Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/yEs-KN2ISrG73ZP7Z84ffoFYiFo.roa
File: yEs-KN2ISrG73ZP7Z84ffoFYiFo.roa (raw, json)
Hash identifier: 3Pdn/ebJfE2nhqM4o6YOLZz+4L/fClZ0dWRFnUpnWX8=
Subject key identifier: C8:4B:3E:28:DD:88:4A:B1:BB:DD:93:FB:67:CE:1F:7E:81:58:88:5A
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0AD1
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/yEs-KN2ISrG73ZP7Z84ffoFYiFo.roa
Signing time: Sun 07 Feb 2021 11:39:14 +0000
ROA not before: Sun 07 Feb 2021 11:39:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 60.250.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2769 (0xad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:39:14 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C84B3E28DD884AB1BBDD93FB67CE1F7E8158885A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b6:d2:a6:a4:89:a3:e7:96:6a:07:c4:3a:36:
b6:47:f3:89:ea:33:67:d6:b4:0a:f9:4a:64:56:b7:
56:fb:f2:9c:c4:69:14:1a:2a:72:d5:fc:c3:82:40:
95:c0:7f:92:42:53:17:f6:72:da:6d:0d:e1:81:b5:
d2:c4:39:4e:4f:ef:11:f4:40:92:6b:a7:5b:aa:3d:
39:b4:c2:f8:06:b5:b8:13:a0:4e:ad:ce:17:54:a2:
81:5c:05:48:20:0c:bf:21:5b:9a:ef:5a:29:ab:5d:
78:8c:8b:69:a7:4b:05:a9:bd:64:cf:16:20:3a:67:
e5:f2:eb:70:fa:62:3d:16:12:eb:4e:cd:e8:1b:51:
8a:9a:3b:a0:26:43:d1:fb:7a:11:62:10:ef:f1:e0:
4c:64:70:8f:74:92:b0:10:ee:3a:e2:d0:fc:33:76:
e7:ff:d3:ad:76:44:dc:e4:67:4a:d9:da:3b:d3:5c:
54:12:cb:9b:b5:e8:e4:e4:6e:04:25:36:20:41:25:
97:6b:5d:78:db:0a:0f:84:9b:68:9d:14:4a:a8:b3:
f4:6f:ac:d8:1d:42:ea:5d:c9:2d:3e:5c:ff:63:d9:
82:43:ec:35:bb:6c:55:05:0b:8b:86:e9:39:af:c1:
a4:50:a4:80:dc:9a:ac:76:87:02:ca:54:49:91:d4:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4B:3E:28:DD:88:4A:B1:BB:DD:93:FB:67:CE:1F:7E:81:58:88:5A
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/yEs-KN2ISrG73ZP7Z84ffoFYiFo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.250.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a1:82:38:ea:92:a9:64:9d:4e:4f:a6:42:cb:95:79:bb:e8:4e:
64:ef:c7:48:4f:6b:65:8f:9c:71:57:b3:53:8a:53:70:3e:13:
43:64:d6:e7:a8:3b:ad:ef:4b:08:6f:9f:84:10:a4:3a:b2:5d:
3d:52:1e:61:6c:fa:00:76:34:32:98:9e:37:48:7f:24:7d:2b:
4a:53:0b:1e:d4:22:8a:f8:f3:90:e6:7b:08:10:25:fe:94:0c:
ac:f5:03:0b:16:b9:2a:ef:71:46:b8:e8:47:dc:90:69:07:84:
47:9c:d5:2a:d2:c2:f9:ad:eb:20:0e:9c:9a:49:3b:17:6b:bc:
93:1b:ec:6b:18:6f:0e:1a:36:71:16:82:d3:8f:8e:82:f0:0d:
53:81:eb:bf:c4:0c:22:82:77:b4:1b:79:bb:6d:ff:79:7e:33:
b2:48:8a:5a:11:35:37:b6:f4:9c:3a:f3:56:7a:4e:38:55:8a:
df:8a:26:b6:4d:48:ac:58:33:23:cb:81:61:62:b1:f9:10:b0:
ae:f9:9e:19:12:85:44:a7:3c:2e:d4:61:42:97:29:e8:8c:3e:
35:ec:ae:0a:c2:3a:13:cf:76:d1:8b:21:1b:03:eb:80:3a:34:
a7:20:3a:e6:9f:f6:3d:ca:83:fb:41:7a:d8:67:05:85:04:27:
38:c1:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org