Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/IVKI24RjRRZmtLMyt3l8C640wHY.roa
File: IVKI24RjRRZmtLMyt3l8C640wHY.roa (raw, json)
Hash identifier: ZTH10+U6CKsTwrrwsC6x3IAqQiWJletKs9Cmupwr/Y8=
Subject key identifier: 21:52:88:DB:84:63:45:16:66:B4:B3:32:B7:79:7C:0B:AE:34:C0:76
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C4F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IVKI24RjRRZmtLMyt3l8C640wHY.roa
Signing time: Wed 29 Sep 2021 02:51:07 +0000
ROA not before: Wed 29 Sep 2021 02:51:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9505
IP address blocks: 203.78.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3151 (0xc4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=215288DB8463451666B4B332B7797C0BAE34C076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:f4:57:c0:c1:ed:30:02:dc:45:07:79:cb:
b3:88:84:e3:a4:86:0b:e9:62:60:a6:de:aa:6c:59:
fa:ec:64:b2:19:b1:63:30:21:95:80:85:8c:af:21:
bd:9d:85:86:dd:29:2d:b4:3c:1a:e0:b8:bf:ea:44:
1e:f8:95:27:28:2b:e0:91:ba:5c:1d:2e:cc:43:44:
41:f8:9d:90:82:27:f9:e2:09:9e:1e:53:03:34:60:
de:6d:96:c6:1a:ab:bc:8f:76:95:ba:3b:20:d3:b9:
78:24:b8:10:33:c5:a3:8c:bc:de:fb:38:43:f5:68:
ba:d5:ab:11:76:5b:6e:df:e9:d0:c4:f7:bf:b6:95:
fd:e0:d8:1e:c8:c2:12:8a:ac:a7:67:24:26:b4:f7:
a8:f2:d8:97:fa:7a:d6:1d:80:14:49:31:28:d2:40:
24:5e:91:7c:92:13:ca:51:92:bc:25:79:1b:91:66:
82:f4:dd:9a:97:4d:04:c5:63:eb:fd:15:76:c9:6a:
96:cd:3e:63:e6:3b:1b:9e:bc:1e:2c:8b:51:ff:23:
94:28:4a:37:f4:ec:a0:55:71:bc:08:25:a9:97:e4:
cf:9e:79:a4:44:87:67:26:e2:06:64:4f:35:af:d8:
24:90:6d:66:e2:c3:1b:7a:02:03:ea:83:74:da:5c:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:52:88:DB:84:63:45:16:66:B4:B3:32:B7:79:7C:0B:AE:34:C0:76
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IVKI24RjRRZmtLMyt3l8C640wHY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.78.176.0/20
Signature Algorithm: sha256WithRSAEncryption
bd:04:8f:7b:63:1a:d2:b7:b3:e1:bd:f9:30:38:a1:ef:0b:63:
aa:36:82:ef:0b:51:70:2b:9f:14:b9:40:18:84:c3:cd:87:91:
ad:63:38:39:15:ab:57:e0:df:11:4e:3f:d7:55:3d:f3:a8:0c:
b8:44:5f:f1:8b:8b:cb:c9:50:c5:85:58:87:bb:3b:e0:cf:24:
b3:8a:9b:80:4e:25:3a:76:61:d3:1f:3e:b7:73:61:55:50:28:
59:e6:fc:8a:d8:ff:88:8e:b9:25:62:64:6e:46:cc:0d:82:04:
ac:d0:03:49:1c:b8:1c:d8:2a:47:98:0f:bf:6a:0d:fc:b4:59:
e2:ae:4d:d1:e7:14:0e:59:fd:71:d8:b2:c4:ff:86:c5:39:b0:
36:6f:4e:af:9f:e9:04:a0:e6:e3:c6:28:8e:bc:e8:ea:80:46:
30:0e:cb:c3:23:2a:7d:52:4c:58:b8:55:d6:72:c7:1f:33:f5:
91:e0:27:da:a5:eb:1a:b8:9d:41:79:6f:b7:be:3b:78:5a:48:
44:52:f5:53:da:f6:b4:80:f3:97:46:60:90:84:5e:96:55:cf:
c2:7e:5a:d7:db:26:d5:8c:5d:4d:38:34:16:d5:23:7b:31:24:
29:af:f0:83:78:f9:e1:37:94:30:c5:eb:94:50:b4:8f:a7:57:
11:e0:47:f8
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDE8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTA5Mjkw
MjUxMDdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDIxNTI4OERCODQ2MzQ1
MTY2NkI0QjMzMkI3Nzk3QzBCQUUzNEMwNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQPfRXwMHtMALcRQd5y7OIhOOkhgvpYmCm3qpsWfrsZLIZsWMw
IZWAhYyvIb2dhYbdKS20PBrguL/qRB74lScoK+CRulwdLsxDREH4nZCCJ/niCZ4e
UwM0YN5tlsYaq7yPdpW6OyDTuXgkuBAzxaOMvN77OEP1aLrVqxF2W27f6dDE97+2
lf3g2B7IwhKKrKdnJCa096jy2Jf6etYdgBRJMSjSQCRekXySE8pRkrwleRuRZoL0
3ZqXTQTFY+v9FXbJapbNPmPmOxuevB4si1H/I5QoSjf07KBVcbwIJamX5M+eeaRE
h2cm4gZkTzWv2CSQbWbiwxt6AgPqg3TaXFi7AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUIVKI24RjRRZmtLMyt3l8C640wHYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9JVktJMjRSalJSWm10TE15dDNs
OEM2NDB3SFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEy06w
MA0GCSqGSIb3DQEBCwUAA4IBAQC9BI97YxrSt7PhvfkwOKHvC2OqNoLvC1FwK58U
uUAYhMPNh5GtYzg5FatX4N8RTj/XVT3zqAy4RF/xi4vLyVDFhViHuzvgzySzipuA
TiU6dmHTHz63c2FVUChZ5vyK2P+IjrklYmRuRswNggSs0ANJHLgc2CpHmA+/ag38
tFnirk3R5xQOWf1x2LLE/4bFObA2b06vn+kEoObjxiiOvOjqgEYwDsvDIyp9UkxY
uFXWcscfM/WR4CfapesauJ1BeW+3vjt4WkhEUvVT2va0gPOXRmCQhF6WVc/CflrX
2ybVjF1NODQW1SN7MSQpr/CDePnhN5QwxeuUULSPp1cR4Ef4
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org