Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/7_oc5wv_WgHNnp-mmOiX1NYs9Fk.roa
File: 7_oc5wv_WgHNnp-mmOiX1NYs9Fk.roa (raw, json)
Hash identifier: 6QIEfRxOa72oRtWQaPPmMOImlgn1NKGEiA5GmGlJho0=
Subject key identifier: EF:FA:1C:E7:0B:FF:5A:01:CD:9E:9F:A6:98:E8:97:D4:D6:2C:F4:59
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FAC
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7_oc5wv_WgHNnp-mmOiX1NYs9Fk.roa
Signing time: Fri 01 Sep 2023 08:57:22 +0000
ROA not before: Fri 01 Sep 2023 08:57:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131661
IP address blocks: 210.62.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4012 (0xfac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EFFA1CE70BFF5A01CD9E9FA698E897D4D62CF459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:52:9a:ad:79:82:9b:f2:1f:61:10:de:ca:
8d:ea:e6:e2:34:26:9c:1b:a6:97:30:f8:11:24:e9:
82:06:f6:1f:34:3f:c7:4f:31:b8:5f:53:1f:5c:3a:
bd:ac:52:b8:73:04:7c:f7:63:31:f0:c3:7a:b7:62:
30:bf:95:d9:be:97:ea:26:09:b6:7a:6a:b8:d3:ec:
f6:e1:cc:91:86:5b:0d:42:45:9f:04:6c:0f:61:90:
da:38:16:47:33:73:13:89:8e:e2:87:e8:16:7d:e6:
3f:6a:ae:d2:5a:6f:43:25:6e:e7:9b:54:68:a3:71:
f6:50:2c:52:67:3f:da:c2:38:62:59:72:f8:6f:54:
5f:73:7a:33:dd:7e:df:9a:ab:bf:11:4c:5a:a7:e4:
db:2f:09:9a:dc:a9:d0:6e:a5:75:7d:d1:b1:05:e2:
e6:e6:bd:20:e4:c8:07:68:8c:a1:62:c3:47:05:ef:
79:6a:f2:d0:cb:d4:65:d2:73:55:3f:02:37:d3:54:
c0:47:e0:50:d1:74:f5:93:6b:80:be:f0:dd:ae:cc:
bc:b6:d8:68:9c:82:ef:19:08:ff:55:6a:8d:f4:31:
d7:2b:de:01:a6:fb:7b:84:b9:5d:1a:7e:14:34:1a:
38:c9:af:f7:23:ad:de:bd:a6:03:20:76:27:ba:f6:
58:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FA:1C:E7:0B:FF:5A:01:CD:9E:9F:A6:98:E8:97:D4:D6:2C:F4:59
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7_oc5wv_WgHNnp-mmOiX1NYs9Fk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:18:0c:b2:5c:16:23:35:e3:f5:99:95:48:01:f7:54:2c:4f:
71:3f:33:15:8d:2f:ee:02:b9:03:cd:56:4d:95:a6:c7:10:22:
c5:7c:31:1d:50:d1:ab:b5:53:96:42:3d:25:74:03:57:ec:79:
b5:e3:80:6f:c1:9a:63:50:aa:54:4f:85:90:5d:18:46:f5:1a:
5a:ec:16:1c:13:00:59:48:89:fa:c1:9a:20:86:19:00:d0:61:
29:cd:88:ba:db:a3:c3:f2:af:57:d1:23:cc:dd:26:52:00:44:
c6:1b:f6:46:7b:66:46:84:d6:df:e1:48:27:e3:d0:9e:cc:03:
46:a1:90:ea:20:21:99:b6:b6:c3:ff:8d:b4:68:96:a6:d8:ea:
32:11:1e:1f:dc:d2:c2:e0:ff:b7:b7:b4:3c:09:1c:ff:85:15:
d3:9d:32:68:04:3e:ed:83:3c:ca:d6:70:c2:ed:52:d5:84:89:
7b:ff:82:77:97:27:ae:b9:70:9c:9a:e3:48:e0:f2:7a:11:4d:
8f:a8:d9:05:6f:36:5a:77:9a:84:a6:6f:3a:1f:9b:1e:83:64:
ac:54:53:e1:2c:f0:d4:68:f8:6a:38:97:75:a4:27:d8:a7:a3:
79:05:12:64:1b:63:ab:56:5d:16:5d:99:94:34:f7:86:cd:81:
9a:b8:ae:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:14 2025 by rpki-client