Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/f6sqioUEeMGKiLoJBWLm4CuLwj0.roa
File: f6sqioUEeMGKiLoJBWLm4CuLwj0.roa (raw, json)
Hash identifier: wnAxc6VUTp/O3PDikK426kmrkonoenJg8ZJVx+YuGCw=
Subject key identifier: 7F:AB:2A:8A:85:04:78:C1:8A:88:BA:09:05:62:E6:E0:2B:8B:C2:3D
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0879
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/f6sqioUEeMGKiLoJBWLm4CuLwj0.roa
Signing time: Tue 29 Sep 2020 09:58:46 +0000
ROA not before: Tue 29 Sep 2020 09:58:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17421
IP address blocks: 211.79.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2169 (0x879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7FAB2A8A850478C18A88BA090562E6E02B8BC23D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:45:71:45:fa:5f:69:ef:bb:85:a0:80:d2:
5a:2e:ff:19:d5:9b:75:c0:c1:d5:76:23:8c:67:29:
ed:21:0e:7a:d2:65:21:5b:06:2f:56:c4:4b:1e:5a:
03:81:4e:dd:41:29:ea:99:73:43:e0:8d:f3:84:56:
02:d3:ac:db:0b:75:31:7a:0a:18:22:f1:97:da:e9:
08:30:5a:09:da:d4:7e:f0:4e:8d:3a:ff:4d:36:8f:
cd:fd:ce:f7:2f:5c:8d:b8:44:17:f8:d7:f6:c9:83:
37:47:d1:e2:c3:ff:06:74:63:0a:b3:a7:4e:8d:16:
d5:85:6a:48:b4:45:54:16:ad:07:8a:5a:35:c0:f4:
20:03:b0:88:38:0d:7f:0f:46:c6:ca:64:8d:ac:a7:
55:25:3b:14:0e:27:ae:30:91:8a:1b:6a:e1:53:8d:
07:a8:47:47:c9:f3:20:a6:4a:d8:fe:f5:6f:aa:b8:
05:79:41:4d:72:79:87:8d:ec:57:57:23:1e:a4:14:
5f:1a:3d:42:ad:7a:70:97:b8:8d:72:6f:9b:33:4b:
a8:b1:2c:61:b6:92:8d:3c:5c:0c:9c:29:92:0e:f5:
49:a9:91:af:a7:1b:05:62:76:16:e0:d6:4d:f0:e4:
b1:a5:f4:e4:8b:13:5a:1c:ae:1b:40:7e:33:ed:8a:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AB:2A:8A:85:04:78:C1:8A:88:BA:09:05:62:E6:E0:2B:8B:C2:3D
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/f6sqioUEeMGKiLoJBWLm4CuLwj0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.32.0/20
Signature Algorithm: sha256WithRSAEncryption
17:d2:b7:49:65:04:05:88:fa:bf:fa:96:53:0f:27:ff:5b:0c:
72:82:9c:eb:7e:9d:65:c6:c8:0e:bd:35:13:b5:94:1e:7e:78:
45:63:48:b9:7a:6f:87:5f:2d:99:3e:40:61:49:33:68:aa:3f:
98:63:c2:20:71:23:a3:b4:a6:1a:d8:9b:43:83:11:fc:8a:90:
81:c6:6c:d5:fa:7d:28:f2:c7:8a:ad:4d:4b:e0:5c:41:82:87:
db:d6:22:92:ec:6f:e4:e0:0e:66:f5:33:d0:02:a6:47:eb:b0:
f6:f8:32:2b:2a:f2:9d:40:e0:78:13:22:0b:7f:ff:aa:1a:a3:
c3:7e:ed:30:09:a6:31:ad:65:b7:74:d1:e2:75:69:c3:14:12:
02:20:2e:72:97:2c:d3:b6:18:c2:31:6d:ff:09:6f:f9:30:6c:
ae:52:7c:05:e3:8a:40:91:56:49:1b:6f:64:c4:2f:27:8f:ca:
2a:90:da:cf:d8:87:97:03:81:ea:84:2b:f7:31:07:de:a4:a2:
88:65:a5:4a:1f:64:0c:3d:f1:e5:77:ac:cc:24:ff:1d:9d:be:
bf:99:aa:93:52:be:d8:f3:f3:21:91:53:9d:4d:db:cc:7f:5f:
32:ad:7d:58:ba:d9:97:66:1f:ed:98:3d:f6:bf:d0:d1:4c:69:
dd:cc:9f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org