Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/mHPiirMGfX44xGCjU6fMarkwBVA.roa
File: mHPiirMGfX44xGCjU6fMarkwBVA.roa (raw, json)
Hash identifier: 5SxT78ugd1wdL6GJ9vTyEPwwzlmsRxzhCHTpFsEKxAg=
Subject key identifier: 98:73:E2:8A:B3:06:7D:7E:38:C4:60:A3:53:A7:CC:6A:B9:30:05:50
Certificate issuer: /CN=43FF5C92CC4950A457A7327D168FBC465B218322
Certificate serial: 08B3
Authority key identifier: 43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/mHPiirMGfX44xGCjU6fMarkwBVA.roa
Signing time: Sun 07 Feb 2021 11:54:49 +0000
ROA not before: Sun 07 Feb 2021 11:54:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4782
IP address blocks: 203.65.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2227 (0x8b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF5C92CC4950A457A7327D168FBC465B218322
Validity
Not Before: Feb 7 11:54:49 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9873E28AB3067D7E38C460A353A7CC6AB9300550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:f6:18:46:67:f9:42:e3:6c:58:92:bb:aa:
e2:7b:62:a7:25:3d:64:00:2b:4c:27:9c:0a:ba:f5:
81:32:48:ca:e8:41:f5:01:45:04:08:21:72:fb:63:
6d:fa:c4:fd:ec:8c:ab:d0:29:14:0d:bb:c0:2f:cb:
67:dd:fa:b3:2e:80:be:27:f6:0d:53:04:d4:4a:ba:
ed:75:f4:ea:c1:0a:1d:03:7a:37:a0:a9:4e:b5:08:
60:4c:70:15:56:a0:c5:7f:89:9f:cd:4d:c9:0b:47:
83:9c:89:ad:2a:5e:79:06:23:f0:12:c0:cf:ca:f3:
35:3e:5c:68:8b:eb:b0:e9:f3:62:95:6e:25:9a:d0:
3c:9a:bf:43:53:4d:e4:c9:85:06:72:dc:4e:3e:e3:
27:39:69:c7:d9:15:a9:52:b0:0a:ba:d6:36:41:c9:
cb:9a:3d:40:b3:88:29:09:13:52:6e:bd:f4:2a:4b:
e7:91:f9:02:97:11:20:15:fb:ff:25:b1:72:0c:74:
85:cd:c5:bb:56:56:39:8d:18:80:67:cc:25:4d:a5:
ac:cb:7a:e7:51:b3:6c:ed:92:fd:72:15:01:eb:72:
d9:01:13:79:a8:01:82:ed:ab:de:9b:e0:67:f4:c2:
b9:93:a6:b1:6c:ff:b0:5a:3f:0c:64:8f:1e:7b:1f:
26:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:73:E2:8A:B3:06:7D:7E:38:C4:60:A3:53:A7:CC:6A:B9:30:05:50
X509v3 Authority Key Identifier:
keyid:43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/mHPiirMGfX44xGCjU6fMarkwBVA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.65.0.0/17
Signature Algorithm: sha256WithRSAEncryption
26:41:98:90:c0:9e:fb:81:60:80:ac:c9:b7:b7:4d:6f:2e:ba:
27:bd:a1:57:5c:68:f8:0c:c4:26:4d:5f:7d:a4:7f:7a:a6:01:
bf:1d:49:74:f3:dc:f5:49:f9:46:d5:1c:cc:17:d9:e2:c8:d8:
45:96:de:e5:72:26:ad:5e:13:8f:e3:a0:0a:45:66:99:33:23:
bd:99:ff:1b:0f:50:dc:8c:9b:f6:0d:68:d9:b5:25:18:fb:22:
94:4d:2c:30:9f:4e:7c:11:65:7f:ac:39:81:c7:67:84:bb:77:
8d:1e:20:a7:46:ea:b2:d9:ff:ef:a5:e0:d0:9c:71:82:81:66:
06:d8:7d:3a:06:9e:e0:bc:d0:58:a6:d3:f7:95:ea:4d:78:4f:
1f:29:3c:cd:0e:ea:c0:a5:c4:f6:79:90:ff:28:c0:ad:ba:83:
b6:48:90:fe:03:f3:e7:32:4f:cb:6f:dc:48:9a:d7:59:15:46:
a9:6b:90:7b:d4:eb:77:80:3c:bb:f5:7b:ed:4f:d3:bb:66:fb:
9e:b4:c5:e3:6c:76:ad:f9:1d:a9:76:fc:33:1b:5c:11:a9:f1:
72:ef:ad:27:c4:fe:a9:96:54:87:90:f3:47:82:4b:50:cb:23:
7e:39:93:76:65:c0:f0:83:15:b0:cc:12:c1:50:10:7c:b7:1a:
e6:bc:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org