Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/VyIRp3gKRJzcHw67zF_XJ_tbnTo.roa
File: VyIRp3gKRJzcHw67zF_XJ_tbnTo.roa (raw, json)
Hash identifier: hv9aaC55dTWMJbiRmbIDHBWc86RgUKjHHp8D/jOMC1k=
Subject key identifier: 57:22:11:A7:78:0A:44:9C:DC:1F:0E:BB:CC:5F:D7:27:FB:5B:9D:3A
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C70
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/VyIRp3gKRJzcHw67zF_XJ_tbnTo.roa
Signing time: Wed 29 Sep 2021 02:51:16 +0000
ROA not before: Wed 29 Sep 2021 02:51:16 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 220.128.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3184 (0xc70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:16 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=572211A7780A449CDC1F0EBBCC5FD727FB5B9D3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:9e:3c:9f:ec:9f:73:19:b5:52:82:ea:5b:
65:9f:60:5f:3d:3d:cf:57:ca:99:ed:33:a7:3b:95:
f2:35:42:96:b1:81:39:ac:7e:74:0e:3c:f2:56:e5:
bc:0d:83:fc:6d:d1:65:48:c5:30:c0:ae:59:ca:52:
6c:8e:7b:ed:ba:61:73:de:3b:94:85:74:b1:9b:bd:
8b:de:22:1e:17:0d:c4:54:7e:43:2d:0a:e1:17:9f:
55:7b:b2:94:fd:1b:13:52:90:12:79:e5:01:5a:f1:
bd:1d:e8:13:25:0b:2e:10:81:7c:f8:64:f8:5d:78:
85:69:87:0f:f8:5f:f4:47:41:fa:ec:db:13:51:52:
20:82:28:3e:eb:1c:87:7c:7e:f7:41:53:00:aa:8f:
32:29:4a:ca:07:dc:33:1d:5e:93:e1:17:c4:38:40:
44:50:9e:3c:9e:f5:60:01:a5:44:dc:61:c5:93:a1:
a1:6e:ae:4d:8e:a0:9a:f2:81:7b:6f:f2:ba:26:1f:
92:fb:23:04:de:c7:a1:b9:4a:00:ed:e5:73:ef:39:
f1:a7:ff:c7:70:9c:a3:ca:c3:3b:80:3e:3f:2c:b0:
e5:ad:26:3d:63:0d:d9:d3:a3:53:95:11:c1:e0:01:
bf:1d:8b:7e:73:0b:1b:f1:09:5b:2d:43:fb:bf:c4:
f3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:22:11:A7:78:0A:44:9C:DC:1F:0E:BB:CC:5F:D7:27:FB:5B:9D:3A
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/VyIRp3gKRJzcHw67zF_XJ_tbnTo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.67.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:bd:bb:12:6c:6f:90:56:ca:26:f0:74:da:b2:45:90:a1:7f:
22:34:d7:90:22:4a:a4:7b:dd:32:80:73:09:cb:4c:f4:95:37:
d7:95:c3:53:dc:6a:75:25:13:cc:86:03:6b:d6:92:60:e4:78:
07:b5:07:a8:e3:c2:6b:5a:1a:fe:d1:8d:dc:b5:78:9e:92:fc:
6b:f9:ed:ed:ed:6f:e8:3f:13:ef:36:43:7c:7e:4f:c7:89:81:
ed:dd:96:c8:5c:c3:ae:a1:84:e6:de:04:4a:dd:18:fa:1b:6e:
1b:de:63:fc:98:4f:0e:4e:28:87:f9:40:f4:c5:36:66:ed:87:
aa:13:88:43:df:33:e5:32:04:32:50:e0:e0:c6:4e:ae:7e:ea:
67:2d:55:ca:f3:aa:f4:1d:df:fc:8a:4c:67:ee:b3:8e:25:15:
1f:61:39:f4:c0:87:56:aa:6c:df:93:78:8a:9f:94:6f:88:9f:
d0:d2:2d:b4:e6:c0:98:f8:bf:e4:9b:0d:42:a7:6a:6a:4a:ea:
a9:74:64:cf:59:0d:84:df:31:28:d0:f6:35:7d:55:bb:5f:6c:
fa:25:f3:c7:94:31:c3:c1:a9:e0:fd:50:4e:82:c6:b5:41:d1:
72:72:ae:96:22:9a:5a:3a:70:3a:49:3c:73:c5:d8:e6:6e:a4:
3a:4a:2b:d8
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTA5Mjkw
MjUxMTZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDU3MjIxMUE3NzgwQTQ0
OUNEQzFGMEVCQkNDNUZENzI3RkI1QjlEM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBZp48n+yfcxm1UoLqW2WfYF89Pc9XypntM6c7lfI1QpaxgTms
fnQOPPJW5bwNg/xt0WVIxTDArlnKUmyOe+26YXPeO5SFdLGbvYveIh4XDcRUfkMt
CuEXn1V7spT9GxNSkBJ55QFa8b0d6BMlCy4QgXz4ZPhdeIVphw/4X/RHQfrs2xNR
UiCCKD7rHId8fvdBUwCqjzIpSsoH3DMdXpPhF8Q4QERQnjye9WABpUTcYcWToaFu
rk2OoJrygXtv8romH5L7IwTex6G5SgDt5XPvOfGn/8dwnKPKwzuAPj8ssOWtJj1j
DdnTo1OVEcHgAb8di35zCxvxCVstQ/u/xPNfAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUVyIRp3gKRJzcHw67zF/XJ/tbnTowHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9WeUlScDNnS1JKemNIdzY3ekZf
WEpfdGJuVG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3IBD
MA0GCSqGSIb3DQEBCwUAA4IBAQBevbsSbG+QVsom8HTaskWQoX8iNNeQIkqke90y
gHMJy0z0lTfXlcNT3Gp1JRPMhgNr1pJg5HgHtQeo48JrWhr+0Y3ctXiekvxr+e3t
7W/oPxPvNkN8fk/HiYHt3ZbIXMOuoYTm3gRK3Rj6G24b3mP8mE8OTiiH+UD0xTZm
7YeqE4hD3zPlMgQyUODgxk6ufupnLVXK86r0Hd/8ikxn7rOOJRUfYTn0wIdWqmzf
k3iKn5RviJ/Q0i205sCY+L/kmw1Cp2pqSuqpdGTPWQ2E3zEo0PY1fVW7X2z6JfPH
lDHDwang/VBOgsa1QdFycq6WIppaOnA6STxzxdjmbqQ6SivY
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org