Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/UH3IzVF5a2c1tILALPLWQvaoXSU.roa
File: UH3IzVF5a2c1tILALPLWQvaoXSU.roa (raw, json)
Hash identifier: ZjqTi0Ly3g1dLOYztAN6ZbLlIJEMbd9c8ZBqjtwAzlc=
Subject key identifier: 50:7D:C8:CD:51:79:6B:67:35:B4:82:C0:2C:F2:D6:42:F6:A8:5D:25
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0809
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/UH3IzVF5a2c1tILALPLWQvaoXSU.roa
Signing time: Tue 29 Sep 2020 09:58:15 +0000
ROA not before: Tue 29 Sep 2020 09:58:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9505
IP address blocks: 203.78.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2057 (0x809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:15 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=507DC8CD51796B6735B482C02CF2D642F6A85D25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:48:15:05:42:50:88:ee:2e:8a:84:f2:a3:
ab:bf:fc:19:40:c7:9a:69:de:ec:cf:67:d2:62:f3:
20:48:66:a1:50:b2:4e:45:3d:9b:5a:06:72:19:17:
49:1d:ab:ea:bf:c3:b5:64:62:3a:da:fd:9f:3a:0c:
3f:52:09:7b:78:8a:ea:54:bc:1f:7f:85:2e:1b:6d:
9a:a6:56:f5:7e:72:f9:d0:75:a3:73:08:7f:d6:e5:
22:7d:a0:8d:39:ba:ae:d7:0f:fe:78:08:dd:46:73:
db:3d:4c:28:8d:f3:1f:9c:cb:28:97:dc:4f:c5:88:
cf:d9:3a:e2:e5:dc:21:6d:e2:66:b8:41:9d:98:47:
e0:f8:d6:88:4a:06:e4:84:c0:6c:76:db:73:29:fb:
82:2e:32:84:61:a8:50:92:4d:29:14:f5:39:31:11:
0b:5d:c3:cd:07:39:de:ca:9b:a3:54:1b:dd:65:ff:
a2:f3:6a:e5:0d:7a:92:01:fb:fb:8a:87:12:32:ca:
a8:42:6c:86:e1:ef:8d:80:55:3f:83:5f:24:a9:14:
56:fd:73:61:12:86:fb:d1:d3:8e:42:4b:0e:eb:f5:
8a:d2:bf:e7:3a:40:bf:ce:24:32:6f:a0:54:bf:df:
65:ca:80:51:1b:60:15:a4:68:78:46:07:99:ae:d2:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7D:C8:CD:51:79:6B:67:35:B4:82:C0:2C:F2:D6:42:F6:A8:5D:25
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/UH3IzVF5a2c1tILALPLWQvaoXSU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.78.176.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:89:4d:26:ba:fa:93:f3:49:01:b2:e9:96:64:54:e2:b0:d5:
46:b3:82:91:12:c5:67:66:7b:dd:1b:4b:c9:81:a8:d7:d6:98:
41:d1:37:9d:6f:73:37:7a:0d:02:41:47:15:ba:14:a9:c1:09:
0d:b7:01:73:e6:37:99:59:a4:bb:40:0c:ff:39:6a:91:9a:c9:
4b:6d:84:2c:79:55:f1:6f:a5:8b:0c:ee:4e:78:24:7e:4c:7b:
be:fb:5d:95:f0:49:07:e0:0b:7e:9b:56:17:be:9e:a1:ff:d2:
a7:95:0f:34:5a:4a:d9:d2:6f:c8:b4:fc:3d:08:eb:97:fb:89:
a4:14:9f:63:0b:6e:98:b9:14:71:e7:5c:8e:3a:92:8e:d6:a9:
c8:79:1f:35:a1:3c:9a:5c:39:26:21:dc:50:01:37:80:28:5b:
f4:8a:55:58:70:10:92:9e:3f:78:de:06:cd:cf:cf:de:38:8e:
23:de:c0:2b:8a:38:17:c0:91:34:86:41:04:5a:74:57:8d:d6:
39:19:d2:08:49:c3:d7:ac:53:fa:ba:3c:6a:0a:29:f0:3e:82:
1e:b1:b9:54:15:f9:6a:db:3d:72:36:f7:8b:c5:b3:97:67:95:
4b:89:4d:b8:d6:94:3f:36:bd:c6:80:be:e5:10:d5:5d:d8:37:
3d:e4:e3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org