Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/qG_YEKchldHfSy183_JZUc2WkYg.roa
File: qG_YEKchldHfSy183_JZUc2WkYg.roa (raw, json)
Hash identifier: QtbkgwaB0Az2WzEzvTZDo1ExcwiWX1a9Fg1CI+ygrzg=
Subject key identifier: A8:6F:D8:10:A7:21:95:D1:DF:4B:2D:7C:DF:F2:59:51:CD:96:91:88
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 085E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qG_YEKchldHfSy183_JZUc2WkYg.roa
Signing time: Tue 29 Sep 2020 09:58:40 +0000
ROA not before: Tue 29 Sep 2020 09:58:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 61.217.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2142 (0x85e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:40 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A86FD810A72195D1DF4B2D7CDFF25951CD969188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:a0:f1:3d:83:d7:f7:ad:b7:47:32:88:99:
56:f4:b9:09:5e:d1:d9:ac:89:16:b1:23:f0:9b:11:
c5:23:13:4f:c4:f8:f0:79:50:73:c2:b3:15:10:89:
49:4a:71:92:fa:0c:2f:1c:8b:27:23:c0:dc:3e:36:
31:fc:1f:0d:76:ed:5a:f1:99:dd:1a:16:7b:a8:78:
3a:5c:89:80:17:da:63:ae:48:c1:28:8c:06:e2:13:
ce:60:a0:f5:56:00:75:dd:92:21:03:a4:ee:e9:bb:
7e:5e:af:a5:08:79:78:83:36:9d:54:93:c1:3e:d5:
d6:ab:55:25:f2:09:39:9f:42:20:bb:60:29:c7:70:
33:c2:b8:5d:5d:56:b2:a1:b4:4c:2e:53:37:5f:37:
32:b4:c9:49:0a:46:54:15:30:62:0d:e0:7e:0d:68:
32:dd:3d:a1:99:df:3f:1c:eb:4a:f9:d9:a0:a6:67:
49:b3:9f:00:37:fc:c0:72:a4:53:bb:39:14:e7:ce:
12:eb:e8:e3:23:aa:5a:75:fa:c2:e0:09:13:1b:0e:
c5:48:80:ab:5f:bf:3a:f6:ca:73:50:10:a1:64:37:
55:3d:a9:37:39:ee:5b:5d:7a:11:8b:be:59:fc:39:
ab:e3:b0:5d:e2:1e:b9:44:52:77:91:2a:e8:67:9c:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6F:D8:10:A7:21:95:D1:DF:4B:2D:7C:DF:F2:59:51:CD:96:91:88
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qG_YEKchldHfSy183_JZUc2WkYg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.217.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:6f:94:c3:fd:2c:48:d6:ff:3d:42:54:b0:b8:61:2e:4f:81:
a9:7b:40:0c:66:dd:bf:f2:ae:5b:3d:61:85:6d:4e:37:47:9d:
f8:dd:3c:8e:27:c2:f1:d7:e9:20:e6:92:0a:ae:ef:92:67:7a:
de:a0:18:87:ae:91:55:b9:9d:da:e0:b7:72:7e:8f:9c:ef:e1:
31:e6:0e:2b:52:df:32:54:0e:db:26:5a:98:fe:24:a4:01:f6:
b0:cd:a9:da:86:50:5b:65:8e:02:94:aa:ed:54:74:1d:4c:8e:
4f:4f:95:78:96:f4:68:25:7e:25:80:e9:30:45:0f:dd:c6:62:
bf:49:a9:53:8b:36:42:0c:6d:86:ec:cb:7a:53:1a:f4:e8:c1:
fb:01:f2:63:1c:37:19:96:13:a9:8e:e8:de:a4:7d:ba:35:26:
9d:9a:e4:fe:e0:0f:67:93:36:10:b7:4b:96:d2:fb:91:c6:bb:
b8:4f:d8:72:60:f4:21:8d:e6:5e:85:b0:fb:4c:20:ca:b5:64:
74:d4:cd:a2:01:69:7e:7b:b6:7a:3a:97:1d:09:f0:d1:9c:60:
92:30:75:e6:a6:33:16:d2:e2:c0:f4:50:62:12:a8:06:fd:27:
2c:25:27:ae:cf:f5:0e:89:9a:2e:3f:8d:61:d7:02:67:10:2d:
ca:77:63:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org