Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/21tGxRHUQ6WiFI35r5ElML4hf2k.roa
File: 21tGxRHUQ6WiFI35r5ElML4hf2k.roa (raw, json)
Hash identifier: WENE9Huz11+3HjwPC180OJ/EdCiAzBQ/kSsfaKCBQRg=
Subject key identifier: DB:5B:46:C5:11:D4:43:A5:A2:14:8D:F9:AF:91:25:30:BE:21:7F:69
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0A74
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/21tGxRHUQ6WiFI35r5ElML4hf2k.roa
Signing time: Sun 07 Feb 2021 11:37:52 +0000
ROA not before: Sun 07 Feb 2021 11:37:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 114.24.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2676 (0xa74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:37:52 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DB5B46C511D443A5A2148DF9AF912530BE217F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:52:ee:92:d0:16:7a:2d:78:6d:7b:2d:b3:
69:e2:70:d7:4f:da:48:6d:8b:59:fe:f0:dc:7e:a8:
90:a9:f8:d7:f9:fe:e3:07:23:35:ef:4b:13:bc:b5:
0c:d6:14:53:b6:ad:1a:16:d9:61:78:fc:39:37:9e:
a5:60:bd:42:af:a2:57:ee:8a:9d:98:da:94:1f:cd:
51:6b:af:f2:3f:0b:74:c0:4e:9d:eb:43:cf:12:3d:
2e:eb:88:52:ec:cd:be:ba:9e:2c:d8:b4:dd:07:e5:
c3:97:20:0c:a5:3e:5f:1b:5d:69:65:91:1e:c0:42:
95:20:e3:94:d1:0c:6c:e8:1b:9c:3a:7e:01:f8:bc:
be:7b:b9:ec:c6:7e:70:9a:2c:62:73:10:2e:78:1a:
db:12:80:e1:73:a8:df:92:10:ee:be:96:dc:ac:10:
40:cd:7a:6f:ff:0a:6b:eb:f7:59:69:3b:42:95:a4:
65:dd:50:55:84:59:2b:a7:5b:a4:b9:17:11:11:da:
94:a4:27:0f:fd:44:f1:2a:6c:9e:f4:bb:30:79:2a:
8a:b9:e9:24:c7:ca:3e:3e:e9:89:a7:35:d3:67:d9:
b5:bb:5f:6a:61:87:18:05:c6:8a:d4:af:a6:87:77:
d2:85:ad:fe:cb:0d:50:f4:bf:f5:1d:74:a4:3c:be:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5B:46:C5:11:D4:43:A5:A2:14:8D:F9:AF:91:25:30:BE:21:7F:69
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/21tGxRHUQ6WiFI35r5ElML4hf2k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.24.0.0/14
Signature Algorithm: sha256WithRSAEncryption
3f:bd:08:bc:2e:1c:90:9c:43:43:89:ef:f9:ac:a8:e1:c1:98:
81:d3:b2:2e:ff:8b:eb:d1:ea:70:11:58:b5:4b:3b:9d:cf:8a:
cd:4c:b5:f1:33:c9:38:04:c7:14:82:3d:36:22:5e:2b:2b:a7:
11:70:04:fd:19:fc:9d:2c:cd:66:0a:fe:82:b1:f5:ea:01:49:
7a:73:72:87:b1:32:51:4a:d5:49:5d:bc:9c:65:bd:cc:d5:b3:
ae:dc:7c:cf:71:11:22:bc:bc:9b:33:a1:5f:84:39:9c:b7:3e:
bd:93:5d:b9:c5:a5:9c:ad:a8:38:55:16:26:3d:9c:f7:1d:cb:
df:cd:dd:7d:e5:c7:e2:a1:18:e5:ae:9e:7f:82:77:14:68:ae:
42:fa:1e:f1:db:51:3d:5e:79:b3:28:dc:41:59:b0:8d:80:8a:
9f:f1:16:f9:4f:75:c2:5b:0e:5c:29:bb:07:ad:90:33:2b:ae:
bf:19:a1:0b:1f:57:73:6d:2b:80:75:6a:3d:cc:6f:74:0d:06:
8d:b6:52:b6:6a:6a:77:70:c0:5f:2d:ac:8e:ad:7a:bb:2e:7e:
83:af:73:6f:d0:ee:01:81:8a:fb:3b:27:7b:1e:25:1c:7d:90:
0d:5c:e5:fa:8f:39:fb:b0:4b:f6:b6:69:ff:95:2a:14:d7:55:
87:15:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org