Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/2NXIwmqXsDTJZcr2afeTE57VVTI.roa
File: 2NXIwmqXsDTJZcr2afeTE57VVTI.roa (raw, json)
Hash identifier: 1A4cAQIP+xJy2tYqWGkI3Z38cNLVSQdo4auGkZu5b1k=
Subject key identifier: D8:D5:C8:C2:6A:97:B0:34:C9:65:CA:F6:69:F7:93:13:9E:D5:55:32
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0A46
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2NXIwmqXsDTJZcr2afeTE57VVTI.roa
Signing time: Sun 07 Feb 2021 11:37:17 +0000
ROA not before: Sun 07 Feb 2021 11:37:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 54994
IP address blocks: 202.39.156.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2630 (0xa46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:37:17 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D8D5C8C26A97B034C965CAF669F793139ED55532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f2:0f:cd:61:2c:5a:2f:6e:6d:fa:0a:3e:41:
3d:84:bb:96:f2:b0:a5:2f:8b:6c:58:9a:72:be:86:
7c:ab:4a:0e:38:2a:7d:0b:c5:01:ae:83:e1:80:c2:
84:ba:85:5d:2a:29:f5:ab:f1:f6:f2:74:0f:9a:de:
37:b4:1c:5d:b0:6c:f5:70:d8:83:ff:ec:6b:70:8e:
32:0b:cf:5c:4e:29:b5:95:6b:d4:28:7c:f5:c3:24:
30:45:e6:e1:bc:b9:4e:32:8f:1d:4b:7b:19:d6:82:
ad:fc:98:73:a8:10:e0:56:a4:a4:42:21:67:cd:df:
14:36:18:08:c4:f6:b2:e2:32:d4:cd:55:cc:70:86:
36:00:8e:67:d1:0d:1e:5d:08:95:04:f4:3c:e9:17:
8f:71:21:d9:e0:d1:8b:19:e2:a0:d8:b4:a9:25:05:
3c:6a:ab:9e:df:57:b1:17:e4:74:fa:ce:74:b4:ea:
84:9b:5b:ab:33:19:4b:05:8f:07:a9:bb:14:e9:7f:
51:56:d9:25:a8:a6:2b:20:d2:35:23:68:66:62:50:
bd:a0:cc:9b:8c:a0:85:ee:fc:30:c8:c6:80:bf:c1:
51:7e:58:6a:5c:68:1f:42:cb:49:a9:1e:35:d7:14:
b1:89:c6:79:cf:b2:78:42:80:87:0b:86:6b:7f:f1:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D5:C8:C2:6A:97:B0:34:C9:65:CA:F6:69:F7:93:13:9E:D5:55:32
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2NXIwmqXsDTJZcr2afeTE57VVTI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.156.0/26
Signature Algorithm: sha256WithRSAEncryption
9b:ff:17:3e:10:2a:9a:63:84:aa:8b:94:b4:33:1d:56:bf:34:
a1:f5:84:9c:94:18:fb:e0:12:ca:1a:e8:60:83:cb:32:9a:5d:
cd:e4:50:57:54:46:fe:64:2a:81:ea:7d:a2:21:db:a5:34:25:
d1:32:59:9c:9b:c2:da:5c:94:97:90:88:fc:65:45:fe:8f:18:
7c:7f:a4:dc:d7:2a:0a:4f:75:0e:aa:70:5f:b1:de:5c:be:ea:
6d:60:82:8f:2a:b2:33:77:e6:30:d5:bd:92:ef:ba:fe:82:09:
79:76:60:98:40:92:9c:b6:d9:a1:da:c7:d9:ca:49:b5:6f:20:
29:5c:bd:9a:63:78:45:f0:00:47:f4:cd:fb:a9:2e:a4:ba:c5:
f1:6b:c8:63:22:d8:cc:19:f1:cd:43:9d:ac:a0:99:0c:80:c2:
f4:4e:28:b6:fb:f4:70:34:99:b2:31:ce:1b:7f:24:41:af:cf:
c4:8e:43:f7:c1:76:ff:d6:28:3a:54:4c:1f:d0:a5:60:47:5c:
2b:f5:08:3a:92:03:1b:1d:39:4a:bc:b9:a6:6b:20:91:86:a9:
81:9c:7a:35:2a:bc:84:18:9e:17:bd:7e:f5:37:82:9a:7c:fe:
3f:42:e2:c1:e5:27:36:8f:a7:5a:91:97:f6:35:11:b7:1c:10:
b2:fc:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org