Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/L6xq2CfvarX2uOEwDxYXuniiGZY.roa
File: L6xq2CfvarX2uOEwDxYXuniiGZY.roa (raw, json)
Hash identifier: 7UI7ukHu8gIfJ4IpzRoYc2nFlRJxGChmUBUsN/2jbYE=
Subject key identifier: 2F:AC:6A:D8:27:EF:6A:B5:F6:B8:E1:30:0F:16:17:BA:78:A2:19:96
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0870
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/L6xq2CfvarX2uOEwDxYXuniiGZY.roa
Signing time: Tue 29 Sep 2020 09:58:44 +0000
ROA not before: Tue 29 Sep 2020 09:58:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 36040
IP address blocks: 202.39.67.128/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160 (0x870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:44 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2FAC6AD827EF6AB5F6B8E1300F1617BA78A21996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:8b:07:54:c4:0c:dd:7f:fa:30:c6:a9:cd:
4d:97:20:eb:22:86:d8:ca:41:86:6f:39:17:50:31:
46:9f:7d:49:ad:aa:49:a8:32:ad:f4:87:b5:fd:f2:
68:27:75:dc:0d:f9:ad:79:eb:4c:52:7b:9f:78:dd:
0a:51:65:ef:65:f0:e7:27:24:58:44:04:77:04:a3:
b2:f1:41:f9:39:75:34:27:c0:a2:55:ba:7f:ed:85:
e0:29:b2:de:66:ff:ab:09:fb:d9:d2:ee:c0:15:55:
39:c7:f8:79:e2:5f:18:c8:22:37:17:0b:ed:e4:58:
82:1d:15:e4:3b:ef:b2:c9:12:8e:b8:b0:f1:0e:43:
7a:2f:ca:cc:4d:83:fb:8b:13:7b:61:6b:8f:46:aa:
17:85:8a:e5:bd:a0:1d:47:00:b8:ba:d6:2b:21:1d:
f6:65:f1:fd:ae:bf:36:11:ad:82:6e:4c:5e:5c:d3:
06:8c:2d:c6:f8:02:4f:3a:a0:6f:de:80:8d:1b:ab:
37:0f:bc:3d:91:cb:c5:88:55:bd:24:1c:b1:c5:37:
24:04:df:ac:08:81:eb:43:f3:5a:68:df:f0:7a:e7:
fe:6b:0f:f2:94:60:3f:12:7b:84:51:27:55:68:00:
ff:f5:a3:c1:24:37:26:d7:de:52:ce:6a:4f:0e:07:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AC:6A:D8:27:EF:6A:B5:F6:B8:E1:30:0F:16:17:BA:78:A2:19:96
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/L6xq2CfvarX2uOEwDxYXuniiGZY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.67.128/27
Signature Algorithm: sha256WithRSAEncryption
95:46:27:a6:0a:3e:e8:d1:a6:d7:8e:c7:51:c3:76:a6:b0:fc:
73:67:1c:04:ec:1a:2c:75:41:18:cd:6b:55:86:18:95:7f:57:
8c:14:4e:ec:01:4b:ed:9f:32:5d:44:9b:c1:a9:3d:49:71:76:
35:45:e7:c8:91:e4:b5:27:1e:93:c3:08:5e:d3:16:01:4b:a5:
1c:27:ad:a7:5f:60:7e:59:18:90:47:16:b0:b3:49:f3:7b:a5:
d9:6a:c6:dc:32:4c:47:73:49:b9:92:57:16:1e:c9:24:51:96:
64:84:e9:bc:71:df:ff:89:c6:2c:39:00:6a:71:53:f6:3e:ee:
2f:77:c9:9c:d6:df:df:e3:f9:7b:73:b1:cc:e8:56:a2:d2:c5:
2c:a5:40:bf:60:cc:be:84:9f:e2:e2:1e:f8:e8:fd:04:31:b6:
0f:a1:76:db:e7:fa:82:a5:89:35:70:79:84:63:e1:a4:c6:55:
ed:be:78:a0:8f:57:e9:00:c7:2b:66:53:e1:8f:cb:d9:77:cb:
6c:48:ff:62:3b:32:fe:95:f3:04:d6:5a:29:fd:42:74:ac:40:
3c:07:d5:73:07:eb:88:d5:d7:d8:e7:4d:f7:db:c2:36:70:b5:
73:e5:67:99:c6:5b:9c:b7:94:60:8f:e0:f1:29:48:74:74:b5:
5f:a8:28:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org