Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/e50Mo35OjzgIeB_RIeSvDQKk2Q0.roa
File: e50Mo35OjzgIeB_RIeSvDQKk2Q0.roa (raw, json)
Hash identifier: L7g17mZXTjxfUdyiSjJgIFvvmHHJuM8U8Lp86OlHMdk=
Subject key identifier: 7B:9D:0C:A3:7E:4E:8F:38:08:78:1F:D1:21:E4:AF:0D:02:A4:D9:0D
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0A97
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/e50Mo35OjzgIeB_RIeSvDQKk2Q0.roa
Signing time: Sun 07 Feb 2021 11:38:23 +0000
ROA not before: Sun 07 Feb 2021 11:38:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 210.59.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2711 (0xa97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:38:23 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7B9D0CA37E4E8F3808781FD121E4AF0D02A4D90D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:d7:5d:d7:12:a0:fe:22:bb:53:4b:b7:08:
9f:6b:9b:fa:03:b1:a0:f2:ba:1c:27:b8:8a:6d:c6:
3a:d2:24:86:a4:7e:a7:55:dc:28:1d:b4:c4:23:0c:
37:3b:00:e9:4d:14:ee:03:ff:42:f4:da:bd:40:b0:
2b:c2:29:b1:cb:8b:4d:5f:4f:1c:0c:36:a1:04:e8:
9e:84:af:58:49:4f:24:a4:7f:ca:9e:e2:cc:a7:23:
ba:d8:a8:2f:6c:e9:2c:1e:69:2d:85:3f:27:21:07:
54:88:ff:75:1f:b3:ec:f4:69:c7:34:8e:4a:48:eb:
99:d7:7e:71:e0:cc:bd:ca:6b:46:f6:59:11:fa:b7:
5f:2f:1c:b7:e1:5d:4d:8a:ba:e8:d3:0e:60:f3:3e:
1b:9e:1d:0c:60:fc:03:5a:fe:a7:ec:39:07:48:32:
62:40:c4:bc:0f:76:34:e2:a0:7d:d5:1a:36:84:86:
04:20:ab:95:83:2f:28:e1:32:1f:33:36:fe:ff:8a:
9e:40:64:fe:52:bd:7b:50:d2:0c:d5:77:a8:29:d4:
e6:d8:f7:a4:9f:4b:11:57:3c:bf:37:03:41:9d:cb:
53:fe:72:35:a4:75:3a:3e:8d:49:6a:07:2f:3a:d2:
c5:fa:9e:a8:44:27:a4:f1:68:da:b1:82:a3:93:94:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9D:0C:A3:7E:4E:8F:38:08:78:1F:D1:21:E4:AF:0D:02:A4:D9:0D
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/e50Mo35OjzgIeB_RIeSvDQKk2Q0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.59.128.0/17
Signature Algorithm: sha256WithRSAEncryption
42:53:e9:98:f9:46:27:2b:ea:f8:4a:28:f7:ca:fa:fa:4a:70:
c1:3b:8a:fe:cc:e8:3c:03:e7:9f:66:96:aa:3b:3d:32:52:98:
7c:d8:56:32:cf:84:56:65:66:8a:2d:82:36:01:ed:64:4f:f5:
74:04:d4:d3:1c:15:fe:12:da:64:f3:27:c5:b3:ad:92:cd:30:
48:4a:b1:e5:ea:69:f2:7d:af:de:ac:62:63:da:c7:0c:4a:db:
1c:50:31:80:9f:b9:b4:1b:3b:f4:c4:94:7f:fb:2c:2e:13:36:
2a:9d:63:56:92:3d:f4:4f:a2:76:a8:d3:0b:16:a4:b3:cd:79:
af:b6:70:25:80:5f:eb:4c:91:e2:f2:be:dc:69:20:f6:fd:b0:
41:3d:0d:42:90:a1:15:2c:b0:30:4f:7e:13:dd:18:b8:46:d6:
38:84:34:bc:61:c9:73:53:60:3b:3b:2f:04:ab:99:81:eb:c9:
93:6d:c4:70:ab:57:29:24:08:6f:81:dd:b5:5c:c7:9b:3a:ce:
dc:8c:15:5a:c1:9d:34:5a:fe:2b:db:46:63:92:2d:3d:06:f1:
84:06:74:2f:b0:73:46:d9:09:47:9b:b6:43:42:00:45:22:03:
c5:60:22:29:5b:5a:2a:0b:77:db:4b:10:d1:69:35:a3:4b:cb:
d1:90:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org