Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/CLhvvX4pnAh07JBp8kkhdpAgOOw.roa
File: CLhvvX4pnAh07JBp8kkhdpAgOOw.roa (raw, json)
Hash identifier: JgCx0m1HwAopnSTyB7HUDAIDgrdS+8NVCgHlQZIGFrs=
Subject key identifier: 08:B8:6F:BD:7E:29:9C:08:74:EC:90:69:F2:49:21:76:90:20:38:EC
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C75
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/CLhvvX4pnAh07JBp8kkhdpAgOOw.roa
Signing time: Wed 29 Sep 2021 02:51:17 +0000
ROA not before: Wed 29 Sep 2021 02:51:17 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131661
IP address blocks: 210.62.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3189 (0xc75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:17 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=08B86FBD7E299C0874EC9069F2492176902038EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:78:a7:1d:6d:fa:64:b0:ac:29:8c:55:6a:
17:35:ca:2d:18:1d:e1:f9:50:ad:ec:e5:d9:ab:6f:
71:5c:58:4d:36:17:8c:2e:58:8b:ed:1b:a2:00:cf:
a6:12:6c:6e:47:95:50:54:cb:59:4c:9f:35:48:b7:
ae:85:7b:f4:df:fe:21:4b:8a:0d:c9:7c:5d:b2:75:
70:dd:09:cf:72:e3:1e:0c:5e:d3:7d:5c:10:de:8a:
f5:7d:ff:fd:b6:8f:02:69:28:62:c2:25:26:0b:c6:
8e:2e:8b:21:64:6f:89:c5:3d:dd:b3:ee:f1:d4:4a:
ef:4f:78:62:cf:0a:ef:71:36:81:00:99:ee:1b:fc:
63:73:76:9a:e9:74:a9:9a:fe:d0:7f:4b:88:51:75:
c6:ca:9a:2c:29:60:97:7a:67:25:3b:a7:c1:52:cf:
ad:9b:63:c3:14:93:04:4b:2e:10:8c:4f:5e:9b:61:
61:f7:0e:e3:b8:ba:79:80:07:28:34:04:36:45:b1:
2c:33:f5:47:bb:b8:c9:6f:33:c6:bf:68:dc:b6:b6:
03:4c:dc:7c:b5:09:84:9f:da:09:b5:09:d3:1d:79:
57:06:7f:8f:9d:1f:08:f1:84:2b:fa:8c:9b:2b:94:
d4:7c:85:15:f0:ab:de:4c:1d:88:ff:a9:de:7f:33:
6d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B8:6F:BD:7E:29:9C:08:74:EC:90:69:F2:49:21:76:90:20:38:EC
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/CLhvvX4pnAh07JBp8kkhdpAgOOw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.250.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:95:27:58:81:54:8e:ea:45:49:22:4b:cf:f4:f2:21:ec:23:
96:b6:ff:a1:27:cf:4e:68:68:c4:5e:a2:88:b2:51:d2:ee:74:
44:da:35:35:c8:1a:8b:8c:84:5c:2c:2d:fe:73:69:57:f0:e1:
cf:bf:f8:53:5f:89:3c:49:99:73:6d:9e:aa:a2:a0:63:a4:3c:
0f:d8:19:6f:72:c4:e9:24:5d:86:9e:24:01:ba:e9:f0:6f:c5:
c2:b1:cf:6c:ca:42:51:42:2e:e4:09:a7:e2:71:0c:51:cd:20:
ce:ac:c8:8f:ca:e8:bd:62:cc:3c:28:5a:18:99:52:e9:7f:0e:
a9:c5:80:dd:1d:c6:26:32:51:36:0c:31:4a:7e:b2:2e:a3:68:
91:f3:71:d7:05:9e:fe:fc:93:bc:0d:29:0d:06:b9:5f:ce:9e:
48:f7:ea:a7:a8:e2:86:b6:67:28:26:06:f3:b7:52:d8:ca:0a:
ea:49:bf:bd:8a:18:69:09:4d:b9:32:7b:97:e7:82:c8:02:26:
5a:2d:0c:e7:e7:63:65:51:fb:f7:42:8c:8f:2f:79:4c:c5:09:
f0:0a:e9:f1:e9:5b:1b:9b:94:f2:2f:d3:e9:6b:7b:70:99:34:
7f:e2:a4:e9:44:00:da:22:9c:e2:6c:d4:f2:30:0b:54:be:f4:
bd:d6:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org