Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/gsBw1D4N8HDQC4ryDALMFCk_wtg.roa
File: gsBw1D4N8HDQC4ryDALMFCk_wtg.roa (raw, json)
Hash identifier: lv4rY+zD9aTfJmuwxkuW3x3dYgGvXdreAjTpsk6MQ18=
Subject key identifier: 82:C0:70:D4:3E:0D:F0:70:D0:0B:8A:F2:0C:02:CC:14:29:3F:C2:D8
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gsBw1D4N8HDQC4ryDALMFCk_wtg.roa
Signing time: Thu 15 Sep 2022 02:48:07 +0000
ROA not before: Thu 15 Sep 2022 02:48:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 15133
IP address blocks: 61.221.181.64/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=82C070D43E0DF070D00B8AF20C02CC14293FC2D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:49:2c:49:dc:e0:93:03:9c:79:5b:02:0b:
15:8c:a6:94:3e:b0:9f:21:75:f8:e8:c7:8f:07:a3:
c6:29:a9:b1:31:de:0d:f7:b0:41:42:f9:97:f4:a9:
ce:dd:03:e2:df:4f:4b:9f:13:dd:a9:26:4a:f6:f9:
27:82:99:98:4f:ab:8e:19:67:f8:34:eb:9a:40:08:
e7:ab:37:7b:82:a4:3f:6d:df:37:b3:20:30:c5:b9:
fe:59:c0:4f:01:96:2b:b0:2f:4d:d5:c2:85:9c:a4:
6d:9b:7f:5b:23:b0:f0:5c:8a:7b:e4:8d:16:82:fb:
ca:af:5b:0e:c1:25:69:a8:1a:03:a1:43:83:3e:af:
1c:a5:05:3f:ec:7f:e3:fe:ec:aa:51:45:5b:e0:13:
55:f6:00:b8:cb:85:19:83:67:b9:4e:05:af:be:00:
fe:bc:9e:3e:f6:ac:76:00:dd:77:1d:51:e5:08:ab:
1c:8f:b8:8a:39:b1:f8:30:33:d8:aa:c6:31:bb:e5:
d9:fe:ca:7b:8c:94:fd:c8:c2:ac:42:62:48:ee:ed:
4e:53:b3:84:0a:9c:d0:1e:f1:92:de:0d:e6:a4:52:
b4:43:f0:6d:8c:ed:8c:53:0e:a6:ab:79:04:a9:94:
b2:60:79:3c:08:9a:21:50:d5:c2:84:d6:c1:82:54:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C0:70:D4:3E:0D:F0:70:D0:0B:8A:F2:0C:02:CC:14:29:3F:C2:D8
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gsBw1D4N8HDQC4ryDALMFCk_wtg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.221.181.64/26
Signature Algorithm: sha256WithRSAEncryption
b0:f7:6d:5a:ef:7a:97:32:1c:41:b0:fd:93:d1:43:b0:76:4d:
cc:18:43:51:33:7c:1e:36:c1:fe:3f:d2:56:ec:e3:2f:d1:d5:
50:35:c4:ed:2f:33:b1:9d:7c:70:c8:a6:47:e1:c1:e4:d9:03:
b6:d9:37:af:b3:cb:3b:1f:d3:83:59:f0:18:34:dd:66:aa:5e:
5a:6d:5c:cc:b6:86:91:33:74:c6:5c:0e:e0:24:dc:74:4f:6b:
31:18:f1:7a:a0:56:9b:ca:da:21:e4:db:ad:49:5e:8c:2c:26:
db:30:18:5a:a9:7d:8d:70:85:91:48:eb:e6:ce:44:e4:e7:b5:
bb:a5:f8:d4:c7:6b:ef:90:b4:0f:07:16:f4:b2:e9:a7:55:a3:
32:74:1e:ae:48:d5:9b:5c:da:b1:8c:66:f7:3f:6e:0a:89:cf:
56:c5:30:79:13:33:ad:fa:3a:95:91:b6:71:33:5f:ea:b5:a4:
2f:16:b3:75:83:e2:24:19:22:4a:0e:f1:70:4f:7c:4b:07:f3:
35:7d:49:2d:aa:08:81:f8:90:4d:c9:55:5e:90:73:64:58:42:
32:5b:e2:8e:e1:f3:87:88:c7:ef:7f:0a:5e:5d:0b:97:b5:e7:
dd:be:49:0a:f8:9f:b0:a4:68:19:2d:d8:7f:26:8c:d4:cf:49:
df:d9:e8:6b
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMjA5MTUw
MjQ4MDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDgyQzA3MEQ0M0UwREYw
NzBEMDBCOEFGMjBDMDJDQzE0MjkzRkMyRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkq0ksSdzgkwOceVsCCxWMppQ+sJ8hdfjox48Ho8YpqbEx3g33
sEFC+Zf0qc7dA+LfT0ufE92pJkr2+SeCmZhPq44ZZ/g065pACOerN3uCpD9t3zez
IDDFuf5ZwE8BliuwL03VwoWcpG2bf1sjsPBcinvkjRaC+8qvWw7BJWmoGgOhQ4M+
rxylBT/sf+P+7KpRRVvgE1X2ALjLhRmDZ7lOBa++AP68nj72rHYA3XcdUeUIqxyP
uIo5sfgwM9iqxjG75dn+ynuMlP3IwqxCYkju7U5Ts4QKnNAe8ZLeDeakUrRD8G2M
7YxTDqareQSplLJgeTwImiFQ1cKE1sGCVI8hAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUgsBw1D4N8HDQC4ryDALMFCk/wtgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9nc0J3MUQ0TjhIRFFDNHJ5REFM
TUZDa193dGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGPd21
QDANBgkqhkiG9w0BAQsFAAOCAQEAsPdtWu96lzIcQbD9k9FDsHZNzBhDUTN8HjbB
/j/SVuzjL9HVUDXE7S8zsZ18cMimR+HB5NkDttk3r7PLOx/Tg1nwGDTdZqpeWm1c
zLaGkTN0xlwO4CTcdE9rMRjxeqBWm8raIeTbrUlejCwm2zAYWql9jXCFkUjr5s5E
5Oe1u6X41Mdr75C0DwcW9LLpp1WjMnQerkjVm1zasYxm9z9uConPVsUweRMzrfo6
lZG2cTNf6rWkLxazdYPiJBkiSg7xcE98SwfzNX1JLaoIgfiQTclVXpBzZFhCMlvi
juHzh4jH738KXl0Ll7Xn3b5JCvifsKRoGS3YfyaM1M9J39noaw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org