Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/L1NtzuxSncU69Ql0ZOCCNyzgbr0.roa
File: L1NtzuxSncU69Ql0ZOCCNyzgbr0.roa (raw, json)
Hash identifier: TE99p8CBWB1sjaw8F0ZysCWryxuL7Loqq/T7MRYZu+4=
Subject key identifier: 2F:53:6D:CE:EC:52:9D:C5:3A:F5:09:74:64:E0:82:37:2C:E0:6E:BD
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0849
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/L1NtzuxSncU69Ql0ZOCCNyzgbr0.roa
Signing time: Tue 29 Sep 2020 09:58:34 +0000
ROA not before: Tue 29 Sep 2020 09:58:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 125.232.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2F536DCEEC529DC53AF5097464E082372CE06EBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:49:ef:e6:20:99:7b:4a:14:1d:b3:78:30:f0:
03:75:29:2f:94:60:88:db:ce:72:15:83:88:0d:80:
aa:d6:6d:d5:49:b7:05:90:be:26:d7:42:80:92:56:
98:02:ef:11:6e:6f:99:02:eb:03:eb:80:28:09:c0:
7e:af:0f:a5:27:c7:53:28:bb:fc:8d:15:8d:ba:bc:
a3:72:78:cb:aa:cb:dc:6c:87:6a:73:6c:af:fb:da:
25:47:15:c5:05:f9:7c:ce:b2:12:a5:9d:e3:c3:82:
ed:84:80:08:2b:ee:0c:cd:ab:25:70:6a:ea:9a:05:
cc:04:21:60:51:c0:9e:e9:b5:32:50:a3:bd:d9:43:
b8:bf:ec:4a:d4:e0:b9:7b:34:90:34:12:e0:90:c2:
28:1e:c5:ab:1b:11:4a:19:90:72:1b:ec:11:67:5e:
2c:3b:d6:ce:8d:9e:bc:11:34:68:fb:21:e7:6c:1d:
fa:c7:fc:03:22:81:98:25:02:a1:29:b7:af:87:f2:
e8:ae:b4:8e:5f:f0:9e:49:dd:ba:1e:42:b9:0d:3f:
9c:7b:53:29:be:62:ae:25:9c:0b:9f:16:81:fa:e9:
3d:79:ef:dd:27:b4:70:e2:5c:50:47:5e:c3:19:07:
44:b4:4f:7d:68:7a:c6:3b:01:ad:d1:b2:2f:d9:1c:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:53:6D:CE:EC:52:9D:C5:3A:F5:09:74:64:E0:82:37:2C:E0:6E:BD
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/L1NtzuxSncU69Ql0ZOCCNyzgbr0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.232.0.0/15
Signature Algorithm: sha256WithRSAEncryption
79:27:eb:9a:d9:50:dc:71:30:df:fe:93:da:43:1c:25:0b:46:
61:83:f3:bb:72:4e:d0:1e:78:ec:cf:2a:1d:f0:87:f1:04:1b:
9c:2a:63:f1:9c:bb:28:1e:54:dc:29:7e:7c:25:51:9f:ff:cf:
34:d9:07:c2:ae:4c:29:d5:17:4d:3d:f0:10:93:4f:d2:46:6d:
0f:3d:a7:79:c8:e7:b5:20:bb:72:67:54:79:b4:d7:30:1e:b3:
88:7a:ce:af:a7:8e:eb:93:3f:ef:be:38:df:76:27:16:04:85:
6f:24:f9:2f:96:fc:0c:93:0d:53:04:ac:c8:93:92:f0:b3:3c:
26:5a:98:98:8c:30:8d:a9:c4:5e:08:5a:8b:3f:ac:70:5f:d3:
09:f4:09:46:a3:14:93:ff:94:55:60:b8:09:17:04:a4:6c:0c:
78:bb:06:f7:9a:84:ac:a9:01:28:11:81:be:f3:0e:c5:aa:ce:
7c:ed:b2:68:86:a9:2f:e8:9a:c4:10:cd:fb:0b:52:ad:25:79:
ca:38:eb:65:ec:1f:14:be:b1:b3:86:c2:f4:86:ca:a1:e8:11:
37:3c:1e:d2:88:d9:cc:44:3b:b9:7b:db:72:ff:d8:e8:28:80:
46:85:2a:38:95:16:8e:13:c1:33:c7:37:0a:f1:ad:68:e3:da:
39:fc:a8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:35 2025 by rpki-client