Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_5PG3dwNrJ3zQ42zDMs6p7p7M_0.roa
File: _5PG3dwNrJ3zQ42zDMs6p7p7M_0.roa (raw, json)
Hash identifier: lLEvZQGJcOmhqsAiJ3PccAzMFSNe86Xem+JgFuPUnC4=
Subject key identifier: FF:93:C6:DD:DC:0D:AC:9D:F3:43:8D:B3:0C:CB:3A:A7:BA:7B:33:FD
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0876
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_5PG3dwNrJ3zQ42zDMs6p7p7M_0.roa
Signing time: Tue 29 Sep 2020 09:58:46 +0000
ROA not before: Tue 29 Sep 2020 09:58:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17421
IP address blocks: 111.80.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2166 (0x876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FF93C6DDDC0DAC9DF3438DB30CCB3AA7BA7B33FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:47:99:f4:c5:84:7e:ed:12:08:74:f3:d7:
6a:66:d8:26:f4:ed:72:f8:93:64:99:9e:3f:04:24:
42:c0:61:f3:2d:a6:8b:20:a1:73:07:d3:a4:f6:b9:
db:05:60:82:aa:3f:b1:79:ed:cc:28:c5:7e:65:3c:
ed:4d:b1:d2:26:27:f8:23:21:d8:c5:20:ec:42:92:
1c:a7:e7:45:93:d3:a0:e4:8b:f5:6d:f3:94:27:f3:
33:47:90:15:9a:7e:23:38:ad:cb:f6:68:37:58:37:
7a:c7:fc:72:04:ec:fd:f0:74:86:27:0a:13:9d:fb:
16:c8:ec:5e:cb:1e:07:1f:2b:c7:13:de:cf:31:3c:
e3:a8:3e:cf:50:91:ac:cf:e6:b6:0d:27:7d:be:32:
64:64:a8:2b:09:7b:cc:77:7b:1d:b1:d0:0f:ab:6a:
2c:c1:f1:d3:ed:b7:65:35:7c:8c:05:b4:a9:8e:19:
9b:96:20:e4:46:47:01:f3:ca:95:67:a8:f0:0e:7a:
45:57:27:b0:f3:dd:28:c3:9e:10:f4:c4:f2:bf:7b:
a1:48:30:65:2f:b9:1c:57:19:2b:6b:32:0a:74:c9:
74:58:a6:35:b1:c4:c3:29:26:fd:55:f0:a7:cd:7b:
d0:23:f1:19:a1:21:cb:90:36:3b:a7:0f:b3:eb:7c:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:93:C6:DD:DC:0D:AC:9D:F3:43:8D:B3:0C:CB:3A:A7:BA:7B:33:FD
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_5PG3dwNrJ3zQ42zDMs6p7p7M_0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.80.0.0/14
Signature Algorithm: sha256WithRSAEncryption
3b:1b:9f:8d:72:f3:f7:e5:a7:75:c0:2a:08:f4:ce:63:fd:82:
3a:df:d0:35:b9:2e:6e:d0:a4:5c:e4:b7:b6:87:27:15:b5:70:
32:19:52:34:e2:04:3e:7b:ba:3e:ef:bc:ba:52:fb:89:b6:5c:
f7:d5:cb:bf:b2:69:f0:70:84:97:fb:3f:a5:af:bc:2d:3b:33:
98:a8:e5:7c:99:e4:13:b1:44:af:f4:e3:5d:df:78:76:bb:f3:
9e:24:71:17:f9:f8:82:d2:c9:ec:09:eb:6c:22:e7:80:49:1c:
dc:7d:1a:ea:f9:c8:d3:67:b3:27:e6:82:94:de:b8:55:f3:c9:
23:82:d9:17:9c:16:1a:00:49:c3:89:70:4e:f5:8f:d8:0a:1f:
11:e9:d3:fa:b0:0f:f9:e8:12:79:a1:21:a1:17:6e:5c:a7:bd:
eb:c3:20:ff:f3:10:20:4d:3b:8d:38:3c:b2:99:67:88:d8:f4:
20:0e:63:e0:0c:c7:28:61:2e:dd:5e:02:f0:10:8d:58:4f:ec:
e6:3a:45:d9:1f:8d:ae:f1:01:8d:a6:72:66:33:98:c7:fd:5b:
ab:4e:ae:d9:5e:48:cc:de:15:97:79:81:51:8b:3c:8d:d3:1f:
25:65:f5:1c:ec:9a:1a:39:bf:3c:41:b1:f4:82:0f:03:0e:f2:
8f:66:79:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org