Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/AUCuUG8ztyIqJG329N0VLZD1LBc.roa
File: AUCuUG8ztyIqJG329N0VLZD1LBc.roa (raw, json)
Hash identifier: +IeZVPH0HeWYnvhK+CJO8VaN17WpaxBCYTbeephSXEw=
Subject key identifier: 01:40:AE:50:6F:33:B7:22:2A:24:6D:F6:F4:DD:15:2D:90:F5:2C:17
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C50
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AUCuUG8ztyIqJG329N0VLZD1LBc.roa
Signing time: Wed 29 Sep 2021 02:51:08 +0000
ROA not before: Wed 29 Sep 2021 02:51:08 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9505
IP address blocks: 203.160.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3152 (0xc50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:08 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0140AE506F33B7222A246DF6F4DD152D90F52C17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:5a:8e:cd:e1:15:b8:89:a5:e7:84:60:d0:
13:9b:11:0a:d5:52:89:bf:eb:1a:cf:12:79:ba:68:
32:3f:4a:40:1f:97:0b:5d:12:77:a4:7a:ad:c7:28:
20:e0:a2:85:4c:83:81:c6:71:da:55:70:75:50:99:
e8:87:00:e3:1b:dc:26:f5:6d:2a:99:4d:63:16:6b:
e5:9e:35:15:b4:e9:d8:d6:74:26:75:a3:d2:9a:40:
b4:95:a0:3f:59:76:36:59:8f:36:aa:40:73:37:3b:
5e:cb:c3:91:f5:02:ae:1a:09:bc:07:48:13:86:55:
78:32:7d:5d:3b:f2:ad:5a:57:01:86:39:15:45:a2:
8b:92:53:15:12:71:e0:d5:a8:96:12:f3:36:53:3b:
c5:68:5f:2c:90:79:a0:08:12:c7:ca:06:6d:bc:e1:
cb:9b:6d:0d:3a:77:ab:5d:85:a0:91:a3:45:62:f0:
49:4e:54:cc:a8:48:42:71:ee:30:89:8e:c9:ae:d7:
c6:4e:5c:75:e2:cb:42:d2:2b:a6:f8:ec:f2:95:05:
5d:bd:63:61:74:0e:21:60:3d:60:4f:ee:19:32:41:
e3:0e:b1:05:cb:f8:e3:20:c7:45:c2:9e:67:dc:b6:
a5:1b:70:e0:36:53:f0:0e:1a:5e:72:31:8c:09:c6:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:40:AE:50:6F:33:B7:22:2A:24:6D:F6:F4:DD:15:2D:90:F5:2C:17
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AUCuUG8ztyIqJG329N0VLZD1LBc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.160.224.0/20
Signature Algorithm: sha256WithRSAEncryption
42:68:ff:0a:c6:46:9c:42:f9:6e:6d:8a:72:88:d6:f6:8a:fb:
c7:22:24:bf:0d:0c:79:a0:c1:37:19:54:ac:e9:d4:c7:94:e8:
15:39:a2:85:99:bc:b7:f8:58:dd:93:96:e0:46:96:93:21:45:
b0:bb:31:80:8d:ec:57:ea:e9:8a:3f:9c:a5:b8:c4:5a:8b:94:
51:62:48:cf:0e:ec:9a:34:a9:e1:0f:3d:76:cb:63:ae:07:84:
d1:31:06:89:c3:01:89:4b:d0:6f:f3:36:28:3c:75:7b:2c:df:
38:39:3e:84:35:10:ec:ac:6a:03:2e:f7:78:9d:c2:14:4b:49:
50:bb:2b:2d:76:ac:2d:89:fb:9c:60:3d:9a:90:a2:55:4e:f6:
1c:e1:a9:88:81:66:24:8d:70:82:1d:83:a3:86:54:2b:16:cf:
dd:be:ec:c4:7e:05:74:47:65:22:db:f4:ef:f4:88:a4:24:a0:
7b:05:60:be:cd:84:96:85:ec:00:6d:11:24:96:0d:9e:ca:11:
f4:fe:2f:d6:3a:c4:21:ed:30:4f:e3:23:81:4d:cd:9a:53:68:
09:b8:fe:69:17:50:dd:a2:8b:54:c6:03:3d:57:b6:98:3c:6d:
8f:fe:45:1e:11:73:4c:37:57:0b:fe:eb:7a:a5:e1:3a:bf:bd:
8c:08:47:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:40:25 2025 by rpki-client