Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/pgkwjpt13cly6gLMV0MZzgPKMq0.roa
File: pgkwjpt13cly6gLMV0MZzgPKMq0.roa (raw, json)
Hash identifier: OjRk/9f57m5JmhIKJEQghrYsIUB3+UEQchYbEBqhlKQ=
Subject key identifier: A6:09:30:8E:9B:75:DD:C9:72:EA:02:CC:57:43:19:CE:03:CA:32:AD
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0B2A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pgkwjpt13cly6gLMV0MZzgPKMq0.roa
Signing time: Sun 07 Feb 2021 12:47:44 +0000
ROA not before: Sun 07 Feb 2021 12:47:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9678
IP address blocks: 203.66.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2858 (0xb2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 12:47:44 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A609308E9B75DDC972EA02CC574319CE03CA32AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:aa:8c:d1:09:fe:66:27:7d:0a:be:ea:ad:17:
23:dd:d8:8e:4e:03:10:cf:86:60:eb:22:da:55:44:
bd:69:79:ec:9d:09:d4:d0:c8:a6:18:9a:2c:17:b5:
2f:bb:a0:e0:c6:ed:94:b4:d1:7b:04:3e:d3:f0:d3:
21:55:aa:89:ca:74:cc:c2:34:fc:1b:0e:d8:65:3f:
42:af:2d:03:b7:f5:de:be:a6:6a:fb:26:83:25:9d:
90:52:07:98:e7:71:10:33:5f:7f:2b:1c:54:fa:66:
ba:14:bc:1e:02:ec:80:44:2f:7c:a3:2b:38:89:4f:
c0:7d:ef:6f:72:ef:0b:46:7a:ef:29:5f:55:05:2e:
55:82:69:a3:b6:ef:e6:32:1e:89:f4:ea:a5:ec:d3:
b2:77:52:68:df:53:35:52:54:97:9e:8a:87:2c:11:
20:b8:57:fa:2a:8d:7a:ae:fa:96:ab:2f:db:11:c6:
c2:c7:63:ab:09:7c:56:44:e4:1a:3e:de:01:9c:08:
13:60:66:e9:1b:c5:91:52:b8:2b:4f:cc:ee:a8:27:
30:9d:b1:10:7f:75:31:23:36:74:5c:00:b9:af:d9:
92:06:17:5e:ca:0b:2c:4f:1f:e2:ff:7a:dc:d8:64:
86:84:e2:eb:41:74:f4:1b:9a:9b:79:ac:c8:3c:b4:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:09:30:8E:9B:75:DD:C9:72:EA:02:CC:57:43:19:CE:03:CA:32:AD
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pgkwjpt13cly6gLMV0MZzgPKMq0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.66.151.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:02:f2:25:13:00:b8:5b:11:33:f1:6e:5d:80:db:29:fe:8b:
da:e8:39:76:b4:b2:41:bf:53:32:ea:03:b9:48:01:14:ea:de:
16:cb:87:cc:f2:f4:33:d5:c0:01:77:5e:b5:23:33:28:54:db:
e7:9d:d7:4e:76:74:10:dd:5d:a2:53:e8:84:4f:fc:6f:b5:1a:
83:2e:44:c3:a5:56:7a:cb:5d:56:2f:3a:99:33:3c:6d:5e:88:
2e:96:d5:a0:6e:17:a4:2a:af:0b:d9:7c:f7:a9:4d:44:d1:93:
04:45:41:dd:4f:45:75:e7:df:cd:50:86:b0:1d:07:da:20:59:
17:91:d2:43:56:e4:f4:cd:b1:28:cb:21:d7:44:bf:2f:09:d3:
a1:ce:77:b1:6b:5c:12:c9:e0:15:a8:c6:c9:a1:d3:9c:65:80:
c7:5f:2d:ba:06:57:a0:8d:a1:0a:69:34:f3:74:1f:c4:47:38:
ab:ba:a1:a1:c0:45:e0:a9:7a:25:ec:b2:d2:af:7a:b5:32:dc:
98:a5:e1:95:1b:60:f7:da:e4:2d:08:de:67:aa:50:2d:61:d2:
37:53:18:4f:66:59:8f:05:d4:ef:6b:f4:12:ea:f2:43:ff:e0:
2a:81:0b:2b:a9:19:d3:2c:5b:77:b5:94:25:5a:a6:59:60:9e:
1e:7c:df:ec
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCyowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTAyMDcx
MjQ3NDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE2MDkzMDhFOUI3NURE
Qzk3MkVBMDJDQzU3NDMxOUNFMDNDQTMyQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpqozRCf5mJ30KvuqtFyPd2I5OAxDPhmDrItpVRL1peeydCdTQ
yKYYmiwXtS+7oODG7ZS00XsEPtPw0yFVqonKdMzCNPwbDthlP0KvLQO39d6+pmr7
JoMlnZBSB5jncRAzX38rHFT6ZroUvB4C7IBEL3yjKziJT8B9729y7wtGeu8pX1UF
LlWCaaO27+YyHon06qXs07J3UmjfUzVSVJeeiocsESC4V/oqjXqu+parL9sRxsLH
Y6sJfFZE5Bo+3gGcCBNgZukbxZFSuCtPzO6oJzCdsRB/dTEjNnRcALmv2ZIGF17K
CyxPH+L/etzYZIaE4utBdPQbmpt5rMg8tEQHAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUpgkwjpt13cly6gLMV0MZzgPKMq0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9wZ2t3anB0MTNjbHk2Z0xNVjBN
WnpnUEtNcTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0KX
MA0GCSqGSIb3DQEBCwUAA4IBAQCfAvIlEwC4WxEz8W5dgNsp/ova6Dl2tLJBv1My
6gO5SAEU6t4Wy4fM8vQz1cABd161IzMoVNvnnddOdnQQ3V2iU+iET/xvtRqDLkTD
pVZ6y11WLzqZMzxtXogultWgbhekKq8L2Xz3qU1E0ZMERUHdT0V159/NUIawHQfa
IFkXkdJDVuT0zbEoyyHXRL8vCdOhznexa1wSyeAVqMbJodOcZYDHXy26BlegjaEK
aTTzdB/ERziruqGhwEXgqXol7LLSr3q1MtyYpeGVG2D32uQtCN5nqlAtYdI3UxhP
ZlmPBdTva/QS6vJD/+AqgQsrqRnTLFt3tZQlWqZZYJ4efN/s
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org