Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/j1c0YkC4Uk68FWWNpsNemJ0VYmY.roa
File: j1c0YkC4Uk68FWWNpsNemJ0VYmY.roa (raw, json)
Hash identifier: J/iYOigAIQnE6M8EwTKn3bw/nmgoeOQn4L0hHGOgwNs=
Subject key identifier: 8F:57:34:62:40:B8:52:4E:BC:15:65:8D:A6:C3:5E:98:9D:15:62:66
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C45
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/j1c0YkC4Uk68FWWNpsNemJ0VYmY.roa
Signing time: Wed 29 Sep 2021 02:51:05 +0000
ROA not before: Wed 29 Sep 2021 02:51:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 33717
IP address blocks: 220.128.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3141 (0xc45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:05 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8F57346240B8524EBC15658DA6C35E989D156266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:c7:b8:0b:54:ae:2f:9a:6e:b7:f3:4e:5d:
a2:48:27:ed:f9:c8:e6:84:f3:b5:84:51:49:ec:ae:
65:18:58:7d:67:61:3d:e6:e5:4f:90:eb:82:95:fa:
7b:17:35:6e:a7:cc:b4:2a:47:65:8e:56:c2:95:b5:
2f:ff:55:e9:6e:83:2a:96:53:8a:1b:43:87:fd:91:
de:ed:51:a1:3a:4a:cb:6d:a4:b7:eb:3c:9d:00:f9:
4f:f1:6d:9c:da:2a:6d:36:df:b9:75:cf:95:ce:cb:
16:97:5b:3d:07:26:77:69:f3:69:0b:6c:a6:c5:3e:
b3:7a:ca:11:bd:de:ee:c5:f7:81:5d:e2:6d:77:14:
1f:83:92:5a:e9:cf:26:d2:dd:87:09:e5:5d:fb:61:
f4:3a:35:95:39:8f:51:79:07:2a:99:f8:1c:5d:60:
29:0a:6d:3a:22:e3:6f:03:3c:d3:24:cf:1d:a6:6d:
62:a9:70:21:5f:33:7f:5b:e1:fd:23:f3:2d:70:00:
29:43:97:47:fd:6e:9f:4d:ab:48:6b:05:96:68:14:
3a:e4:bb:b8:13:1d:3c:2d:21:fb:b6:55:e4:18:fb:
36:25:1c:ac:99:1b:4d:ca:e7:62:7e:ee:65:1e:8a:
b4:36:16:3c:d7:72:1c:b2:94:31:86:b7:9b:9a:48:
75:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:57:34:62:40:B8:52:4E:BC:15:65:8D:A6:C3:5E:98:9D:15:62:66
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/j1c0YkC4Uk68FWWNpsNemJ0VYmY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.51.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b3:a6:5d:7e:cd:07:85:89:9d:ac:b6:fa:3e:13:5d:a0:e0:
81:e2:6d:bc:f6:ba:15:37:c5:4b:ac:c6:59:5f:71:c3:cf:b9:
c2:a6:2e:15:55:d2:6a:b0:76:b9:5a:9c:f4:2f:2e:2f:f8:4c:
56:66:17:f4:d0:56:e0:40:08:82:88:c8:3d:d5:e3:92:3d:fa:
70:2b:2a:d5:d9:9c:cb:c4:0e:5a:1e:0b:3a:c6:48:03:59:03:
e0:6c:67:25:9a:3a:57:76:ae:6a:6c:b0:8a:43:79:1b:04:84:
ff:5a:4d:d9:99:01:5d:e9:c8:45:72:89:7e:74:0b:bc:86:3a:
a0:54:2b:cd:12:ed:0c:28:21:e4:92:fd:13:26:06:4f:0f:e3:
bd:db:63:a3:b7:03:e3:fb:9a:8e:c8:f8:e0:86:85:4f:3f:4d:
9a:c9:39:98:05:2e:26:65:f6:77:5a:f0:9a:ee:84:64:de:6b:
48:f9:f9:1c:46:64:e2:6f:28:3f:e0:8a:10:70:30:66:0d:ff:
cb:dd:11:b9:b3:b6:4e:7b:cf:f6:52:9d:6b:e4:0a:4d:18:7d:
a1:3e:b1:cd:b8:9a:5d:94:f4:54:44:e7:fb:c5:cc:b0:da:20:
38:db:70:17:f5:50:8e:d7:9c:65:12:57:43:34:92:44:52:01:
c9:b1:83:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org