Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/VLKUVPvScMGq3LBM-cVO8rL0PZg.roa
File: VLKUVPvScMGq3LBM-cVO8rL0PZg.roa (raw, json)
Hash identifier: 33ob6hHwZi1KmlHJJP0apzCeH9YGongIKrH7aTY7U/0=
Subject key identifier: 54:B2:94:54:FB:D2:70:C1:AA:DC:B0:4C:F9:C5:4E:F2:B2:F4:3D:98
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 087D
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/VLKUVPvScMGq3LBM-cVO8rL0PZg.roa
Signing time: Tue 29 Sep 2020 09:58:47 +0000
ROA not before: Tue 29 Sep 2020 09:58:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17714
IP address blocks: 175.111.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:47 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=54B29454FBD270C1AADCB04CF9C54EF2B2F43D98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:d6:de:1a:bd:c9:d7:af:99:92:0f:72:28:
39:ee:73:43:33:f6:b6:87:04:6c:ae:fd:a9:81:26:
42:10:19:90:87:aa:1b:a3:57:cf:10:86:c1:a4:40:
eb:32:5f:0f:ff:f2:d3:9c:0f:44:e9:55:ab:a8:29:
f5:da:39:10:0d:a1:e8:f0:29:64:10:d9:2a:d7:1d:
da:c2:27:15:98:fa:cf:0a:29:16:23:99:35:66:10:
c9:70:77:9e:62:df:b2:0c:a0:ee:1e:22:32:57:a0:
b4:19:25:60:c1:4e:59:aa:a3:d2:68:dc:5d:5c:38:
0f:64:eb:f9:04:10:ac:3d:0d:3b:d8:c9:e5:45:f1:
ba:e9:2e:a6:1a:c0:81:da:10:05:68:83:94:c6:c0:
3f:6c:88:c3:b0:c4:8b:c4:c6:53:1c:f5:e5:80:d8:
1f:b9:ed:c0:8a:54:15:a2:68:e1:d7:1d:13:3f:52:
ed:cc:31:05:66:ae:35:fa:fb:47:87:9b:d1:d2:b3:
9f:0f:a0:e9:68:a0:e7:41:31:44:2c:04:f3:35:29:
68:e6:cd:8b:a6:c2:90:9e:9c:cb:23:18:1a:17:6b:
2f:62:41:28:c0:23:4f:da:48:31:b3:68:e2:36:e0:
2d:56:c3:af:7f:f8:9e:b0:17:5c:76:9a:5f:f7:f2:
77:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B2:94:54:FB:D2:70:C1:AA:DC:B0:4C:F9:C5:4E:F2:B2:F4:3D:98
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/VLKUVPvScMGq3LBM-cVO8rL0PZg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.255.0/24
Signature Algorithm: sha256WithRSAEncryption
09:0f:70:2c:d7:b6:2b:6c:78:52:d6:d1:23:ac:1a:93:b6:ec:
05:03:81:0d:ae:f5:da:8e:75:3c:4d:8d:0e:a7:03:9e:7b:96:
93:c7:d0:d1:81:fe:d2:4d:e3:0f:e9:f7:31:58:be:49:15:8a:
ad:2b:f0:8d:b5:da:94:9e:fe:2a:2f:7f:89:9a:9c:42:70:2e:
d6:ec:cc:5a:79:ba:6f:5b:3c:e2:4d:0d:a0:bf:04:29:db:f5:
5a:af:1d:d5:7d:6e:fa:aa:4a:04:2e:77:4d:54:c9:b4:7d:a3:
40:25:90:f0:9d:3e:ab:87:cc:ac:d3:23:a7:12:5f:62:a3:90:
30:25:11:62:5f:00:4f:6e:77:e8:5b:e6:0a:f7:4f:95:dc:23:
4a:15:5a:13:9d:c0:4a:50:f8:65:25:7f:f0:49:55:e1:af:ac:
b9:90:28:0a:b8:2b:2b:b7:3c:69:16:82:65:39:79:e3:42:c6:
74:72:58:fa:c6:b6:28:5f:c9:ca:4c:7e:91:eb:e5:e0:d9:ba:
88:dc:77:63:30:72:ed:ae:03:b4:ea:5f:6f:3c:6c:92:e8:b2:
f2:aa:a4:64:24:9b:28:1f:9b:d4:ca:79:71:b8:84:aa:b4:6b:
bc:3e:7f:18:71:85:ba:2e:90:26:77:b8:31:24:b4:8a:9c:9f:
33:3c:de:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org