Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/1tlWZJvvvz5aMcWEY8mVdOBB5cY.roa
File: 1tlWZJvvvz5aMcWEY8mVdOBB5cY.roa (raw, json)
Hash identifier: H7POPoD3m7rFivtYIvrYa8E/zlxGw5kDXrUvD1J05LM=
Subject key identifier: D6:D9:56:64:9B:EF:BF:3E:5A:31:C5:84:63:C9:95:74:E0:41:E5:C6
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0BF8
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1tlWZJvvvz5aMcWEY8mVdOBB5cY.roa
Signing time: Wed 29 Sep 2021 02:50:43 +0000
ROA not before: Wed 29 Sep 2021 02:50:43 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 54994
IP address blocks: 203.74.117.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3064 (0xbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:43 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D6D956649BEFBF3E5A31C58463C99574E041E5C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:3c:6a:82:55:61:85:34:bf:ea:b5:af:da:
7a:a8:e6:80:90:ab:4f:04:5d:8d:d4:18:74:66:3a:
c0:c9:7a:7d:99:ce:22:5c:e8:a5:a5:ac:9a:49:fb:
57:60:cc:e8:dd:eb:e3:c4:c5:a1:67:4c:a4:ac:1f:
75:5a:5c:5f:78:ba:ad:1f:35:0b:c9:5a:5d:65:f2:
7e:18:2d:7c:93:26:1b:5a:08:15:9a:79:47:9f:b0:
0a:b7:b2:db:01:70:53:b2:ec:1e:02:3b:b4:63:aa:
af:df:c2:4f:f2:ee:2f:61:cf:85:d9:ac:83:2c:a2:
fb:5e:7e:75:90:98:43:c6:6a:c1:cc:da:10:1d:9d:
5c:9f:f0:8f:62:e1:a3:65:b2:b0:5c:a2:75:76:11:
58:63:1e:7d:ee:6d:0b:ce:23:ea:fa:2a:4b:29:2a:
71:8b:89:64:fb:38:fd:84:d4:a4:1e:f8:01:d8:4c:
bb:cd:db:08:89:aa:d2:d4:18:b4:4c:62:fe:16:30:
d2:6f:9b:ee:a7:28:10:d0:12:79:56:5e:97:1a:9f:
af:81:b5:3b:7a:54:ef:5e:e7:3f:89:25:b5:8f:d0:
6c:51:9e:eb:4b:54:32:77:62:57:94:a5:3e:8e:8b:
67:9d:6d:81:05:50:74:7e:96:fb:64:1d:9c:3c:b5:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D9:56:64:9B:EF:BF:3E:5A:31:C5:84:63:C9:95:74:E0:41:E5:C6
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1tlWZJvvvz5aMcWEY8mVdOBB5cY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.117.0/25
Signature Algorithm: sha256WithRSAEncryption
b9:41:0e:da:ec:6d:d4:b3:21:f4:5c:e0:c5:48:7c:2d:a7:c9:
77:e5:b5:54:fb:18:bd:e0:ef:b1:bd:fd:93:f3:87:8b:33:2c:
04:74:d6:74:cf:29:1b:f1:ed:b1:ed:18:ef:80:ed:80:05:2c:
ce:b9:1e:b4:7c:1f:50:9d:04:ce:bf:40:c1:b8:42:01:91:c4:
7e:5b:5f:13:c8:08:d2:10:ea:88:55:26:4e:5a:db:3f:ce:ba:
a6:01:2f:66:59:f6:15:ba:75:3b:42:4b:d6:0a:2d:0a:fa:af:
6e:d7:01:47:c0:72:63:5e:e0:6e:5e:28:ee:fc:e9:30:ff:23:
dc:52:06:c6:c7:25:ec:d2:0a:5a:b5:91:57:5d:da:7a:ee:56:
e3:64:ec:79:70:8d:f7:58:23:3c:d6:dd:1d:fc:57:c7:58:32:
1d:35:ec:12:eb:f3:8b:46:56:90:b0:53:7c:c4:4c:c9:61:e7:
c6:93:8b:ef:06:34:5c:5e:c5:6f:1d:71:d6:13:b7:dc:56:2d:
84:0e:25:9f:bc:b1:e9:f3:9a:c8:b0:48:d1:08:e3:83:7c:72:
f0:10:1f:91:a3:bc:5a:d3:fe:79:16:d5:da:47:fe:28:1b:57:
51:2f:5c:35:ec:f1:39:15:13:e6:f5:ab:50:cf:fb:ad:6e:de:
68:1b:12:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org