Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/t1Xk0xcYg7PH50ZfFIaG2ts4eW0.roa
File: t1Xk0xcYg7PH50ZfFIaG2ts4eW0.roa (raw, json)
Hash identifier: vprfv2OGfsbFqmUKJ2dew9HrzDO2QQQ3NmDSsxIN+CA=
Subject key identifier: B7:55:E4:D3:17:18:83:B3:C7:E7:46:5F:14:86:86:DA:DB:38:79:6D
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0883
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/t1Xk0xcYg7PH50ZfFIaG2ts4eW0.roa
Signing time: Tue 29 Sep 2020 09:58:50 +0000
ROA not before: Tue 29 Sep 2020 09:58:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9505
IP address blocks: 2001:b200::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2179 (0x883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B755E4D3171883B3C7E7465F148686DADB38796D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3f:a0:b0:40:a7:c0:c7:78:59:bb:a8:7b:20:
d2:21:8f:94:7c:12:04:b4:f0:53:0b:d5:45:5e:aa:
ef:6b:60:3b:5f:30:9c:54:8b:c9:06:e9:ea:29:00:
50:99:51:c1:17:95:f0:b3:76:2e:32:dd:a0:0d:9a:
3e:11:b4:9e:03:03:39:0b:8b:f0:c5:26:cc:c9:ee:
02:2c:b7:98:62:d7:69:a5:5c:aa:13:81:14:0f:5c:
95:a8:2e:7d:40:56:ec:9a:2c:96:0f:f2:fc:2d:a6:
12:39:30:57:2c:0d:bd:90:91:44:2b:21:48:fa:f0:
54:ab:f7:29:c8:1f:02:e6:a1:04:dc:2a:2c:a7:57:
54:27:0b:2b:5f:f8:66:0a:66:62:d5:f8:60:44:6e:
53:5d:b2:14:db:ab:92:f0:5f:0a:82:3d:a7:f3:c2:
96:2b:f8:87:ab:83:54:8f:47:25:0e:f9:58:46:f1:
9c:b3:78:e1:43:a0:8f:b4:67:d1:03:c7:45:38:15:
f8:32:b4:81:c4:b7:ca:f3:a2:15:23:ab:7c:cc:ad:
8e:93:6e:6c:b6:ca:5e:d8:3b:f8:8c:35:c4:30:28:
df:7c:32:4f:f0:e3:a9:16:3b:91:b3:7c:0f:80:19:
55:55:4f:54:d8:b2:c7:89:04:81:17:2a:1a:5c:81:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:55:E4:D3:17:18:83:B3:C7:E7:46:5F:14:86:86:DA:DB:38:79:6D
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/t1Xk0xcYg7PH50ZfFIaG2ts4eW0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b200::/32
Signature Algorithm: sha256WithRSAEncryption
c3:39:d8:63:4d:0a:1c:d8:82:9d:2c:f8:58:48:b6:06:0e:d8:
9c:6b:9e:d9:7a:b5:8e:30:69:5e:35:5a:e5:18:9c:7f:0d:5c:
03:d1:8f:2d:64:86:d9:1f:2f:cd:35:93:a6:93:0d:3c:f2:9f:
bc:21:71:b2:75:28:3b:f6:88:49:6d:75:ee:ce:6b:b0:26:26:
9d:5b:c0:42:9a:0b:c4:f1:9a:56:85:5e:ba:84:a9:17:b8:78:
ab:4f:1d:3b:68:84:05:5d:2f:30:ac:aa:43:10:84:c7:1a:6c:
8b:8b:73:85:6c:83:17:3c:18:45:c2:f7:98:64:c6:f1:d9:f1:
e4:9a:8b:c0:12:33:88:8e:14:9f:95:7c:84:18:73:8e:72:68:
5e:bc:df:05:ea:1a:b8:c8:e8:05:4c:f8:76:25:b0:7b:b7:f7:
6f:0d:5e:9d:0f:a6:09:90:66:70:8b:19:4a:2c:65:15:f8:ff:
01:5a:14:16:c7:57:d4:7c:10:66:e6:05:5a:8a:8a:0c:3a:e6:
0b:f8:59:c9:72:91:83:1f:a8:b2:f1:0e:ce:90:82:9f:41:37:
9c:43:d8:24:33:44:fa:fc:7d:50:1e:73:6a:16:cd:62:21:dc:
45:99:77:db:94:5a:04:53:10:1d:a1:fb:1e:ec:67:9f:f1:8e:
13:5c:06:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org