Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/3RCDZF1cby6aBGZfMCwKutZQ-cI.roa
File: 3RCDZF1cby6aBGZfMCwKutZQ-cI.roa (raw, json)
Hash identifier: IWPodVLBMPL3F//sF8RbLr8IZ1U1QX0q8TiRJovyZiQ=
Subject key identifier: DD:10:83:64:5D:5C:6F:2E:9A:04:66:5F:30:2C:0A:BA:D6:50:F9:C2
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C05
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3RCDZF1cby6aBGZfMCwKutZQ-cI.roa
Signing time: Wed 29 Sep 2021 02:50:46 +0000
ROA not before: Wed 29 Sep 2021 02:50:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 20940
IP address blocks: 210.61.248.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3077 (0xc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:46 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DD1083645D5C6F2E9A04665F302C0ABAD650F9C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:50:93:9d:66:b2:5c:e1:b0:98:c1:38:40:
ae:d1:fa:33:94:dd:62:a8:3a:94:f1:bb:93:42:0d:
b4:19:5c:08:66:11:99:39:ec:72:9e:5a:3b:fe:f2:
a0:86:ae:59:eb:75:5e:f9:79:11:f9:08:e0:bc:a1:
20:78:c8:87:44:9f:2e:96:b5:b5:b0:0c:0d:e5:94:
91:8d:30:94:c6:61:4d:b9:e7:d6:02:31:c4:ec:78:
75:f8:34:c9:95:eb:22:8f:65:cc:48:e2:60:b7:6b:
5d:65:90:1a:78:51:f2:81:14:33:cc:fe:db:8c:8b:
7e:ef:de:ea:7d:39:d1:0d:80:71:5b:71:f2:0e:dc:
0c:2e:08:9b:5d:41:01:13:be:98:93:c0:16:26:e8:
be:be:5d:bf:5f:ff:37:20:e0:63:0b:c6:c7:f2:36:
9c:06:39:d2:e1:62:be:1e:ae:d9:f8:b4:fd:8d:fe:
18:9c:13:b6:00:67:a4:fd:ae:eb:f8:15:17:16:fc:
3d:dc:6e:95:d0:ba:b1:be:8e:7a:8f:67:25:c5:c1:
f0:98:f3:1b:f7:84:78:f0:58:4f:fe:08:72:e5:3e:
7a:c4:5c:76:29:14:0b:78:a5:00:38:cf:37:74:0c:
b0:d8:bf:33:07:f9:63:4c:5e:37:43:dc:f3:a5:da:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:10:83:64:5D:5C:6F:2E:9A:04:66:5F:30:2C:0A:BA:D6:50:F9:C2
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3RCDZF1cby6aBGZfMCwKutZQ-cI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.248.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:4f:26:ad:26:88:c9:da:1d:b9:67:4f:c7:4a:6b:8e:1c:e5:
70:e1:0a:3c:9f:ae:b0:d5:5e:a1:49:6e:f1:c3:a5:7c:b0:46:
00:1d:06:0f:d1:07:ee:ea:51:ca:7f:9b:77:56:80:fb:20:62:
fe:25:c3:09:2e:b8:77:fc:70:75:6c:55:54:c5:8d:b7:3b:77:
ae:5a:91:ec:23:c3:0e:ac:b8:29:9e:43:53:fa:c5:60:b5:67:
17:95:e5:8f:fe:5f:28:5f:90:f6:74:39:0a:4c:72:26:95:7e:
37:f5:78:d6:bf:9a:fa:10:a8:80:9b:ef:b8:dc:0a:0f:5e:0f:
68:3b:5e:bd:95:80:26:67:3e:be:fa:4f:5a:3f:13:40:a6:cf:
95:47:52:8b:c7:4d:50:cc:df:49:46:c7:a7:66:19:8a:d1:5c:
94:1f:7b:e1:93:d2:94:ea:f5:5b:c9:5c:f3:15:17:87:88:26:
35:bf:5d:e2:35:81:1e:7e:9c:a2:0c:59:0d:32:66:41:56:fc:
6e:c9:51:ed:11:8c:76:66:8e:ec:cf:42:ff:dd:01:11:52:66:
5c:d6:4a:21:1c:58:90:28:15:55:2b:8a:18:94:c4:a6:d6:3d:
42:fc:a2:ab:0c:5c:df:57:c2:01:08:02:c7:e4:29:ea:b9:2e:
aa:f1:be:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:52 2025 by rpki-client