Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/AU_eRNESe8B8JiyFuL5yl4EYRhY.roa
File: AU_eRNESe8B8JiyFuL5yl4EYRhY.roa (raw, json)
Hash identifier: dd1ozzQrFPyLl5g2XoLhxTCnFuXdysTvB1OBM4xevHI=
Subject key identifier: 01:4F:DE:44:D1:12:7B:C0:7C:26:2C:85:B8:BE:72:97:81:18:46:16
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C3D
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AU_eRNESe8B8JiyFuL5yl4EYRhY.roa
Signing time: Wed 29 Sep 2021 02:51:03 +0000
ROA not before: Wed 29 Sep 2021 02:51:03 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 61.218.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3133 (0xc3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:03 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=014FDE44D1127BC07C262C85B8BE729781184616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:d8:4a:62:c0:77:9b:66:10:e1:d0:e3:03:
40:4f:e5:ac:d2:7c:41:34:0a:a1:4b:c7:fc:07:44:
db:a4:1c:4c:cb:f2:76:03:78:bf:09:71:f5:cf:74:
6c:47:ce:d8:2e:b0:d6:0e:f1:30:37:f8:5f:aa:7d:
40:be:02:46:11:76:45:b3:c4:ba:f2:de:8d:82:4f:
38:50:61:94:14:05:94:ff:7d:d7:d8:01:c7:16:5d:
d8:c2:26:c4:a1:a2:a0:51:19:58:38:27:c6:9b:0e:
3b:63:a6:f7:d0:15:0f:da:aa:23:f8:a7:6e:7e:7d:
89:06:92:f7:5a:8c:c7:88:bb:af:ed:bc:04:ce:a1:
70:ce:e1:71:0d:cd:10:7b:e7:95:9b:eb:19:c0:1b:
fd:e4:d1:2e:ba:41:d3:e9:41:a4:0c:57:2d:12:f0:
ca:d1:5d:77:03:ac:1b:b1:3a:59:75:44:df:a8:40:
28:30:50:d0:59:4b:7e:76:66:3b:22:61:60:b5:3b:
07:75:d7:71:64:eb:4b:fd:f6:c6:4f:b5:a8:69:4e:
bb:65:f1:39:fe:9a:c4:4a:33:d0:6f:08:3c:63:c6:
7a:7e:ba:0c:21:a1:40:80:ad:54:11:db:97:fb:29:
d7:83:40:54:48:28:56:1d:6a:cd:9e:2b:28:96:30:
69:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4F:DE:44:D1:12:7B:C0:7C:26:2C:85:B8:BE:72:97:81:18:46:16
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AU_eRNESe8B8JiyFuL5yl4EYRhY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.218.0.0/15
Signature Algorithm: sha256WithRSAEncryption
30:38:ac:2d:6f:da:9a:23:c2:bb:c2:15:67:0f:2c:c1:b7:e7:
94:f3:54:57:5f:d5:6f:e2:32:c3:aa:bb:7d:a4:72:80:5d:95:
f9:b8:cb:36:51:40:af:66:53:ba:e7:52:72:13:40:ec:9b:08:
cf:0b:cb:b0:c7:79:87:ae:6d:85:d0:b2:8f:cb:ae:7b:a1:32:
af:1b:57:5c:e0:2f:f6:c9:6d:18:a3:bd:63:20:44:5b:ce:e5:
2c:5e:63:4c:2d:ed:3e:5a:26:b8:e1:89:17:2e:c9:fe:d4:ed:
ae:ac:86:14:fd:ce:a2:1a:11:8d:f1:4c:18:13:df:b1:ae:2b:
96:0a:94:00:5f:75:91:69:5c:14:80:ed:ae:c6:d7:e0:32:4c:
f9:56:57:4f:d0:8d:43:fe:32:8b:a4:86:47:3f:a7:9a:0c:5e:
f0:a0:82:44:41:7c:c5:34:a5:71:8c:fb:51:d3:2f:2c:43:07:
93:e6:e8:70:05:83:b3:ec:bb:f7:33:88:94:ba:cb:ac:6c:72:
33:34:bd:68:fa:5f:6f:35:1b:23:83:da:d9:8e:49:8a:e4:d4:
51:26:13:dc:26:96:ea:3c:6a:53:57:6c:a7:ec:67:17:64:48:
6b:03:b2:ed:4c:7e:b6:a3:ca:e2:79:63:e2:d9:45:ed:77:d4:
b5:83:b2:5b
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTA5Mjkw
MjUxMDNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDAxNEZERTQ0RDExMjdC
QzA3QzI2MkM4NUI4QkU3Mjk3ODExODQ2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwZ9hKYsB3m2YQ4dDjA0BP5azSfEE0CqFLx/wHRNukHEzL8nYD
eL8JcfXPdGxHztgusNYO8TA3+F+qfUC+AkYRdkWzxLry3o2CTzhQYZQUBZT/fdfY
AccWXdjCJsShoqBRGVg4J8abDjtjpvfQFQ/aqiP4p25+fYkGkvdajMeIu6/tvATO
oXDO4XENzRB755Wb6xnAG/3k0S66QdPpQaQMVy0S8MrRXXcDrBuxOll1RN+oQCgw
UNBZS352ZjsiYWC1Owd113Fk60v99sZPtahpTrtl8Tn+msRKM9BvCDxjxnp+ugwh
oUCArVQR25f7KdeDQFRIKFYdas2eKyiWMGlFAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUAU/eRNESe8B8JiyFuL5yl4EYRhYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9BVV9lUk5FU2U4QjhKaXlGdUw1
eWw0RVlSaFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBPdow
DQYJKoZIhvcNAQELBQADggEBADA4rC1v2pojwrvCFWcPLMG355TzVFdf1W/iMsOq
u32kcoBdlfm4yzZRQK9mU7rnUnITQOybCM8Ly7DHeYeubYXQso/LrnuhMq8bV1zg
L/bJbRijvWMgRFvO5SxeY0wt7T5aJrjhiRcuyf7U7a6shhT9zqIaEY3xTBgT37Gu
K5YKlABfdZFpXBSA7a7G1+AyTPlWV0/QjUP+Moukhkc/p5oMXvCggkRBfMU0pXGM
+1HTLyxDB5Pm6HAFg7Psu/cziJS6y6xscjM0vWj6X281GyOD2tmOSYrk1FEmE9wm
luo8alNXbKfsZxdkSGsDsu1MfrajyuJ5Y+LZRe131LWDsls=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org