Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/saTRYhtCYsEegI5bZ0QxhJQdGZM.roa
File: saTRYhtCYsEegI5bZ0QxhJQdGZM.roa (raw, json)
Hash identifier: 37aRh/k84jqB58ZGqLpX4VYaO7EpKte3iGJc1dIdT7k=
Subject key identifier: B1:A4:D1:62:1B:42:62:C1:1E:80:8E:5B:67:44:31:84:94:1D:19:93
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 081E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/saTRYhtCYsEegI5bZ0QxhJQdGZM.roa
Signing time: Tue 29 Sep 2020 09:58:22 +0000
ROA not before: Tue 29 Sep 2020 09:58:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 210.242.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2078 (0x81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:22 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B1A4D1621B4262C11E808E5B67443184941D1993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:dc:95:cc:1f:d3:05:db:18:1a:6c:31:e6:
16:71:94:62:4e:58:fd:08:1d:fa:c9:95:0c:d4:78:
d5:51:39:56:76:fb:5d:6a:f6:f1:d7:e1:10:75:49:
e0:9b:51:01:ed:80:48:9d:21:67:e1:d9:c6:ee:8c:
45:79:8f:4c:73:d6:72:a0:c8:48:62:eb:72:e0:3e:
66:8c:72:dc:d1:0a:4b:18:20:5f:ad:a2:9a:7d:1b:
88:c3:0f:2f:d2:89:b9:2e:14:50:60:b5:3a:7f:c4:
d5:30:f9:84:32:f3:fa:0f:3b:b2:a0:9c:d2:c6:29:
05:bd:e9:e7:29:7f:be:36:64:da:eb:a6:f2:5c:cf:
ad:e6:06:2f:8f:1b:07:af:3b:18:b4:55:b5:0f:6b:
df:60:7d:a8:6f:24:19:82:b1:73:a3:38:02:c5:69:
9e:f3:b3:9e:5b:7c:a1:d1:85:25:5b:3f:1e:fc:2f:
fe:96:a4:62:08:9d:f1:c2:11:08:b3:89:ee:4d:06:
3e:e3:b6:d6:29:54:98:50:c0:0e:90:6b:da:e6:52:
57:92:70:1c:49:61:28:a4:ab:3b:59:d7:71:b0:fa:
c7:d5:55:a1:1d:72:37:1f:08:91:7f:4f:32:18:a9:
76:97:87:24:ff:d9:6c:43:aa:25:63:b7:46:42:e4:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A4:D1:62:1B:42:62:C1:1E:80:8E:5B:67:44:31:84:94:1D:19:93
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/saTRYhtCYsEegI5bZ0QxhJQdGZM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:ca:07:06:1c:d6:d5:3b:83:a0:30:39:4d:b8:3a:c7:c0:b4:
1e:c0:cb:ec:ca:47:6e:e2:3d:ea:f0:3d:21:c2:f8:ab:f7:4e:
4c:41:a1:55:5b:4e:c8:da:de:a3:0f:bb:62:83:7f:0b:0e:da:
a4:54:ee:f4:13:04:32:5a:e7:f5:d4:57:7a:89:47:55:a9:a9:
52:bd:7e:6b:c7:1f:f8:a7:40:ae:d0:cf:52:23:9a:53:0c:bb:
f0:b4:1c:72:3c:ac:e5:1e:0a:7f:1c:37:b4:a5:b0:3a:5f:ac:
59:0d:4f:c7:2a:ec:0f:09:43:e6:68:9b:82:47:be:da:27:82:
99:44:c6:8f:20:e4:d7:75:77:e0:67:c8:2e:7b:72:04:b4:89:
ae:05:09:f4:cc:c8:44:aa:42:7a:8f:e3:de:b5:79:ed:17:a8:
c3:2a:4c:3e:bf:48:2a:7d:44:aa:38:84:92:a3:92:8a:ec:0c:
bb:99:0c:2f:83:68:ee:be:a6:5e:10:ae:91:af:47:58:18:8d:
37:24:56:c0:18:23:24:98:87:ac:12:d3:75:39:c7:42:0e:e1:
12:6a:63:b4:8b:af:8e:b1:4e:0b:9b:0f:c9:a6:6b:d1:2f:58:
fe:a9:35:ac:1e:47:cb:fc:ad:21:fc:02:e5:5a:6b:9b:cd:b9:
fd:c4:93:41
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMDA5Mjkw
OTU4MjJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEIxQTREMTYyMUI0MjYy
QzExRTgwOEU1QjY3NDQzMTg0OTQxRDE5OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvbNyVzB/TBdsYGmwx5hZxlGJOWP0IHfrJlQzUeNVROVZ2+11q
9vHX4RB1SeCbUQHtgEidIWfh2cbujEV5j0xz1nKgyEhi63LgPmaMctzRCksYIF+t
opp9G4jDDy/SibkuFFBgtTp/xNUw+YQy8/oPO7KgnNLGKQW96ecpf742ZNrrpvJc
z63mBi+PGwevOxi0VbUPa99gfahvJBmCsXOjOALFaZ7zs55bfKHRhSVbPx78L/6W
pGIInfHCEQizie5NBj7jttYpVJhQwA6Qa9rmUleScBxJYSikqztZ13Gw+sfVVaEd
cjcfCJF/TzIYqXaXhyT/2WxDqiVjt0ZC5IzxAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUsaTRYhtCYsEegI5bZ0QxhJQdGZMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9zYVRSWWh0Q1lzRWVnSTViWjBR
eGhKUWRHWk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0vIw
DQYJKoZIhvcNAQELBQADggEBAAPKBwYc1tU7g6AwOU24OsfAtB7Ay+zKR27iPerw
PSHC+Kv3TkxBoVVbTsja3qMPu2KDfwsO2qRU7vQTBDJa5/XUV3qJR1WpqVK9fmvH
H/inQK7Qz1IjmlMMu/C0HHI8rOUeCn8cN7SlsDpfrFkNT8cq7A8JQ+Zom4JHvton
gplExo8g5Nd1d+BnyC57cgS0ia4FCfTMyESqQnqP4961ee0XqMMqTD6/SCp9RKo4
hJKjkorsDLuZDC+DaO6+pl4QrpGvR1gYjTckVsAYIySYh6wS03U5x0IO4RJqY7SL
r46xTgubD8mma9EvWP6pNaweR8v8rSH8AuVaa5vNuf3Ek0E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org