Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/PL9sx0IYllrqlkZwuD2ziw-PcWA.roa
File: PL9sx0IYllrqlkZwuD2ziw-PcWA.roa (raw, json)
Hash identifier: zNaxbTRCSN6S4nDgQvsZrO3kV9wHHm0igkCyvrd+l+s=
Subject key identifier: 3C:BF:6C:C7:42:18:96:5A:EA:96:46:70:B8:3D:B3:8B:0F:8F:71:60
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/PL9sx0IYllrqlkZwuD2ziw-PcWA.roa
Signing time: Thu 15 Sep 2022 02:48:20 +0000
ROA not before: Thu 15 Sep 2022 02:48:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 33717
IP address blocks: 220.128.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3CBF6CC74218965AEA964670B83DB38B0F8F7160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:51:dc:1a:bb:38:03:92:0e:18:58:01:21:
f6:05:df:51:b1:4e:5a:0d:0b:2b:09:2c:8d:d8:0c:
9f:f0:6f:8b:fd:68:e8:e1:96:5e:64:26:da:0a:01:
eb:8b:1a:48:e7:a9:63:ce:28:fb:39:72:4e:72:c4:
a8:4c:e1:eb:12:66:7a:ed:1b:f6:94:df:1d:f4:c1:
99:bb:bf:ac:9e:d1:84:29:35:34:ab:61:40:d1:d0:
f2:66:93:ec:4e:f2:c0:18:14:cd:34:dc:6e:21:33:
c9:9f:67:66:39:fb:bb:e6:d3:cb:dd:79:35:82:f6:
02:9c:9f:21:1e:b6:ce:dd:0f:1c:f2:e4:b9:3b:61:
34:2e:f1:bf:7d:8c:35:5e:4c:4e:c9:9c:c1:af:fa:
3f:a0:77:e3:6c:75:3b:87:b4:4d:48:7d:a4:b3:a2:
c0:23:d1:0e:80:01:c0:62:31:e5:c3:bd:d6:f8:a0:
3a:53:c1:64:18:bf:45:4e:af:21:70:c0:30:48:54:
eb:4e:4a:73:bd:8b:90:90:c2:30:e7:b7:0a:9b:9d:
86:05:46:45:8f:b0:06:3a:8f:63:65:f1:18:47:d1:
f7:50:bc:bb:06:7f:9f:84:ce:41:17:d1:79:a8:02:
a8:99:7a:b2:91:fe:ea:88:29:05:11:b0:1b:d7:13:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BF:6C:C7:42:18:96:5A:EA:96:46:70:B8:3D:B3:8B:0F:8F:71:60
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/PL9sx0IYllrqlkZwuD2ziw-PcWA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.51.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:1d:21:35:d3:62:10:36:65:76:c3:e7:f3:b3:a4:f3:64:b3:
ae:61:44:b9:88:fd:39:8d:de:13:e5:ad:87:81:39:cf:e5:c2:
a9:6d:14:99:aa:4e:9b:ff:2c:7f:f8:28:77:4a:08:96:10:82:
93:4e:72:31:0f:57:ba:cf:3b:d0:16:a6:4e:03:54:6c:d6:b2:
51:fa:db:d4:0c:2b:f8:46:af:88:f4:40:7b:f6:6b:b6:9c:42:
9f:92:7f:99:40:7e:2c:7e:ef:3d:d2:e3:98:96:27:e5:b6:e1:
70:cc:6f:a2:ad:ee:ce:6c:94:be:5a:ac:a1:bf:66:5b:ae:da:
bd:93:60:64:63:fa:a1:1c:93:90:34:a2:23:d8:ea:4b:0e:cb:
2d:81:66:b5:fc:28:8a:9d:a5:5e:ea:7c:ad:df:d2:27:e4:d1:
72:cc:8f:13:62:ad:44:19:30:11:39:3a:05:4b:5b:53:6e:1d:
73:45:18:71:01:e4:72:6a:07:de:82:a7:6a:ed:e5:ed:5a:fb:
ae:67:eb:91:46:db:19:14:d8:64:19:c0:89:f3:d1:39:20:63:
86:41:e1:08:88:79:01:2d:2e:d7:86:46:96:7f:07:cf:3d:95:
cb:13:9e:7b:2d:27:e2:52:7b:42:7d:02:7e:c1:bb:cb:4a:12:
c5:b9:db:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org