Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/PFs48e4CeBgMJU5j5ox_JAZidtk.roa
File: PFs48e4CeBgMJU5j5ox_JAZidtk.roa (raw, json)
Hash identifier: ruKxcBr6GIWBbbntW4FDtaE99lQ1G7NwHmHQl5OyOa0=
Subject key identifier: 3C:5B:38:F1:EE:02:78:18:0C:25:4E:63:E6:8C:7F:24:06:62:76:D9
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 080E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/PFs48e4CeBgMJU5j5ox_JAZidtk.roa
Signing time: Tue 29 Sep 2020 09:58:17 +0000
ROA not before: Tue 29 Sep 2020 09:58:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 54994
IP address blocks: 202.39.156.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2062 (0x80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:17 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3C5B38F1EE0278180C254E63E68C7F24066276D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:9f:ff:79:f2:15:53:87:39:7e:d3:c1:13:
b6:49:ec:22:b1:d6:55:d2:21:01:13:64:84:7f:ca:
d4:dd:8a:c5:1f:79:20:25:2d:28:49:57:1a:b9:11:
33:8f:52:aa:84:54:70:7d:04:5f:f6:7b:c3:34:3e:
c7:23:59:42:e6:f5:10:99:4b:e2:82:78:49:8f:c7:
1b:1c:29:dd:85:6f:fd:65:8a:cf:7f:89:dc:65:17:
8a:98:ca:e1:6b:eb:82:45:f5:e9:66:56:a6:ee:66:
ec:ec:a6:45:70:19:2a:b1:4c:2a:22:e1:f6:69:e5:
b4:77:48:6a:cd:54:02:40:b9:45:f4:eb:7d:8c:56:
03:c8:d4:2b:7a:56:3b:d5:36:87:40:ef:3a:b1:a3:
04:b9:6e:06:4d:9f:45:c6:89:72:48:f5:7b:a4:e6:
66:44:d5:3e:b2:d6:cb:25:a6:59:c7:70:d7:b3:b1:
05:e6:48:24:23:d2:d0:68:6b:f0:9c:1e:3f:98:fb:
9f:90:06:8c:58:a9:78:50:69:db:c8:58:f8:8b:9c:
da:76:4f:a4:cf:e6:e8:4d:b1:fc:65:72:3b:b6:a0:
39:6f:1b:33:f6:30:07:25:9f:20:ab:40:0a:d9:f7:
91:40:4f:39:a9:46:ea:88:2d:46:48:4f:4f:30:3f:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5B:38:F1:EE:02:78:18:0C:25:4E:63:E6:8C:7F:24:06:62:76:D9
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/PFs48e4CeBgMJU5j5ox_JAZidtk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.156.0/26
Signature Algorithm: sha256WithRSAEncryption
c8:66:d6:37:94:1c:48:f3:52:57:23:59:63:af:f4:35:d6:2c:
f1:ff:4c:c4:8c:c5:b0:b6:d0:6b:f8:58:74:5a:d5:66:df:26:
5f:b3:d6:b9:3d:4f:48:15:78:8a:08:8c:63:9e:eb:4b:f4:41:
77:f3:09:d2:2e:19:bf:14:f0:f3:68:89:7a:ca:31:67:54:35:
ad:b9:02:4b:e7:7c:29:7e:06:b1:ec:34:dd:f4:68:13:2c:41:
83:1b:74:88:9d:4e:47:af:1b:39:be:2d:a5:f4:b3:8c:b1:73:
50:5f:d4:8d:aa:e5:f7:7c:49:93:62:35:83:aa:59:d2:6d:c1:
3c:2e:d7:3b:02:3c:35:f4:2c:28:90:e9:75:54:92:92:77:b5:
d4:1d:fc:a9:a7:79:7c:6c:55:18:8b:a7:a4:e8:e3:6f:85:72:
ae:35:20:32:83:c2:94:26:60:db:ad:4e:b3:d9:8d:4a:d2:6b:
90:79:9c:e1:3d:6e:3d:e5:08:9b:4c:80:f7:ff:33:7d:42:e6:
5d:b4:1a:16:44:7c:7f:9c:d4:4d:4c:71:50:e8:5c:b1:60:74:
6d:b9:cf:84:2d:88:56:37:b8:55:28:4b:b1:a8:99:10:9a:e6:
5a:fe:8e:68:30:19:03:87:64:6b:d2:7a:4c:0a:8b:37:a0:82:
da:52:4d:b0
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICCA4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMDA5Mjkw
OTU4MTdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNDNUIzOEYxRUUwMjc4
MTgwQzI1NEU2M0U2OEM3RjI0MDY2Mjc2RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSQp//efIVU4c5ftPBE7ZJ7CKx1lXSIQETZIR/ytTdisUfeSAl
LShJVxq5ETOPUqqEVHB9BF/2e8M0PscjWULm9RCZS+KCeEmPxxscKd2Fb/1lis9/
idxlF4qYyuFr64JF9elmVqbuZuzspkVwGSqxTCoi4fZp5bR3SGrNVAJAuUX0632M
VgPI1Ct6VjvVNodA7zqxowS5bgZNn0XGiXJI9Xuk5mZE1T6y1sslplnHcNezsQXm
SCQj0tBoa/CcHj+Y+5+QBoxYqXhQadvIWPiLnNp2T6TP5uhNsfxlcju2oDlvGzP2
MAclnyCrQArZ95FATzmpRuqILUZIT08wPwe9AgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUPFs48e4CeBgMJU5j5ox/JAZidtkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9QRnM0OGU0Q2VCZ01KVTVqNW94
X0pBWmlkdGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGyiec
ADANBgkqhkiG9w0BAQsFAAOCAQEAyGbWN5QcSPNSVyNZY6/0NdYs8f9MxIzFsLbQ
a/hYdFrVZt8mX7PWuT1PSBV4igiMY57rS/RBd/MJ0i4ZvxTw82iJesoxZ1Q1rbkC
S+d8KX4Gsew03fRoEyxBgxt0iJ1OR68bOb4tpfSzjLFzUF/Ujarl93xJk2I1g6pZ
0m3BPC7XOwI8NfQsKJDpdVSSkne11B38qad5fGxVGIunpOjjb4VyrjUgMoPClCZg
261Os9mNStJrkHmc4T1uPeUIm0yA9/8zfULmXbQaFkR8f5zUTUxxUOhcsWB0bbnP
hC2IVje4VShLsaiZEJrmWv6OaDAZA4dka9J6TAqLN6CC2lJNsA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org