Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/uCzmp4NfKRVYOgSxQgg-D6YO6fU.roa
File: uCzmp4NfKRVYOgSxQgg-D6YO6fU.roa (raw, json)
Hash identifier: 3/u3zjjV1TTbkk+bGDRX9nMDlUDHETfF09DLzpXkkQ4=
Subject key identifier: B8:2C:E6:A7:83:5F:29:15:58:3A:04:B1:42:08:3E:0F:A6:0E:E9:F5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D5B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/uCzmp4NfKRVYOgSxQgg-D6YO6fU.roa
Signing time: Mon 08 Aug 2022 03:55:41 +0000
ROA not before: Mon 08 Aug 2022 03:55:41 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 203.69.47.224/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3419 (0xd5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 8 03:55:41 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B82CE6A7835F2915583A04B142083E0FA60EE9F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:a2:d9:90:54:90:4a:c2:34:de:78:2f:d0:
89:2b:c4:46:e9:60:12:c4:4a:2f:b7:c9:3d:ef:b7:
4b:92:00:de:90:26:0b:95:c0:9d:a5:3d:26:d9:84:
67:ea:6d:87:f7:31:0c:9d:8c:00:99:8d:62:46:c6:
89:72:be:60:e4:b1:1f:cf:9d:31:2f:54:99:ca:e2:
42:22:aa:cf:f3:33:fe:0f:bc:7d:54:1a:6e:fd:55:
5d:cb:08:00:12:65:2e:61:8b:15:ce:5a:7d:1e:b2:
cb:d1:be:66:08:2a:ed:96:01:56:fc:e5:4e:50:b7:
f4:4f:a1:5f:c7:55:bd:88:5a:65:03:62:6b:21:61:
16:e6:b4:e3:d1:a5:70:fe:28:83:e1:85:aa:87:f0:
bf:21:ae:94:6b:24:85:f8:27:9d:80:62:79:04:d8:
cf:2d:c6:f5:7d:97:82:7e:2b:df:ae:74:ee:f8:8c:
70:35:ea:ad:d6:54:5c:0a:24:bd:28:31:7f:7f:7d:
b8:5b:c1:78:cd:60:64:74:96:cc:f9:d8:24:7d:58:
a8:4e:c7:f4:d4:0a:54:d2:e1:cd:64:3e:21:09:b1:
57:35:d5:d3:10:83:f6:72:77:48:1b:9f:d8:23:fa:
16:68:5c:32:46:e8:ae:28:89:9a:49:e5:51:c5:43:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2C:E6:A7:83:5F:29:15:58:3A:04:B1:42:08:3E:0F:A6:0E:E9:F5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/uCzmp4NfKRVYOgSxQgg-D6YO6fU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.69.47.224/27
Signature Algorithm: sha256WithRSAEncryption
b2:ad:23:f1:00:44:82:06:c1:f0:5a:41:67:a0:49:fd:99:27:
61:5c:fa:a2:f0:31:97:ba:e1:ee:1e:d6:74:de:56:8e:85:06:
37:80:34:26:0a:64:fa:b7:0d:43:fe:5b:f7:6c:23:4c:5e:4c:
58:cc:4d:80:a3:b2:10:88:43:79:be:f4:f3:f5:41:3d:de:d8:
97:24:4b:28:ec:c7:55:0a:98:7b:1a:f5:0d:49:c6:b0:e3:29:
37:66:29:30:01:cf:18:1e:1e:a0:11:d0:53:93:27:42:f9:5f:
52:c5:16:3c:98:03:2e:95:15:41:15:63:e1:49:4a:ba:67:dd:
e3:cb:0d:d8:f4:0e:26:a0:00:34:fe:cc:4b:90:44:f7:71:c6:
82:e4:81:62:2b:2b:ff:cf:7c:cd:90:ec:1d:73:d7:48:e0:22:
98:ec:d3:fb:74:26:e4:bc:fa:5e:52:55:48:ca:96:c7:b6:04:
ad:0c:8d:96:e0:3d:91:40:5f:45:a6:b3:48:93:96:09:15:d3:
5d:66:cc:b5:d3:f3:db:a0:d8:c1:f6:04:a0:07:34:5b:bd:e5:
a2:80:e7:38:41:c4:31:6f:6a:39:56:ce:bc:01:c9:fb:c3:2e:
7b:47:6b:1d:a3:22:8f:c6:46:d9:43:ae:3e:8e:46:31:d1:ec:
7e:76:74:25
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICDVswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMjA4MDgw
MzU1NDFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEI4MkNFNkE3ODM1RjI5
MTU1ODNBMDRCMTQyMDgzRTBGQTYwRUU5RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9waLZkFSQSsI03ngv0IkrxEbpYBLESi+3yT3vt0uSAN6QJguV
wJ2lPSbZhGfqbYf3MQydjACZjWJGxolyvmDksR/PnTEvVJnK4kIiqs/zM/4PvH1U
Gm79VV3LCAASZS5hixXOWn0essvRvmYIKu2WAVb85U5Qt/RPoV/HVb2IWmUDYmsh
YRbmtOPRpXD+KIPhhaqH8L8hrpRrJIX4J52AYnkE2M8txvV9l4J+K9+udO74jHA1
6q3WVFwKJL0oMX9/fbhbwXjNYGR0lsz52CR9WKhOx/TUClTS4c1kPiEJsVc11dMQ
g/Zyd0gbn9gj+hZoXDJG6K4oiZpJ5VHFQzIRAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUuCzmp4NfKRVYOgSxQgg+D6YO6fUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC91Q3ptcDROZktSVllPZ1N4UWdn
LUQ2WU82ZlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFy0Uv
4DANBgkqhkiG9w0BAQsFAAOCAQEAsq0j8QBEggbB8FpBZ6BJ/ZknYVz6ovAxl7rh
7h7WdN5WjoUGN4A0Jgpk+rcNQ/5b92wjTF5MWMxNgKOyEIhDeb708/VBPd7YlyRL
KOzHVQqYexr1DUnGsOMpN2YpMAHPGB4eoBHQU5MnQvlfUsUWPJgDLpUVQRVj4UlK
umfd48sN2PQOJqAANP7MS5BE93HGguSBYisr/898zZDsHXPXSOAimOzT+3Qm5Lz6
XlJVSMqWx7YErQyNluA9kUBfRaazSJOWCRXTXWbMtdPz26DYwfYEoAc0W73looDn
OEHEMW9qOVbOvAHJ+8Mue0drHaMij8ZG2UOuPo5GMdHsfnZ0JQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org