Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/L99Sb3KAleEnJIpl1QQ2rSxLKig.roa
File: L99Sb3KAleEnJIpl1QQ2rSxLKig.roa (raw, json)
Hash identifier: QFtw11ggrlN3W+3ZeU5jo9LMMeiJBFFkP2sATvc54Po=
Subject key identifier: 2F:DF:52:6F:72:80:95:E1:27:24:8A:65:D5:04:36:AD:2C:4B:2A:28
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 083F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/L99Sb3KAleEnJIpl1QQ2rSxLKig.roa
Signing time: Tue 29 Sep 2020 09:58:30 +0000
ROA not before: Tue 29 Sep 2020 09:58:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 54994
IP address blocks: 203.74.117.128/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2111 (0x83f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:30 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2FDF526F728095E127248A65D50436AD2C4B2A28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:f0:c6:a8:a9:5b:05:71:39:8c:66:53:4d:
a9:83:11:1f:72:34:08:f5:5d:29:fb:72:06:94:50:
56:31:60:7a:7c:80:00:3b:8f:b7:81:db:23:47:bd:
07:4f:98:30:9d:89:19:ab:58:93:2b:37:ab:0e:7b:
14:e2:90:f2:e2:75:d3:80:da:ed:5c:5d:b8:dc:9d:
7c:83:de:05:85:4c:a6:4a:dd:9c:d1:d9:fe:1b:4d:
61:2b:67:6e:46:8b:70:99:4e:5b:0a:97:ca:8d:40:
5a:cd:11:e5:48:3d:a8:90:8f:69:9d:d2:f1:18:0c:
fb:2b:93:ea:31:be:22:e7:b2:8c:03:7c:c1:d8:b8:
cb:00:76:8d:df:b0:77:2e:9e:f8:05:3f:fe:7c:48:
20:ad:0b:c9:ab:ce:ca:05:7a:95:7d:bb:7a:76:47:
2a:37:ec:a9:be:fd:3b:f1:78:9a:d5:7f:b4:14:7e:
41:42:12:da:00:f8:4d:bf:96:83:10:79:13:aa:f9:
c1:14:1a:67:10:4d:90:6e:ea:9a:2d:97:01:f6:4e:
3b:00:63:dc:34:ea:ae:0e:bf:72:52:d3:33:ed:c1:
f6:9d:bb:11:3a:01:17:e3:a2:3d:d3:dc:47:18:e4:
27:02:55:0d:3c:26:94:89:7c:7c:05:93:fd:01:2e:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DF:52:6F:72:80:95:E1:27:24:8A:65:D5:04:36:AD:2C:4B:2A:28
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/L99Sb3KAleEnJIpl1QQ2rSxLKig.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.117.128/27
Signature Algorithm: sha256WithRSAEncryption
4e:9a:bb:8c:0c:61:3a:a8:c4:66:c4:00:43:44:9b:c2:43:82:
85:75:08:7c:db:0d:12:1f:a3:cd:1f:6c:51:a8:a3:05:af:de:
9a:9e:26:99:08:c0:8e:4e:f8:b0:52:16:99:dd:00:18:d4:c8:
c8:7f:6e:50:af:99:ca:97:42:24:eb:c0:62:ad:d5:dd:b1:d2:
b3:f5:43:45:52:88:8f:53:8f:46:23:f1:57:91:20:62:93:cb:
6c:89:81:6c:18:95:04:1a:16:9b:70:79:2f:29:11:76:33:fa:
49:f2:92:b0:41:f5:e2:1b:0d:2b:71:c6:d6:15:c5:25:7a:5a:
68:63:49:07:11:c7:e1:5f:8c:27:dc:98:35:93:6d:3c:bb:97:
ff:06:a7:52:04:b1:b0:94:b7:8f:f4:67:cd:78:53:d8:2a:a2:
e1:ad:b6:2e:ba:7b:0a:6b:05:1f:e3:78:09:e8:78:42:85:40:
51:5f:47:df:75:5b:21:a2:d5:09:ee:0c:8d:8c:91:67:19:2e:
1b:f7:a5:ea:d2:d7:41:d8:5d:5b:48:5e:98:0b:72:d6:a4:54:
b1:fa:5b:b0:f5:bd:ab:0d:f1:9c:27:3a:dc:3c:9b:f5:47:5c:
9b:c6:cc:24:4e:7a:0a:2b:3d:30:52:07:87:89:43:ef:41:8a:
0e:49:85:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org