Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/H2_6sKGlXVdbnuIwaJsYuBT-YS8.roa
File: H2_6sKGlXVdbnuIwaJsYuBT-YS8.roa (raw, json)
Hash identifier: DxSvkAGL0meEXjIXsJXisINnlDhFWRGnC4aJmSiJ9CA=
Subject key identifier: 1F:6F:FA:B0:A1:A5:5D:57:5B:9E:E2:30:68:9B:18:B8:14:FE:61:2F
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0AF3
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/H2_6sKGlXVdbnuIwaJsYuBT-YS8.roa
Signing time: Sun 07 Feb 2021 11:46:19 +0000
ROA not before: Sun 07 Feb 2021 11:46:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9505
IP address blocks: 175.41.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2803 (0xaf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:46:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1F6FFAB0A1A55D575B9EE230689B18B814FE612F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:35:63:69:1e:55:31:b9:2b:8b:38:58:2e:
6e:ca:f4:e5:98:6a:c3:58:86:be:a7:7e:a0:2c:5a:
9e:04:f2:69:49:4b:8d:0a:45:0c:4f:a9:e8:50:f1:
0b:d0:56:8b:f4:f9:88:72:4a:fd:f1:78:68:6b:36:
87:bb:8f:fa:fa:78:02:69:9b:84:95:ab:3a:e7:46:
85:06:e9:14:ec:50:6f:62:66:a6:4a:78:e7:db:34:
2a:c0:a1:a2:c8:77:e2:9f:23:fa:3e:80:86:b3:96:
46:d6:d3:30:ec:8b:a0:a7:42:50:44:5d:81:1f:d4:
f2:5c:07:3c:1b:70:c4:9f:4e:0b:24:f8:fc:17:b5:
10:b6:9b:69:a8:6e:a9:14:ea:c2:c5:17:6d:e6:28:
56:fc:8b:eb:d9:77:7a:0f:bc:29:18:c7:ce:a2:57:
5c:97:42:e1:fd:85:ca:7c:6f:ac:b9:3c:c1:29:b5:
d5:10:a0:d4:fe:fd:90:60:3a:17:6d:e0:bb:ad:75:
c4:b7:c3:6d:c8:77:eb:1d:35:3f:6c:a8:5f:6c:5a:
2b:31:32:27:4e:34:b5:09:b7:d1:dc:7b:8c:d9:15:
e4:4a:4a:2f:88:ee:f0:f8:b0:cc:17:13:0e:79:bb:
fd:e2:a4:2c:8b:a5:21:7a:fc:80:c8:65:13:0e:ff:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6F:FA:B0:A1:A5:5D:57:5B:9E:E2:30:68:9B:18:B8:14:FE:61:2F
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/H2_6sKGlXVdbnuIwaJsYuBT-YS8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.41.48.0/20
Signature Algorithm: sha256WithRSAEncryption
18:74:f7:8c:55:05:f5:88:22:8d:0c:39:f5:23:ef:cf:f7:2e:
80:96:f5:5b:87:28:16:d1:c2:d8:cd:7c:88:aa:4c:84:06:dd:
e1:07:57:df:e3:26:9d:a0:8d:43:35:cf:db:fe:08:b4:e9:e7:
62:b0:9a:d3:80:27:f6:d1:55:95:b9:6e:a2:13:11:67:75:33:
dd:b0:c1:c9:ab:bb:2e:09:d8:9c:88:f2:fc:b4:90:d0:69:3b:
e2:d7:95:ec:eb:7a:5a:06:63:fe:6f:4a:bc:39:6f:a1:d3:0b:
62:f5:bc:de:45:e3:8e:dc:54:09:3b:39:e0:ad:69:c5:9d:3c:
c9:d9:5f:ef:e9:f7:fb:f5:a4:06:61:f8:61:c0:c5:bf:77:66:
7c:60:41:a7:8f:77:77:f7:d7:04:dc:64:f0:d3:81:b5:e4:71:
bd:cc:ba:4e:5c:01:5b:25:da:d1:2c:f9:75:85:81:76:38:79:
6e:5a:d3:4b:31:7d:fa:7f:97:09:11:1a:ec:0a:c5:74:28:5e:
0d:9a:c9:e4:73:c5:c4:71:e2:c7:f2:9a:56:6e:50:17:c9:0e:
bf:47:ce:01:9e:96:43:9f:f0:5e:03:5b:89:65:c2:eb:13:78:
a5:1c:7a:08:d4:2e:85:e2:0f:52:46:f4:04:88:e2:d3:b2:6a:
97:19:3a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org