1a:7c:37:2b:d9:
24:cb:d0:07:af:be:67:03:f7:98:de:f6:eb:bb:e1:
a7:62:b9:bf:83:ce:bf:ed:c0:69:81:48:36:62:c6:
91:ce:b8:8b:7e:07:56:55:c7:16:79:94:be:fa:06:
a2:a5:02:c2:a8:e2:0c:ce:8d:9b:06:f8:9d:f4:b1:
ff:0a:bd:7f:75:ed:6a:45:3a:96:f6:62:0b:3f:31:
89:66:46:1e:8c:26:2e:19:82:c4:fa:e6:3e:19:c2:
7b:74:ea:4e:b1:e7:65:56:d6:67:d4:04:c2:68:bd:
71:a4:de:34:8e:ac:35:9f:f7:a9:ad:d4:76:f6:24:
13:e6:e4:31:f1:5f:95:2b:97:be:53:3e:fb:52:bb:
eb:fa:2d:1b:3c:fd:80:a7:ff:6d:d3:9a:b3:b5:be:
66:a8:9f:1d:32:71:f6:ea:87:88:4b:77:ee:06:64:
74:a0:4a:d9:4a:8e:c0:43:9e:1a:40:ae:78:ab:fc:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:27:BF:4C:1D:3A:F9:29:42:1A:03:F8:E3:1B:16:14:00:58:47:F4
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/sCe_TB06-SlCGgP44xsWFABYR_Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.166.0.0/15
Signature Algorithm: sha256WithRSAEncryption
70:1b:35:52:d6:5e:42:a7:bc:1a:7e:a6:59:b9:19:3d:02:7e:
df:17:bd:85:22:a5:6c:58:4e:ac:5a:9d:23:8b:6f:cc:81:f5:
06:ad:69:6c:72:7b:f0:d5:10:7d:af:b5:50:49:2f:10:8c:62:
ea:81:34:51:ab:59:2f:e6:66:7a:5c:ea:96:52:ed:f3:5c:29:
00:69:2a:e4:7b:90:1e:ad:19:39:1e:d8:92:6a:04:56:0b:9d:
c2:53:0b:c0:fd:d6:2e:04:2a:04:23:c5:3a:0d:f3:69:42:0f:
a0:8f:d0:6b:af:60:93:7f:ea:00:d6:fb:e0:a5:96:2c:a6:b2:
46:11:9e:0d:9d:f9:ce:f6:a0:d1:97:19:da:6c:88:78:b8:bb:
ef:ae:55:ee:49:e0:15:46:ea:13:58:15:f7:54:85:aa:bb:ff:
6c:0c:b8:74:a4:8c:79:f7:cb:6c:e6:c9:81:5c:e1:e9:6f:24:
9c:bd:0a:a8:3c:a5:4c:64:85:e4:5e:86:1f:8b:38:23:7c:2a:
49:e6:0d:45:3e:58:23:5f:24:bb:7b:be:27:17:3c:82:de:25:
1a:24:6e:ed:97:86:0b:39:83:8a:8b:02:81:00:e0:ea:63:31:
a2:2f:81:9b:93:f2:6d:8c:00:f3:88:46:43:53:2c:2a:a4:d2:
b0:83:c9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org