Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/-gI9_AJT3uOYeNUje85uy7z28Qs.roa
File: -gI9_AJT3uOYeNUje85uy7z28Qs.roa (raw, json)
Hash identifier: NBTFunxxNH6VwW49fekUOrcy6IOyzjl1jwX9yXxGvV8=
Subject key identifier: FA:02:3D:FC:02:53:DE:E3:98:78:D5:23:7B:CE:6E:CB:BC:F6:F1:0B
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0993
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-gI9_AJT3uOYeNUje85uy7z28Qs.roa
Signing time: Thu 26 Nov 2020 14:15:47 +0000
ROA not before: Thu 26 Nov 2020 14:15:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 137280
IP address blocks: 203.69.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2451 (0x993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Nov 26 14:15:47 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FA023DFC0253DEE39878D5237BCE6ECBBCF6F10B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:62:d9:2f:fd:24:ee:f5:84:9b:2d:99:00:
50:bb:e9:aa:e3:29:05:07:6a:c2:47:4f:e7:2e:0a:
58:3f:f8:47:6f:8b:d3:a2:c1:84:c9:6d:6a:d5:68:
11:e6:f8:43:66:a6:8b:a7:16:4e:c6:38:9c:d0:42:
73:4c:3f:a2:d9:4b:94:bf:ea:cf:db:ed:66:11:09:
f4:05:c2:a6:6a:79:20:6d:00:1b:48:3d:97:a4:44:
6c:3e:61:2d:84:ff:f0:6a:a5:cd:66:cc:67:78:c5:
bb:93:ed:59:19:55:5a:1c:14:55:35:04:e1:58:cf:
ed:0b:db:a1:8d:b8:ae:ef:fd:d8:ee:34:0b:25:da:
34:1b:c6:ca:5a:b0:e2:77:93:2b:ee:bd:b3:c6:53:
af:aa:6f:8e:2b:3e:cc:b0:eb:d7:57:31:34:ea:07:
a3:d2:c8:0e:c5:da:cf:50:59:2b:13:e1:58:76:ba:
ed:c2:f6:f7:22:f0:46:84:38:eb:0e:07:35:b2:9b:
cf:85:d4:6d:33:1e:34:95:89:95:c6:d5:ca:db:4e:
4a:9e:11:db:56:e8:d2:57:1b:0d:9b:96:55:68:6e:
e0:cb:db:bb:1f:b3:cb:e0:89:c2:35:f5:5f:d9:d5:
bd:81:fd:81:e2:92:f7:1c:49:fe:a4:52:aa:c2:52:
3b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:02:3D:FC:02:53:DE:E3:98:78:D5:23:7B:CE:6E:CB:BC:F6:F1:0B
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-gI9_AJT3uOYeNUje85uy7z28Qs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.69.19.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ae:53:16:5c:e3:9c:df:7b:6a:96:f1:54:18:f1:02:51:4b:
9a:b6:52:c1:80:a6:67:c3:98:be:cd:2a:71:f4:71:59:9d:63:
e1:b4:31:aa:99:40:1c:88:4f:41:04:49:10:b4:74:06:7a:4e:
4e:8a:50:45:60:e7:87:a2:34:13:8a:50:73:07:39:b6:34:2f:
ee:bc:48:35:f4:97:29:9a:d5:fc:c3:ab:7b:6d:fb:be:0c:3b:
0a:7f:d3:4c:9d:c7:04:20:ed:96:69:53:2d:e8:cd:07:2e:c2:
5d:16:77:e0:e1:9a:ad:a0:68:ac:c1:aa:23:b5:f6:b8:1f:31:
35:87:63:45:bb:41:33:b9:55:e8:57:77:e2:1d:1e:ac:fd:83:
c7:e6:8d:30:5d:8d:28:fe:6e:c2:0e:0b:35:ef:fb:25:1d:e4:
1d:42:74:c4:8b:c8:a5:6c:af:c6:f9:dc:5b:9d:1d:ce:ba:e3:
20:94:c8:9f:ab:70:85:91:28:56:c5:2d:9a:2d:e3:6a:da:3d:
3c:91:a1:8e:85:33:c2:22:f5:ff:a4:fa:5c:ad:82:a1:51:0a:
12:4f:19:e7:15:39:84:74:de:65:64:04:cf:82:c2:ee:65:8b:
aa:67:df:68:d4:70:d9:b8:e9:7d:d3:91:1b:a3:00:83:45:33:
61:b6:43:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org