Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/FEIP5l49kDOAC2ub32ExWXapt88.roa
File: FEIP5l49kDOAC2ub32ExWXapt88.roa (raw, json)
Hash identifier: Vx0a5EN6VKciDNNRNRu5yESjkNTEoiOAdlOeAF8xUDA=
Subject key identifier: 14:42:0F:E6:5E:3D:90:33:80:0B:6B:9B:DF:61:31:59:76:A9:B7:CF
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0B2C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FEIP5l49kDOAC2ub32ExWXapt88.roa
Signing time: Sun 07 Feb 2021 12:57:49 +0000
ROA not before: Sun 07 Feb 2021 12:57:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7481
IP address blocks: 210.62.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2860 (0xb2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 12:57:49 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=14420FE65E3D9033800B6B9BDF61315976A9B7CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:05:56:15:94:6b:8e:1b:36:34:f2:fa:56:
d7:86:06:58:53:eb:df:1a:ad:9f:1f:2d:a3:3c:18:
5e:cf:68:a4:46:e1:ee:b9:47:0b:49:45:68:87:02:
f7:85:e2:d8:db:a1:ed:e4:f8:49:8b:aa:6b:09:6c:
ee:b5:b6:84:54:e7:6d:ef:a6:a9:44:94:8f:a8:90:
e4:3b:e1:a8:63:be:22:ec:58:99:d6:7e:bb:32:44:
56:d2:76:6e:02:9a:d7:b5:47:d3:51:8b:c1:ab:05:
91:41:5a:16:04:1e:87:0b:09:35:78:e5:15:15:98:
5a:ab:b4:08:74:96:db:a3:50:34:36:27:b7:5b:5d:
02:25:af:f2:4e:d1:b1:87:9f:0c:54:d0:9d:6f:65:
3f:e2:4a:9c:3b:58:c6:74:3e:ba:e4:52:85:5d:82:
d2:75:d4:eb:09:87:46:5d:3f:26:f9:af:2f:7f:8f:
3f:dc:7f:81:53:c0:ab:e9:30:ea:f5:80:0b:ce:64:
5f:e9:7e:1a:4c:86:c7:f9:85:a7:19:24:78:2c:9b:
2f:51:3a:26:49:26:39:91:95:cd:81:80:d7:92:f7:
22:79:80:0a:4c:09:a4:31:89:e8:1a:93:88:a0:d3:
5c:2e:3a:2e:6f:b3:8b:62:b4:2e:cd:1e:28:a4:b1:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:42:0F:E6:5E:3D:90:33:80:0B:6B:9B:DF:61:31:59:76:A9:B7:CF
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FEIP5l49kDOAC2ub32ExWXapt88.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.255.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d1:7d:92:0b:b5:8c:25:1a:b6:8f:98:5f:56:1c:80:fa:8f:
87:34:78:97:43:17:77:a7:4d:6c:59:46:46:73:1e:4f:5a:41:
c2:b1:f4:90:e4:31:83:eb:32:ae:0e:76:36:25:cf:9e:50:36:
b4:98:d3:cc:94:60:59:a7:b9:6a:ae:a9:99:49:7b:b9:ac:7a:
d8:9e:bc:9b:97:e9:03:c2:f5:98:e2:81:6e:0b:16:d9:be:bb:
9c:fe:44:a9:44:67:b7:59:ae:b7:f2:5d:ca:5f:05:0f:00:33:
10:40:70:e7:c0:36:3e:ac:aa:be:12:0f:51:9d:f4:1b:fe:8b:
fa:fd:ec:dc:d3:8c:5b:b0:d9:40:2c:96:49:ca:96:e7:29:59:
2c:58:5d:6f:24:2c:de:fd:43:51:7e:82:32:29:04:7d:e9:43:
b2:62:69:d2:9b:bd:41:10:1a:b9:1e:6c:0b:49:b9:3d:54:84:
55:96:71:12:70:f1:ea:97:d6:39:24:0b:e3:13:4e:3f:59:3d:
16:80:33:08:2e:e2:b0:b5:3b:13:6d:bd:35:e5:15:46:af:53:
09:e1:45:de:1a:57:31:cc:b4:34:a8:05:13:af:f9:9b:db:c7:
8c:f8:fd:8c:ef:82:7e:d1:b9:f4:6e:69:d5:98:16:c9:46:ed:
a9:45:f6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:54 2023 by rpki-client on console-ams.rpki-client.org