Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/pZln7k-PtMCv3whEFMqS7iQKE3s.roa
File: pZln7k-PtMCv3whEFMqS7iQKE3s.roa (raw, json)
Hash identifier: y9G2o+vzfmcNEqGsSAgl40nsiI1hGi4/0+mYmXcrdsI=
Subject key identifier: A5:99:67:EE:4F:8F:B4:C0:AF:DF:08:44:14:CA:92:EE:24:0A:13:7B
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0871
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pZln7k-PtMCv3whEFMqS7iQKE3s.roa
Signing time: Tue 29 Sep 2020 09:58:44 +0000
ROA not before: Tue 29 Sep 2020 09:58:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17714
IP address blocks: 203.78.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:44 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A59967EE4F8FB4C0AFDF084414CA92EE240A137B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:df:c5:f9:d5:0b:15:03:70:3c:32:b2:13:
9f:bd:65:50:92:7e:2c:cb:0a:8b:4c:2e:52:41:83:
ac:b2:3a:c6:ea:da:44:6c:8e:11:06:d8:2f:d9:9e:
f8:ba:5f:a4:26:1d:e1:09:f6:ab:17:20:c2:bd:38:
a0:25:94:27:d2:e3:41:c2:2f:8e:75:b7:40:df:a6:
59:a5:82:5f:b7:e2:15:a9:95:f2:7e:22:c1:5f:63:
c6:ea:3e:8b:fa:1b:35:00:50:9e:3f:ec:92:ee:ef:
8d:b3:52:08:d7:3f:f4:91:e8:85:e9:a9:55:bd:ba:
ef:69:c9:8f:bb:84:3f:46:ee:02:30:7d:8c:f0:25:
cf:02:1b:3b:02:a8:1d:36:a3:d8:fb:18:90:75:58:
3b:3e:0f:a9:51:48:63:fd:1e:3a:11:2d:fe:9f:b2:
ca:af:33:a8:56:2b:61:25:74:81:ec:2d:a2:fe:13:
8a:11:8c:f3:c2:ea:e6:6e:12:5c:98:69:ba:7d:fe:
b6:c5:36:87:79:7e:20:c6:a9:04:a1:2f:ea:3a:16:
95:f9:db:0f:02:cd:28:95:f4:8c:c5:3d:5e:17:d1:
1a:7a:c1:2a:17:a1:c4:df:50:40:0b:38:8c:ae:04:
a5:8b:2c:4f:1e:83:ef:a2:65:89:7b:f3:17:5b:cd:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:67:EE:4F:8F:B4:C0:AF:DF:08:44:14:CA:92:EE:24:0A:13:7B
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pZln7k-PtMCv3whEFMqS7iQKE3s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.78.190.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:d9:ae:db:ee:95:ac:fd:25:85:36:81:1d:4a:f8:42:f7:ef:
3f:e3:0f:4d:bd:14:61:28:be:f4:77:87:58:47:79:8c:e9:e6:
0a:88:b6:18:26:03:89:5e:96:5d:e7:a6:9a:01:d8:83:c3:f7:
d4:03:80:77:89:fd:bd:7b:ff:c8:fe:eb:41:d5:f2:cd:aa:6d:
90:e2:50:be:14:fe:89:12:86:7a:cc:0a:a4:1b:2f:58:79:6f:
3a:94:04:9f:75:57:f8:7c:57:c2:81:04:b5:7c:25:f7:b4:d2:
18:9d:48:c6:de:f2:07:f9:99:7a:f9:d2:2d:6e:5c:8e:df:74:
1a:70:5b:9d:78:45:03:a3:a3:19:4f:8f:49:8d:77:86:c9:18:
1f:ec:af:8f:74:a6:2f:4c:5a:e0:4e:f9:9b:db:a5:0a:d3:9d:
67:c2:ac:ec:6f:e3:8b:8d:5a:a5:fd:13:37:c7:8f:39:8f:f1:
d7:18:b9:79:06:db:09:d3:00:b3:7a:ba:13:2a:46:fb:3d:03:
3f:48:c6:c0:0f:89:58:dd:a8:5a:26:34:cc:86:81:a9:1e:db:
21:8d:b4:d2:b2:f7:8e:5e:4b:d0:98:40:c1:81:30:17:1e:d6:
08:b1:1b:14:13:0b:98:7f:6b:12:a5:e7:49:fa:45:75:81:a7:
fb:70:65:57
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMDA5Mjkw
OTU4NDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE1OTk2N0VFNEY4RkI0
QzBBRkRGMDg0NDE0Q0E5MkVFMjQwQTEzN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDN/9/F+dULFQNwPDKyE5+9ZVCSfizLCotMLlJBg6yyOsbq2kRs
jhEG2C/Znvi6X6QmHeEJ9qsXIMK9OKAllCfS40HCL451t0Dfplmlgl+34hWplfJ+
IsFfY8bqPov6GzUAUJ4/7JLu742zUgjXP/SR6IXpqVW9uu9pyY+7hD9G7gIwfYzw
Jc8CGzsCqB02o9j7GJB1WDs+D6lRSGP9HjoRLf6fssqvM6hWK2EldIHsLaL+E4oR
jPPC6uZuElyYabp9/rbFNod5fiDGqQShL+o6FpX52w8CzSiV9IzFPV4X0Rp6wSoX
ocTfUEALOIyuBKWLLE8eg++iZYl78xdbzc/FAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUpZln7k+PtMCv3whEFMqS7iQKE3swHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9wWmxuN2stUHRNQ3Yzd2hFRk1x
UzdpUUtFM3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy06+
MA0GCSqGSIb3DQEBCwUAA4IBAQC92a7b7pWs/SWFNoEdSvhC9+8/4w9NvRRhKL70
d4dYR3mM6eYKiLYYJgOJXpZd56aaAdiDw/fUA4B3if29e//I/utB1fLNqm2Q4lC+
FP6JEoZ6zAqkGy9YeW86lASfdVf4fFfCgQS1fCX3tNIYnUjG3vIH+Zl6+dItblyO
33QacFudeEUDo6MZT49JjXeGyRgf7K+PdKYvTFrgTvmb26UK051nwqzsb+OLjVql
/RM3x485j/HXGLl5BtsJ0wCzeroTKkb7PQM/SMbAD4lY3ahaJjTMhoGpHtshjbTS
sveOXkvQmEDBgTAXHtYIsRsUEwuYf2sSpedJ+kV1gaf7cGVX
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org