Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Mpgdj1E5YkvYxsH-GhSt_AXV2nM.roa
File: Mpgdj1E5YkvYxsH-GhSt_AXV2nM.roa (raw, json)
Hash identifier: NUUwH8Zrv7lEjF8IcmBTU6klvbALkMxx6GGxNbe8eps=
Subject key identifier: 32:98:1D:8F:51:39:62:4B:D8:C6:C1:FE:1A:14:AD:FC:05:D5:DA:73
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0A9B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Mpgdj1E5YkvYxsH-GhSt_AXV2nM.roa
Signing time: Sun 07 Feb 2021 11:38:26 +0000
ROA not before: Sun 07 Feb 2021 11:38:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 210.62.248.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2715 (0xa9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:38:26 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=32981D8F5139624BD8C6C1FE1A14ADFC05D5DA73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3a:e8:ac:51:b5:0d:92:b6:59:77:ae:c8:4d:
c0:a9:01:23:1e:c9:62:49:f4:c8:2c:ae:db:4a:dd:
b2:fe:43:50:34:ae:51:ca:8a:97:63:20:a5:52:08:
85:0c:a9:57:d9:48:48:87:b2:a7:06:78:76:88:de:
7e:35:12:65:88:44:98:fb:16:ac:5a:b7:e4:86:49:
2c:09:29:bb:cd:bc:01:4e:f4:0b:cf:52:f3:99:3b:
df:1e:8e:2d:d1:09:41:52:21:a6:f8:ba:ec:52:6d:
9a:0f:c6:5f:d0:54:8e:f9:69:d8:48:ab:a5:fe:57:
5f:92:5a:64:fe:80:72:a3:70:73:9c:e2:fd:44:ea:
ca:4d:e0:d6:2f:e4:bb:44:42:df:13:e3:a9:1f:84:
a9:94:70:f0:3a:f0:b6:cd:a1:7a:67:bb:4d:14:49:
fd:df:9a:84:8e:4a:83:9b:06:28:d3:1f:59:84:86:
37:41:a7:cc:e5:95:70:02:2e:52:cb:b1:66:da:34:
9e:bf:94:03:62:53:96:94:6c:0c:ad:e2:fa:ea:5e:
8d:7c:f6:50:4f:d9:88:b3:90:e5:b0:c6:f4:d0:70:
a0:f0:63:1d:f7:fa:d5:a2:9e:8c:e0:86:8f:e2:94:
19:90:4f:10:a3:54:08:46:4a:fb:4b:74:bd:5c:6d:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:98:1D:8F:51:39:62:4B:D8:C6:C1:FE:1A:14:AD:FC:05:D5:DA:73
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Mpgdj1E5YkvYxsH-GhSt_AXV2nM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.248.0/21
Signature Algorithm: sha256WithRSAEncryption
cf:d6:89:5f:88:10:2f:cd:1d:2e:e8:2b:14:6d:51:49:4e:3b:
5b:17:30:1b:15:cd:56:51:fb:2a:62:f3:74:92:3a:d3:57:9c:
59:51:82:7b:c6:41:8d:4b:19:89:f9:fb:af:e3:b8:33:53:2b:
09:77:59:85:1e:83:a4:4e:ef:f5:cf:bf:24:29:86:23:02:bc:
a9:99:a5:60:70:03:2d:22:ff:c5:10:34:9c:3d:8f:9e:57:19:
76:f4:2a:98:e1:07:a2:c4:e2:ef:3c:6b:fa:91:4e:bd:d2:e3:
23:3a:13:99:6e:b4:d9:5a:70:30:19:f5:1c:6b:cb:93:8d:8d:
45:9f:c5:69:7e:e8:a6:9b:b4:f6:19:fe:25:d9:59:4b:41:f8:
8f:9a:e1:c8:9e:31:0c:4c:10:7a:89:48:e0:3d:1f:cc:88:75:
c2:15:d9:82:0a:c8:c3:48:f0:b2:e0:cd:c9:9b:76:3c:28:4b:
05:cd:c3:03:c3:fc:b1:8b:81:9d:d9:90:74:3b:ec:2c:0e:5b:
3b:83:c6:19:b6:89:a0:80:39:3d:3d:b2:9e:6a:6e:3f:a0:6b:
bb:93:0c:1d:85:57:6d:a1:f1:3b:ab:0d:71:d7:f2:89:49:b0:
96:06:4d:25:77:38:88:6f:2b:18:91:61:8b:85:e4:12:d4:0e:
39:48:bb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:34 2025 by rpki-client