Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/B_1SrHMrh2ZqMykMCRuDb36z5RU.roa
File: B_1SrHMrh2ZqMykMCRuDb36z5RU.roa (raw, json)
Hash identifier: OIgrdTs9GT0h2yBtI0ZlpYXUU0vurqz7ULUtHah3uz8=
Subject key identifier: 07:FD:52:AC:73:2B:87:66:6A:33:29:0C:09:1B:83:6F:7E:B3:E5:15
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0BF3
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/B_1SrHMrh2ZqMykMCRuDb36z5RU.roa
Signing time: Wed 29 Sep 2021 02:50:42 +0000
ROA not before: Wed 29 Sep 2021 02:50:42 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 54994
IP address blocks: 202.39.156.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3059 (0xbf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:42 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=07FD52AC732B87666A33290C091B836F7EB3E515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:e0:8d:33:20:89:59:ab:28:4e:d4:ab:b2:
80:69:25:78:00:b0:d2:20:73:79:6c:0d:11:f5:b0:
99:75:2b:bf:a6:f2:c0:68:08:69:f7:a4:fe:81:ed:
66:bd:63:44:c2:55:58:12:7e:56:6e:a4:fd:60:70:
ba:10:e2:f1:a0:c4:57:c4:26:89:f1:a4:dd:b9:ea:
ed:12:81:f5:3d:c7:4d:1d:83:03:43:1f:4d:00:a4:
2a:61:24:31:f0:25:53:98:22:99:1c:21:18:cd:8e:
6b:91:65:c5:98:73:60:69:97:01:b5:64:22:55:47:
e7:f7:d5:9f:dd:ee:e0:5b:90:7c:12:93:23:c2:ff:
4d:8e:a6:bb:34:9e:1e:91:2b:40:57:6e:d3:74:b0:
fe:c3:5e:db:f2:5d:57:7b:17:18:69:6b:8d:61:c6:
54:a2:f2:33:e7:34:54:e4:54:48:69:6e:b5:27:2e:
dd:18:00:ad:fa:a5:79:c3:c6:0d:86:1e:38:04:f9:
7f:56:b9:65:fc:ba:79:23:62:46:ac:4b:0f:02:f7:
18:df:99:9a:bc:cc:71:ef:fa:67:8c:25:e6:eb:c6:
00:3a:c4:65:6a:56:3b:87:44:dc:51:46:a3:d1:ce:
e1:a7:f1:5d:ac:39:26:85:3c:03:1c:2d:4a:1f:4f:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FD:52:AC:73:2B:87:66:6A:33:29:0C:09:1B:83:6F:7E:B3:E5:15
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/B_1SrHMrh2ZqMykMCRuDb36z5RU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.156.0/26
Signature Algorithm: sha256WithRSAEncryption
89:6d:11:fc:3f:d6:7f:3e:a5:ef:16:fa:82:96:28:5e:c1:ba:
7c:90:e2:38:4a:cf:5b:62:53:54:6d:a8:3c:06:e7:41:2b:84:
b1:d3:8a:31:d6:42:30:73:87:15:d1:b5:e5:fc:24:02:2e:8d:
d5:f4:75:cf:fe:56:4a:d4:b9:7b:0d:e3:76:21:f5:db:a1:df:
65:ca:c8:91:dc:b7:92:bc:3d:a7:9a:c0:09:9f:57:8b:41:1d:
a4:3d:35:8c:1a:98:f5:2b:ba:63:2a:cb:ee:55:8f:4a:aa:f0:
49:fc:aa:e9:0e:a4:89:f8:55:9a:61:f8:d1:12:d4:98:8a:aa:
6c:5a:8c:1f:e4:38:dd:8b:54:22:25:76:7c:0d:ea:c1:2c:df:
ba:34:be:c7:1b:fc:5b:c1:f4:ed:05:68:95:0d:ef:94:ac:85:
6a:af:03:eb:50:ac:a5:32:8d:58:d2:f4:58:5f:35:f8:8f:3d:
27:94:79:c7:4d:cd:7d:38:38:86:3c:92:ef:f5:48:a9:98:15:
16:58:53:ab:b2:ac:b9:66:1a:ff:6c:f9:a0:2a:c3:e3:1a:26:
53:37:c1:b4:b7:1d:b5:d3:59:a0:88:38:6b:93:a4:fa:45:fb:
71:01:93:a6:36:9f:a2:ba:a1:94:4e:99:5d:e4:f2:b8:f8:c2:
f6:2a:3e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:49 2025 by rpki-client