Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/0R00wCpOoZ95VX7UHNsr_8py6Gs.roa
File: 0R00wCpOoZ95VX7UHNsr_8py6Gs.roa (raw, json)
Hash identifier: 8UbUREPjGf9ZpfI1f0Way9I6ICS4drOKpor40CUCCYI=
Subject key identifier: D1:1D:34:C0:2A:4E:A1:9F:79:55:7E:D4:1C:DB:2B:FF:CA:72:E8:6B
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0A8D
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/0R00wCpOoZ95VX7UHNsr_8py6Gs.roa
Signing time: Sun 07 Feb 2021 11:38:14 +0000
ROA not before: Sun 07 Feb 2021 11:38:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 203.69.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2701 (0xa8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:38:14 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D11D34C02A4EA19F79557ED41CDB2BFFCA72E86B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:d8:90:f7:39:f5:a5:24:c5:72:c4:9a:8b:
22:f9:5f:aa:16:42:61:e4:e8:9c:3a:62:de:23:bd:
9f:8f:aa:30:68:40:0f:7e:31:f7:62:96:1e:99:c9:
ff:61:e2:0f:40:d2:81:6c:ab:a3:0f:33:4d:56:79:
59:65:d9:c6:9b:30:63:55:35:aa:ed:25:84:4f:83:
53:f9:46:06:ac:5b:93:51:9f:c5:dd:7b:6e:9b:7c:
5e:45:15:d5:85:eb:fa:9c:24:19:5b:7e:37:15:93:
c7:f3:6c:a7:c4:46:45:33:d9:86:5a:68:12:54:08:
b9:cd:3d:22:4b:d0:81:96:74:00:69:cd:7e:ed:ee:
f7:14:13:d8:f2:c7:dd:e0:e3:62:99:7b:f3:80:0b:
1c:d3:69:91:fa:5e:e8:47:77:7f:8b:53:22:34:12:
07:12:4b:ef:7d:ef:6a:a3:7d:eb:cc:b4:73:4f:85:
c6:29:6f:2f:16:3c:0a:47:d5:8b:49:87:d7:bc:0b:
6a:81:b9:2e:06:4a:97:6c:89:f7:c2:c5:2a:03:48:
cd:a0:db:e1:9e:d5:3f:b5:b7:48:4b:c1:a0:87:f4:
fc:fa:7a:a1:bd:a5:38:ca:75:0c:e8:f1:cd:7e:eb:
18:bf:e5:76:e8:a2:a6:8d:53:d7:ee:a2:7e:46:e0:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:34:C0:2A:4E:A1:9F:79:55:7E:D4:1C:DB:2B:FF:CA:72:E8:6B
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/0R00wCpOoZ95VX7UHNsr_8py6Gs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:13:9b:6c:85:1e:64:c0:10:d5:c8:44:be:01:4e:2c:8f:ce:
90:4a:bf:64:d9:82:ea:a9:fa:7e:50:84:fb:4c:1b:86:a4:f5:
36:28:bd:d1:16:98:97:2e:f4:b9:b0:18:e7:5c:87:db:5b:ca:
23:51:fb:11:48:9e:4e:a5:d2:d1:68:07:5d:f2:a1:e3:81:4c:
8d:6d:09:5c:9c:e7:91:b3:21:09:b8:0f:b7:f8:4f:78:a7:f3:
1d:8c:76:ac:23:78:82:fa:12:72:57:b8:04:fc:3a:0e:a8:fa:
f4:68:60:23:9d:6f:fe:64:9d:6e:74:25:30:c2:6a:a1:5d:27:
63:4b:04:c9:ef:8a:1c:8c:6a:be:ba:45:87:c1:06:a2:0c:bf:
bb:e2:82:2e:25:6f:0d:da:06:77:88:55:24:39:6d:56:ec:6a:
18:3c:8a:4d:41:be:14:d5:db:9d:29:0d:8a:5b:ae:75:e3:7e:
e2:86:b7:2b:88:c4:8f:ae:d8:b0:73:40:8c:9b:de:ac:ad:4b:
ff:a4:43:2d:de:d5:6e:15:1f:1b:58:e8:02:19:64:a5:a5:d0:
59:f5:72:ea:b9:d7:6c:57:ec:4f:76:23:8e:2d:23:4f:4d:e3:
b8:d6:5f:af:d6:15:55:61:c7:67:f1:32:1d:a7:3e:2e:ac:02:
85:2d:3a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:13 2025 by rpki-client