Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/krpR_v3j_RI4qZJVtCw4w3Tkbzo.roa
File: krpR_v3j_RI4qZJVtCw4w3Tkbzo.roa (raw, json)
Hash identifier: gRkJlYz6lBbDfP4iyWz/0Dw3X7h6yC4izhfFaXVCwUM=
Subject key identifier: 92:BA:51:FE:FD:E3:FD:12:38:A9:92:55:B4:2C:38:C3:74:E4:6F:3A
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C4C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/krpR_v3j_RI4qZJVtCw4w3Tkbzo.roa
Signing time: Wed 29 Sep 2021 02:51:07 +0000
ROA not before: Wed 29 Sep 2021 02:51:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 21859
IP address blocks: 210.61.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3148 (0xc4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=92BA51FEFDE3FD1238A99255B42C38C374E46F3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c1:76:80:b5:06:c1:51:ee:4f:12:25:d9:f6:
d3:a7:a1:c9:e7:3f:5b:0e:89:08:c7:fb:bc:42:22:
ee:4e:d1:f8:8f:68:7e:28:c7:4c:a3:03:47:eb:f1:
ea:48:17:ec:3c:1b:48:a9:f4:d4:e8:4a:b7:5d:88:
53:04:6f:41:6a:94:3d:cd:db:0d:a7:64:e6:f6:40:
72:57:b8:89:1b:10:8f:7a:29:99:6c:9e:38:5f:0f:
d0:98:88:dd:42:67:b5:f7:2b:71:0a:81:bf:fd:01:
88:7b:d7:58:40:56:b4:d5:52:f4:be:31:39:cb:03:
d5:bb:76:e2:6f:6a:b5:ab:15:9f:0c:07:d8:74:66:
9d:34:e9:d2:67:d7:41:4a:38:f9:45:a8:31:2b:f4:
a4:8a:3c:3f:c7:f8:8f:09:b5:a0:27:6a:c9:8d:55:
51:37:06:02:1e:69:d3:b8:c1:9d:cb:84:36:c5:91:
3d:58:fc:80:18:65:ae:ed:6f:4e:e6:18:0a:0d:ba:
1e:51:21:fd:10:15:e1:99:72:f1:de:4c:da:cd:ab:
3b:65:8f:d7:ce:47:61:0c:b6:6b:1d:98:84:c2:58:
05:39:63:4b:45:d9:fb:fc:6a:1f:61:46:a1:66:27:
e8:67:dd:8a:34:e6:5d:5e:03:7e:15:55:9a:a8:65:
11:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BA:51:FE:FD:E3:FD:12:38:A9:92:55:B4:2C:38:C3:74:E4:6F:3A
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/krpR_v3j_RI4qZJVtCw4w3Tkbzo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a0:8c:79:77:33:2a:b8:c2:eb:71:b8:78:19:7f:6c:b7:59:
b4:ce:40:19:4a:7f:37:03:4e:97:ff:d5:c7:99:5f:dc:03:73:
69:1f:f6:a5:e5:12:e1:44:09:20:6d:3c:3f:b4:c6:65:69:c7:
2d:db:34:e1:c2:83:e4:05:b2:94:6c:dc:15:f4:f9:fd:19:4e:
69:eb:f4:2b:89:56:cf:91:1d:93:99:4b:de:f7:ac:67:17:a4:
b3:4c:44:37:85:9c:e1:55:63:20:3a:ec:7b:cf:65:bc:e5:b1:
90:54:b6:0a:7f:9a:1e:7d:e0:83:e5:09:be:ca:51:d3:14:e3:
85:9b:d2:65:ea:72:46:be:ef:22:20:98:69:1c:b8:28:28:d3:
a5:22:6e:1b:9c:d0:e0:4f:16:40:bd:9a:42:21:a0:9e:0f:8f:
97:e8:cd:4c:82:1b:a7:12:ce:07:f6:01:db:97:15:d6:d1:ca:
c8:a8:f4:78:f2:bf:f8:62:20:24:c8:76:90:e6:bc:3f:6c:59:
5f:b3:71:aa:c1:09:09:b4:51:e4:b5:73:18:b7:b5:cf:b6:52:
94:ba:2d:54:87:98:02:3b:62:89:2c:aa:4f:02:23:68:ae:9c:
d2:46:fa:20:8d:ed:21:3b:25:88:e3:3c:fd:b8:c6:37:e3:56:
7b:ed:41:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org