Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/GiPCgsINUnV3i87Lzo4qsRAWeZ8.roa
File: GiPCgsINUnV3i87Lzo4qsRAWeZ8.roa (raw, json)
Hash identifier: B3P02WI4c2T8lx7HLcQabUKDQ9g6GRMkEdMt4Ay5BGw=
Subject key identifier: 1A:23:C2:82:C2:0D:52:75:77:8B:CE:CB:CE:8E:2A:B1:10:16:79:9F
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0866
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GiPCgsINUnV3i87Lzo4qsRAWeZ8.roa
Signing time: Tue 29 Sep 2020 09:58:42 +0000
ROA not before: Tue 29 Sep 2020 09:58:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17714
IP address blocks: 203.160.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2150 (0x866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1A23C282C20D5275778BCECBCE8E2AB11016799F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:76:47:15:ff:d2:91:48:e1:58:e0:fd:7b:
4e:6f:fc:35:f5:bd:a7:a0:43:62:4e:84:23:26:33:
92:e2:ef:17:fc:53:7e:ec:8b:38:98:07:5c:9f:f4:
ba:18:a8:d3:7c:89:7a:7c:1c:ef:4b:11:93:f4:f8:
d3:0a:47:cc:bb:1e:1c:4c:c2:b5:fd:f3:ea:79:19:
64:a2:b1:2a:92:36:cc:ef:b7:5a:ac:79:0c:9c:26:
45:4a:47:39:a6:e5:fb:2f:75:22:63:e3:e7:de:db:
bb:45:9e:64:eb:17:fe:76:86:66:34:c4:62:d5:9d:
7d:33:29:11:2f:78:8c:7b:3f:47:b9:f9:ae:83:71:
c8:34:c1:ca:21:9b:cb:ee:b8:72:92:39:89:67:30:
a5:a4:6e:6a:cb:57:40:f4:cc:fb:ba:09:b5:4b:b4:
97:d7:8b:d8:95:a5:93:da:31:87:90:d9:db:f7:ef:
44:9e:08:fb:3c:4a:1f:2c:64:04:2d:c2:50:c8:ca:
85:6d:ad:a8:3c:5c:6c:d6:80:38:68:d5:60:01:fa:
f4:83:a1:28:f0:31:c1:84:87:10:45:e1:35:d5:63:
4f:14:ad:21:a8:bd:31:ac:19:16:f1:4b:83:ff:da:
5a:b5:b7:2d:e7:6d:05:7d:67:1a:bd:96:52:a7:05:
bf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:23:C2:82:C2:0D:52:75:77:8B:CE:CB:CE:8E:2A:B1:10:16:79:9F
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GiPCgsINUnV3i87Lzo4qsRAWeZ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.160.237.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:35:d5:fe:e1:85:ee:fd:cb:e8:0c:b4:c4:f9:d1:b9:43:f8:
20:eb:af:de:c2:1c:45:df:49:67:b5:9e:1b:3b:05:ec:04:f6:
4c:da:ee:22:7c:84:21:3c:d1:29:40:cf:af:64:bf:0f:e0:ac:
06:bb:15:33:b4:2a:25:d7:ba:55:7b:ba:6e:1d:a4:d0:44:05:
23:7c:34:23:30:d2:38:c6:20:e3:64:f8:40:90:c3:27:52:5b:
b3:18:9d:3f:7c:05:30:54:c1:8d:3c:a7:47:50:c4:d7:27:55:
9a:2b:c5:f1:97:87:e6:e4:4d:23:68:84:60:85:2a:af:c2:60:
ad:47:83:7b:0e:11:ca:9d:bd:71:ec:1c:5e:55:9b:86:f9:8c:
b6:ad:52:2e:b7:51:fc:b8:10:f5:5a:87:f8:4f:55:3b:01:96:
21:f9:44:d6:5e:05:21:2b:0e:bf:39:fe:4f:71:f7:ec:f6:6d:
19:49:04:8f:3e:08:2d:e6:01:27:a9:3f:42:39:45:54:b0:01:
2a:b5:34:9c:de:d8:43:70:61:2d:ce:dc:8d:48:da:70:06:3b:
f9:b0:f8:d6:39:ea:29:0c:1d:03:2b:4e:d8:e9:01:55:5a:11:
43:03:1b:d1:81:5e:97:77:7d:54:1f:85:92:42:aa:c9:3a:51:
67:d3:87:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org