Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/uDl_aLlR7XT2IBCGvrKB71Wrxfc.roa
File: uDl_aLlR7XT2IBCGvrKB71Wrxfc.roa (raw, json)
Hash identifier: jVTPh6PdDSgDSXS0MwXhTZOSAHRY+KPvJN7bkmzlsPI=
Subject key identifier: B8:39:7F:68:B9:51:ED:74:F6:20:10:86:BE:B2:81:EF:55:AB:C5:F7
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 080C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/uDl_aLlR7XT2IBCGvrKB71Wrxfc.roa
Signing time: Tue 29 Sep 2020 09:58:15 +0000
ROA not before: Tue 29 Sep 2020 09:58:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 221.120.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060 (0x80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:15 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B8397F68B951ED74F6201086BEB281EF55ABC5F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:58:b5:fe:3c:16:8a:a7:47:e8:66:5c:0b:
1a:02:e2:f8:61:db:ae:ff:5f:66:52:4b:d8:00:06:
9e:76:75:f6:66:55:2c:a4:ea:8b:bd:75:24:a2:72:
ab:0e:ce:f1:92:af:41:07:94:30:6e:80:5c:24:1d:
e3:2d:1b:fb:b9:e9:45:ba:27:40:0f:5e:d9:23:cf:
22:9e:43:06:6c:f9:b4:26:34:12:6a:c1:00:57:91:
66:f3:28:e8:88:5a:ff:ca:b0:be:21:79:15:9e:9c:
42:cc:1f:a0:53:53:25:ec:38:e6:5d:f0:d1:81:bc:
9b:31:5d:55:06:22:5a:04:26:bb:96:e2:92:e6:9a:
06:5a:b2:aa:20:a6:c1:fc:1d:20:ab:f6:3c:51:6e:
02:ce:76:c2:14:f9:7b:1c:45:7c:22:93:eb:75:5c:
7c:ad:b2:3f:9c:c4:c0:97:0a:fb:d0:56:82:d5:4c:
73:b5:3a:f2:f3:5e:b5:eb:fb:12:5c:a7:45:84:90:
7e:a7:49:13:d7:14:84:f8:13:1e:3e:15:e4:83:44:
b4:23:9f:a5:a2:3d:95:4a:57:2a:f6:86:e8:91:23:
62:90:89:14:76:da:72:05:b3:95:6e:0e:44:22:07:
4d:bf:d5:e9:4d:a4:37:51:0b:66:79:98:15:e4:5a:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:39:7F:68:B9:51:ED:74:F6:20:10:86:BE:B2:81:EF:55:AB:C5:F7
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/uDl_aLlR7XT2IBCGvrKB71Wrxfc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
221.120.25.0/24
Signature Algorithm: sha256WithRSAEncryption
92:1b:30:2e:cc:d9:49:d0:66:59:28:94:0b:90:7e:8b:53:54:
23:f1:1b:b9:f2:57:94:77:28:03:fb:ed:27:09:fb:83:c2:60:
47:da:d0:46:e4:81:ba:aa:6a:2e:4c:23:e7:f0:8e:ff:4b:97:
e7:9b:44:35:e0:3b:63:a4:2c:ee:64:00:71:da:2d:be:9c:57:
58:bf:60:b2:7f:50:d4:4d:08:10:16:57:6b:14:4e:8b:c5:83:
fd:b8:99:b5:92:03:91:22:d6:e3:9d:cf:cb:dc:e2:68:9c:3b:
6e:d3:da:94:02:ce:d5:ce:4b:86:3e:90:ac:bc:c6:2f:69:d9:
d3:d3:e4:44:25:c1:39:55:04:84:a3:a7:cb:be:56:39:1f:f0:
1d:43:0b:f5:17:0c:b0:0b:99:cd:57:36:70:be:ba:82:94:67:
0a:ae:22:ce:60:93:2b:cb:c3:6a:03:39:0a:99:0f:00:e4:1d:
42:a5:44:cb:01:75:34:4e:45:d9:3b:09:ca:0d:1a:4d:b7:68:
25:35:38:42:db:b8:47:f2:89:f2:88:c0:53:8d:37:d6:80:4b:
c0:0e:fc:63:21:68:94:18:f0:12:c1:a6:2e:b5:b5:dd:1c:97:
6a:14:23:76:2b:17:8d:03:39:c9:17:0e:33:da:a5:ab:81:b6:
fa:88:38:36
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMDA5Mjkw
OTU4MTVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI4Mzk3RjY4Qjk1MUVE
NzRGNjIwMTA4NkJFQjI4MUVGNTVBQkM1RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQfFi1/jwWiqdH6GZcCxoC4vhh267/X2ZSS9gABp52dfZmVSyk
6ou9dSSicqsOzvGSr0EHlDBugFwkHeMtG/u56UW6J0APXtkjzyKeQwZs+bQmNBJq
wQBXkWbzKOiIWv/KsL4heRWenELMH6BTUyXsOOZd8NGBvJsxXVUGIloEJruW4pLm
mgZasqogpsH8HSCr9jxRbgLOdsIU+XscRXwik+t1XHytsj+cxMCXCvvQVoLVTHO1
OvLzXrXr+xJcp0WEkH6nSRPXFIT4Ex4+FeSDRLQjn6WiPZVKVyr2huiRI2KQiRR2
2nIFs5VuDkQiB02/1elNpDdRC2Z5mBXkWl+DAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUuDl/aLlR7XT2IBCGvrKB71WrxfcwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC91RGxfYUxsUjdYVDJJQkNHdnJL
QjcxV3J4ZmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3XgZ
MA0GCSqGSIb3DQEBCwUAA4IBAQCSGzAuzNlJ0GZZKJQLkH6LU1Qj8Ru58leUdygD
++0nCfuDwmBH2tBG5IG6qmouTCPn8I7/S5fnm0Q14DtjpCzuZABx2i2+nFdYv2Cy
f1DUTQgQFldrFE6LxYP9uJm1kgORItbjnc/L3OJonDtu09qUAs7VzkuGPpCsvMYv
adnT0+REJcE5VQSEo6fLvlY5H/AdQwv1FwywC5nNVzZwvrqClGcKriLOYJMry8Nq
AzkKmQ8A5B1CpUTLAXU0TkXZOwnKDRpNt2glNThC27hH8onyiMBTjTfWgEvADvxj
IWiUGPASwaYutbXdHJdqFCN2KxeNAznJFw4z2qWrgbb6iDg2
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org