Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/5lF3Qb4VSwp0YuEJXyrJ75dW7qQ.roa
File: 5lF3Qb4VSwp0YuEJXyrJ75dW7qQ.roa (raw, json)
Hash identifier: T/Xab3o+ziKx3ui7LXmq195J2RvsLwEAZFVRvOqE8pA=
Subject key identifier: E6:51:77:41:BE:15:4B:0A:74:62:E1:09:5F:2A:C9:EF:97:56:EE:A4
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F6A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/5lF3Qb4VSwp0YuEJXyrJ75dW7qQ.roa
Signing time: Fri 01 Sep 2023 08:57:03 +0000
ROA not before: Fri 01 Sep 2023 08:57:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 220.128.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3946 (0xf6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E6517741BE154B0A7462E1095F2AC9EF9756EEA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:82:e8:52:85:e8:f1:e1:f4:25:a6:11:3c:
e2:30:34:5c:52:f5:09:8d:c8:5f:4f:0d:85:5d:0a:
b6:5c:ae:a3:04:a4:e9:1d:54:8e:89:6d:e8:9a:b8:
f8:66:67:89:2f:11:7c:d8:7f:b6:e7:f6:93:98:90:
50:db:f2:fa:66:a7:6e:fa:2d:3e:31:6c:e5:d4:d5:
a1:b5:c4:a6:6f:39:cf:42:8e:c4:cd:96:08:cc:1e:
57:31:ac:ff:66:ee:67:c9:e5:64:4d:c7:3d:46:32:
5e:cd:a4:10:9c:22:8c:87:8c:f5:dd:d7:7d:8d:91:
d6:4c:5c:3b:ad:98:07:38:19:6f:ef:99:f5:a5:c9:
5e:0a:1b:ad:0c:af:1d:dd:a2:41:70:3d:60:22:ab:
e7:ed:9f:c3:98:3d:fb:5d:a4:4f:f3:d2:b5:ee:1c:
d2:ab:d2:f9:48:ed:95:a3:24:b5:58:fd:4f:2d:b8:
fe:ba:f4:06:64:3c:04:07:8a:57:0c:9d:4f:6e:70:
34:11:a5:62:68:12:92:32:5a:d9:2d:3b:55:ee:1a:
8b:02:eb:4b:cf:19:dc:ff:1a:bc:be:7b:cc:d3:f5:
f5:3a:cd:0d:57:22:4d:ed:24:4f:4d:ad:1e:63:39:
61:a3:8e:08:15:98:14:e9:b7:1f:0a:64:70:07:f7:
b4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:51:77:41:BE:15:4B:0A:74:62:E1:09:5F:2A:C9:EF:97:56:EE:A4
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/5lF3Qb4VSwp0YuEJXyrJ75dW7qQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:8a:f0:fb:a1:61:cd:ab:cf:bd:b1:32:eb:0f:ec:d2:05:1e:
d2:6f:a8:ed:b4:b5:b8:a9:03:35:e3:f7:65:ad:61:2a:5a:b2:
6c:20:b3:63:31:19:c5:8c:4f:0d:28:67:f1:02:b8:8d:89:b1:
24:01:3b:25:fc:17:c0:90:1a:1c:c3:c3:4c:ce:e8:61:3d:5d:
0d:b6:0d:dd:93:0e:2c:5d:46:cb:9b:b3:0e:b8:be:af:5d:54:
fb:52:99:54:35:ef:73:10:28:7b:22:8e:bc:b6:27:e1:2e:11:
e0:cc:f6:e3:d8:d0:9f:85:b3:69:63:6a:e1:c9:08:08:7e:76:
1b:e1:23:fb:62:f9:1b:a5:79:85:ce:20:da:56:2a:3b:c9:a8:
57:3b:61:df:b0:cf:2d:09:5a:80:cc:44:7b:03:ad:8b:86:f1:
49:21:4a:f4:31:00:a9:23:7d:5c:69:03:ad:3a:98:1e:c0:76:
4d:32:52:8c:8c:98:9e:fc:c5:e4:25:3e:40:6a:1b:8b:3c:71:
5d:f3:9e:0e:72:6d:53:46:31:46:8d:fd:4f:75:f6:6c:5b:87:
36:51:c0:3a:19:5c:b2:41:bf:be:c6:02:23:de:cb:18:54:21:
96:e4:ac:d6:f8:76:13:f8:43:6d:f2:7a:ef:0c:9a:07:78:aa:
a3:84:0e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:00 2025 by rpki-client