Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/6O-5nihLw6XvZtbD-BcnfCowxVY.roa
File: 6O-5nihLw6XvZtbD-BcnfCowxVY.roa (raw, json)
Hash identifier: 7/f5mKhbyjl6ysVDbdrO6z+okoYtpiY6+qecI5g08xU=
Subject key identifier: E8:EF:B9:9E:28:4B:C3:A5:EF:66:D6:C3:F8:17:27:7C:2A:30:C5:56
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6O-5nihLw6XvZtbD-BcnfCowxVY.roa
Signing time: Thu 15 Sep 2022 02:48:04 +0000
ROA not before: Thu 15 Sep 2022 02:48:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 54994
IP address blocks: 202.39.156.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E8EFB99E284BC3A5EF66D6C3F817277C2A30C556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:31:a8:c4:51:f8:06:a5:c6:e6:a0:80:46:
d6:4a:68:d9:de:55:d2:91:da:ed:23:7d:29:db:07:
00:c2:21:ae:e7:c4:99:70:a6:81:41:dc:bb:da:44:
cb:77:75:93:41:51:2f:29:42:5d:99:8e:9c:88:33:
48:bd:82:68:14:61:10:6b:ea:3d:ab:17:f4:cc:ff:
65:2a:3d:f2:38:9e:62:10:e8:1d:5e:cc:a1:f3:32:
4c:42:8e:79:a0:76:63:93:fe:40:89:b1:2b:24:e2:
71:ed:7c:b4:a6:16:ae:d3:4f:8a:b4:e9:43:ec:92:
e4:5f:f9:11:f1:af:ec:9f:ec:a5:74:2f:c5:bc:98:
c4:97:6e:71:9b:e3:8c:c2:51:fc:89:8a:32:ee:e5:
ac:90:39:9e:ed:a5:d6:3b:c7:a7:f7:e7:42:ea:b0:
59:47:4d:7a:72:3a:41:22:6c:b4:f1:aa:e3:5f:5b:
de:be:bd:ff:4b:0b:58:3e:da:b9:b3:96:e2:70:98:
ef:25:bc:41:25:85:e9:10:8d:10:15:60:84:cc:04:
90:f2:b5:8d:58:4d:7c:74:ec:b1:d4:29:2d:fe:5e:
7c:3f:08:fa:58:e7:bb:a1:0e:b6:aa:47:7a:cd:60:
9e:36:ab:c3:b6:ea:5d:c6:ae:c3:00:c0:8d:46:50:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EF:B9:9E:28:4B:C3:A5:EF:66:D6:C3:F8:17:27:7C:2A:30:C5:56
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6O-5nihLw6XvZtbD-BcnfCowxVY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.156.0/26
Signature Algorithm: sha256WithRSAEncryption
58:4f:1a:3a:8e:a1:71:a0:78:d6:a8:a8:3a:4f:65:c3:9e:d5:
33:c2:06:1c:4e:5c:4e:0a:fa:dd:ff:99:67:11:b8:25:65:1f:
ae:7c:16:e1:af:8d:21:d2:82:be:ea:da:6a:79:58:1d:8f:ed:
54:5e:db:a4:c1:83:25:c9:5e:64:3a:ea:26:e7:65:0f:f9:ce:
03:51:1e:88:2a:02:58:36:b6:ce:9a:6c:27:b4:31:50:fb:1f:
c3:3d:72:7b:1d:55:4a:8a:f0:70:ca:69:86:e7:67:ca:e7:6a:
1a:98:03:99:97:14:14:39:05:6a:1c:87:08:84:5e:dd:f2:43:
0d:00:07:82:47:bf:2b:05:af:fd:f9:b0:e5:db:ee:3c:63:24:
62:c1:94:31:c1:d2:66:20:20:20:c6:6e:31:14:00:9b:ce:96:
ed:bf:16:e4:39:9a:cf:fe:7a:73:f5:fb:d9:ca:c0:61:c9:69:
3b:66:98:ac:02:43:bc:83:f8:2d:cf:36:1c:d5:61:79:74:b6:
23:b8:42:e5:0f:02:cf:86:58:52:b2:38:b9:73:04:91:86:7e:
61:ea:26:97:07:f3:a9:02:84:9c:d7:80:05:46:b4:3a:a4:a6:
76:e6:e1:6b:91:82:4f:31:ab:eb:8e:46:8c:11:d6:64:d7:0b:
93:3c:cb:a6
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMjA5MTUw
MjQ4MDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEU4RUZCOTlFMjg0QkMz
QTVFRjY2RDZDM0Y4MTcyNzdDMkEzMEM1NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFjzGoxFH4BqXG5qCARtZKaNneVdKR2u0jfSnbBwDCIa7nxJlw
poFB3LvaRMt3dZNBUS8pQl2ZjpyIM0i9gmgUYRBr6j2rF/TM/2UqPfI4nmIQ6B1e
zKHzMkxCjnmgdmOT/kCJsSsk4nHtfLSmFq7TT4q06UPskuRf+RHxr+yf7KV0L8W8
mMSXbnGb44zCUfyJijLu5ayQOZ7tpdY7x6f350LqsFlHTXpyOkEibLTxquNfW96+
vf9LC1g+2rmzluJwmO8lvEElhekQjRAVYITMBJDytY1YTXx07LHUKS3+Xnw/CPpY
57uhDraqR3rNYJ42q8O26l3GrsMAwI1GUN55AgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQU6O+5nihLw6XvZtbD+BcnfCowxVYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC82Ty01bmloTHc2WHZadGJELUJj
bmZDb3d4Vlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGyiec
ADANBgkqhkiG9w0BAQsFAAOCAQEAWE8aOo6hcaB41qioOk9lw57VM8IGHE5cTgr6
3f+ZZxG4JWUfrnwW4a+NIdKCvuraanlYHY/tVF7bpMGDJcleZDrqJudlD/nOA1Ee
iCoCWDa2zppsJ7QxUPsfwz1yex1VSorwcMpphudnyudqGpgDmZcUFDkFahyHCIRe
3fJDDQAHgke/KwWv/fmw5dvuPGMkYsGUMcHSZiAgIMZuMRQAm86W7b8W5Dmaz/56
c/X72crAYclpO2aYrAJDvIP4Lc82HNVheXS2I7hC5Q8Cz4ZYUrI4uXMEkYZ+Yeom
lwfzqQKEnNeABUa0OqSmdubha5GCTzGr645GjBHWZNcLkzzLpg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org