Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/J_zd8UrIm_Uz8mdSugWdsM2I34U.roa
File: J_zd8UrIm_Uz8mdSugWdsM2I34U.roa (raw, json)
Hash identifier: DmApfzHIzracQ3aqJ2OEoC+MnG6NcMypZXASw6tKVVE=
Subject key identifier: 27:FC:DD:F1:4A:C8:9B:F5:33:F2:67:52:BA:05:9D:B0:CD:88:DF:85
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FBE
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/J_zd8UrIm_Uz8mdSugWdsM2I34U.roa
Signing time: Fri 01 Sep 2023 08:57:26 +0000
ROA not before: Fri 01 Sep 2023 08:57:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 54994
IP address blocks: 61.221.181.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4030 (0xfbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:26 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=27FCDDF14AC89BF533F26752BA059DB0CD88DF85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:1c:fe:5a:35:92:c6:32:dc:9e:84:1d:cf:
c2:26:66:20:3f:ff:10:fd:41:55:e9:e0:68:fe:52:
7c:d4:3c:02:f3:7b:ec:0a:5a:3c:ab:24:af:a8:ef:
62:e1:fb:59:e8:20:12:c2:05:a4:07:62:c5:d5:49:
4a:9e:d5:a9:6c:14:bd:b2:b4:c4:03:1f:2f:2b:3e:
cb:22:0b:db:42:d2:6c:94:6b:a7:f3:a6:42:7a:cb:
82:1c:f9:8b:a7:be:27:86:56:7c:76:4c:5d:45:fe:
56:23:62:43:be:21:3d:7e:c2:51:23:bb:73:ea:35:
93:b7:d5:78:78:37:de:69:eb:05:64:1d:86:9b:70:
99:47:b7:1c:5a:82:0c:0a:01:8c:91:f7:34:de:1b:
8a:d8:7a:3e:bc:08:0f:5b:aa:c1:3d:4b:f0:9e:39:
5b:19:fc:64:45:ae:21:62:7b:4c:a8:1f:c1:fa:44:
fc:12:d0:a0:52:1c:b8:4d:0b:07:0e:28:d6:5e:9f:
12:df:ac:f2:4a:52:f8:bd:51:9c:0d:ee:dc:fb:0f:
ae:ca:e7:65:00:09:c9:2e:82:45:f4:80:6b:51:a7:
95:0d:9e:67:9b:3e:27:0f:7e:1f:b5:0b:38:f5:84:
25:ad:61:8d:98:27:1b:d8:b7:1e:40:82:eb:3f:da:
ff:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FC:DD:F1:4A:C8:9B:F5:33:F2:67:52:BA:05:9D:B0:CD:88:DF:85
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/J_zd8UrIm_Uz8mdSugWdsM2I34U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.221.181.0/26
Signature Algorithm: sha256WithRSAEncryption
82:82:a4:4b:bc:fe:44:04:2d:74:3a:f8:19:fc:b1:89:69:08:
94:94:94:e4:79:75:7a:1c:82:76:fd:98:29:a0:d5:9c:d3:8b:
69:84:4d:ad:29:c4:59:71:b9:f7:59:ac:21:67:01:e0:8d:d0:
71:82:98:61:79:82:f1:41:39:71:a4:e7:6a:24:7e:bb:43:0a:
12:9b:e4:8d:38:eb:61:78:f9:08:d3:1b:c7:f3:6b:a2:70:67:
91:53:a5:18:1b:97:8f:85:be:49:53:27:5c:8a:da:71:ca:4e:
4f:ea:4f:f8:2b:cd:b1:48:ed:07:76:b7:d6:c6:fa:d7:7a:cd:
42:3e:34:88:10:98:ca:64:ee:93:09:d4:47:63:59:51:d7:19:
2e:b5:6a:ad:8c:70:c9:9f:a0:4a:48:39:af:0a:15:aa:72:a2:
b0:74:69:7a:dc:9a:8a:da:0c:2b:f6:82:f4:c4:ea:47:45:c0:
2e:cc:7c:b1:e9:3a:10:88:cc:5b:eb:e5:1a:4e:76:a5:8a:fb:
e6:85:37:f4:c0:9a:9b:04:41:bd:07:f2:fd:ea:54:6f:fd:97:
3c:1b:ed:ad:68:c2:9f:99:da:28:a7:80:fd:60:5a:d9:92:1a:
5d:de:42:99:eb:64:6e:ba:ce:6d:58:d1:07:34:be:b6:5b:f1:
ec:02:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:44 2025 by rpki-client