Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/UgH14Iehe2RHSVHfWiNhJLUYSEU.roa
File: UgH14Iehe2RHSVHfWiNhJLUYSEU.roa (raw, json)
Hash identifier: efb94HiqcqvTOlVTn6ZdRLwTMhf7WR8ENthVD2qpVuw=
Subject key identifier: 52:01:F5:E0:87:A1:7B:64:47:49:51:DF:5A:23:61:24:B5:18:48:45
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0A7C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/UgH14Iehe2RHSVHfWiNhJLUYSEU.roa
Signing time: Sun 07 Feb 2021 11:37:59 +0000
ROA not before: Sun 07 Feb 2021 11:37:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 122.116.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2684 (0xa7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:37:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5201F5E087A17B64474951DF5A236124B5184845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:92:3b:31:1a:fb:0d:95:c6:bc:08:b3:96:
f3:d8:a8:99:cb:5d:36:cc:28:d6:8d:b8:b4:19:8a:
8e:5e:cf:e9:02:91:ae:48:c2:1d:65:9c:1d:73:d3:
3e:3e:2c:69:94:af:8e:7f:0e:c9:57:2b:cd:11:0c:
59:d1:c3:d4:1e:be:05:fa:be:c6:2f:66:cb:07:7a:
87:25:bc:b0:34:e6:b5:29:75:15:75:f6:c4:8e:a1:
e9:83:b8:9a:77:e3:fd:54:c5:42:17:c5:32:78:99:
cf:6a:16:e6:69:2c:12:be:1a:25:01:4d:93:f1:71:
ee:49:7e:8b:1c:ad:af:2d:fd:8b:f5:3f:17:af:da:
07:aa:51:7e:ea:a1:6f:43:46:e4:d1:dd:c0:7a:87:
04:2e:c6:60:7e:11:61:92:a3:09:ec:74:5e:a8:5f:
f9:80:d3:d5:fc:83:34:62:c0:27:84:79:66:85:4a:
d4:09:72:27:f7:99:12:61:27:0d:57:bb:5d:a5:61:
5b:76:5e:3c:a8:90:28:1b:b7:b4:09:fd:cd:2b:d6:
53:c9:09:6b:1e:42:7c:fe:5c:00:6e:29:53:d1:92:
0d:31:f7:52:71:a0:e1:8a:9f:54:87:44:57:d6:7c:
50:c3:b9:8a:9a:82:57:a6:8e:ff:da:d0:0e:dc:b9:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:01:F5:E0:87:A1:7B:64:47:49:51:DF:5A:23:61:24:B5:18:48:45
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/UgH14Iehe2RHSVHfWiNhJLUYSEU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.116.0.0/15
Signature Algorithm: sha256WithRSAEncryption
16:ea:a6:1a:31:19:9f:72:86:19:bc:34:76:a4:8d:fc:f7:e9:
a2:d6:d1:03:59:e3:23:15:3c:8e:ef:d6:33:49:df:d7:0e:c0:
42:b7:88:57:fb:18:ae:0d:ed:12:86:96:ae:b2:91:c9:6d:2b:
a2:cf:5f:1b:f1:70:99:2a:58:f2:30:37:30:9f:b6:c2:b1:e8:
ae:0d:6a:3a:48:57:5d:0a:89:45:bf:a5:42:ca:a4:84:a2:db:
89:b7:8d:7d:0f:c7:09:8d:4b:11:3e:52:d3:cd:df:16:aa:be:
ea:07:67:b3:e6:7e:49:2a:fb:60:a4:d4:af:b6:d5:7f:aa:62:
de:21:cd:80:35:1f:8d:20:6a:f3:d9:6a:61:fe:ba:c1:94:da:
2e:59:d8:dc:f6:fb:0d:66:98:bc:6c:ae:82:c4:9e:8c:20:53:
02:d4:3e:fc:dd:50:16:f0:2f:39:3b:a4:b3:49:55:70:b3:78:
82:9e:12:66:a2:02:b6:49:2c:fe:96:f6:64:12:b2:b8:a8:a5:
b1:f5:09:00:0a:38:1f:78:a1:22:11:ce:85:8c:19:e9:83:88:
d9:80:ff:c5:32:af:33:0d:da:15:5e:1d:88:31:35:19:85:81:
b2:fe:65:bf:ef:0b:12:64:0e:7a:35:db:81:8a:49:9f:fc:3e:
6e:4a:cf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org