Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/8tLTOS5JkF2VjiMD6-ZSFbkv9Q4.roa
File: 8tLTOS5JkF2VjiMD6-ZSFbkv9Q4.roa (raw, json)
Hash identifier: 5I3KWTDMcrk+sB/4pwff37yuJ77RmByeNPr20wSOrhk=
Subject key identifier: F2:D2:D3:39:2E:49:90:5D:95:8E:23:03:EB:E6:52:15:B9:2F:F5:0E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 086C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8tLTOS5JkF2VjiMD6-ZSFbkv9Q4.roa
Signing time: Tue 29 Sep 2020 09:58:43 +0000
ROA not before: Tue 29 Sep 2020 09:58:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 1.34.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2156 (0x86c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F2D2D3392E49905D958E2303EBE65215B92FF50E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:ba:d7:8e:c1:68:56:50:3f:3a:48:f2:d2:
26:5d:63:eb:da:86:db:c1:5a:fe:be:64:9e:09:0e:
36:3b:bf:3a:2e:8e:f8:19:31:49:5e:6f:ee:bd:16:
e5:b6:c7:7b:9d:22:a6:dc:be:1b:16:3f:3d:75:68:
d5:4f:0e:2e:10:b1:ed:c2:a4:96:8e:e7:e3:70:cb:
1f:7b:f4:70:65:fb:17:0b:09:41:76:31:6c:08:16:
9a:3c:65:b4:1b:4e:5f:79:90:fa:3e:dc:c5:42:12:
c2:24:36:fd:92:98:ca:6e:9e:0b:bb:94:c1:35:59:
02:c4:7f:27:aa:79:23:97:ad:51:0c:df:38:25:d2:
f1:69:67:fd:26:43:22:54:40:f5:39:fc:36:3b:2d:
de:8c:63:d9:c7:c3:55:ba:fb:06:4d:b9:a0:de:8a:
db:1a:68:a9:00:31:5c:d0:db:cf:01:6f:ea:cc:7f:
85:24:81:cc:fb:1e:b1:c2:c7:55:16:62:28:16:f8:
22:e0:bd:e2:6b:cd:e6:7e:eb:88:c3:45:23:25:a2:
b0:90:6f:26:86:ec:ed:f7:7a:08:85:30:51:25:0b:
a1:a2:57:f9:dd:20:49:a0:0a:c2:0e:11:72:3a:9b:
24:b7:2d:36:f7:28:18:fc:cf:75:1a:2d:85:74:22:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D2:D3:39:2E:49:90:5D:95:8E:23:03:EB:E6:52:15:B9:2F:F5:0E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8tLTOS5JkF2VjiMD6-ZSFbkv9Q4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.34.0.0/15
Signature Algorithm: sha256WithRSAEncryption
4d:da:42:00:e4:bb:2a:a7:68:dd:4d:d9:b2:90:c7:39:73:9d:
57:70:5d:f5:a6:1b:bf:f3:f8:38:8a:24:9a:9f:d2:39:1a:59:
fd:dd:05:c6:de:1c:52:92:c9:b4:60:27:65:76:06:24:ff:81:
5f:8c:5b:5c:59:2e:9d:37:c9:7d:ba:1f:e4:e7:49:98:b9:c2:
84:9c:7b:00:71:9e:bd:d1:ad:26:0a:97:90:e7:0d:5c:64:b7:
3d:4f:4b:7a:bb:c2:ab:3f:12:26:03:26:c3:e5:b7:87:e7:6b:
0a:0d:9f:45:a7:20:48:23:08:a2:20:02:e2:be:0c:13:61:61:
63:09:9e:49:22:52:ad:32:6e:61:38:a2:f0:40:ad:53:5d:0e:
5b:f3:d3:12:67:0f:76:57:ad:dc:10:48:f4:4b:e1:34:52:d2:
03:a1:46:41:50:b0:a6:2c:ad:d2:12:3b:8c:34:c6:20:b3:5f:
78:0e:2e:64:65:f8:b1:9d:07:56:27:be:41:8b:9e:79:33:62:
35:11:5d:5d:21:10:b3:f0:32:64:7f:38:ad:09:b8:17:e9:17:
51:25:fd:37:81:8e:3f:96:0d:d1:bd:0d:05:ad:af:b3:8c:53:
c2:77:64:16:a5:e3:24:39:5f:63:be:87:2d:3d:44:a6:b4:b8:
f6:73:b6:53
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICCGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMDA5Mjkw
OTU4NDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEYyRDJEMzM5MkU0OTkw
NUQ5NThFMjMwM0VCRTY1MjE1QjkyRkY1MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYTrrXjsFoVlA/Okjy0iZdY+vahtvBWv6+ZJ4JDjY7vzoujvgZ
MUleb+69FuW2x3udIqbcvhsWPz11aNVPDi4Qse3CpJaO5+Nwyx979HBl+xcLCUF2
MWwIFpo8ZbQbTl95kPo+3MVCEsIkNv2SmMpungu7lME1WQLEfyeqeSOXrVEM3zgl
0vFpZ/0mQyJUQPU5/DY7Ld6MY9nHw1W6+wZNuaDeitsaaKkAMVzQ288Bb+rMf4Uk
gcz7HrHCx1UWYigW+CLgveJrzeZ+64jDRSMlorCQbyaG7O33egiFMFElC6GiV/nd
IEmgCsIOEXI6myS3LTb3KBj8z3UaLYV0IoTjAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQU8tLTOS5JkF2VjiMD6+ZSFbkv9Q4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC84dExUT1M1SmtGMlZqaU1ENi1a
U0Zia3Y5UTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBASIw
DQYJKoZIhvcNAQELBQADggEBAE3aQgDkuyqnaN1N2bKQxzlznVdwXfWmG7/z+DiK
JJqf0jkaWf3dBcbeHFKSybRgJ2V2BiT/gV+MW1xZLp03yX26H+TnSZi5woScewBx
nr3RrSYKl5DnDVxktz1PS3q7wqs/EiYDJsPlt4fnawoNn0WnIEgjCKIgAuK+DBNh
YWMJnkkiUq0ybmE4ovBArVNdDlvz0xJnD3ZXrdwQSPRL4TRS0gOhRkFQsKYsrdIS
O4w0xiCzX3gOLmRl+LGdB1YnvkGLnnkzYjURXV0hELPwMmR/OK0JuBfpF1El/TeB
jj+WDdG9DQWtr7OMU8J3ZBal4yQ5X2O+hy09RKa0uPZztlM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org