Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/vDRyzvRwvCJtagtw5l3bwK0fKcA.roa
File: vDRyzvRwvCJtagtw5l3bwK0fKcA.roa (raw, json)
Hash identifier: azelddFYYzV3YVrgRLfdEQ82iq//NsDOnwevS0uhty8=
Subject key identifier: BC:34:72:CE:F4:70:BC:22:6D:6A:0B:70:E6:5D:DB:C0:AD:1F:29:C0
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C52
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vDRyzvRwvCJtagtw5l3bwK0fKcA.roa
Signing time: Wed 29 Sep 2021 02:51:09 +0000
ROA not before: Wed 29 Sep 2021 02:51:09 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 10126
IP address blocks: 175.111.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3154 (0xc52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:09 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BC3472CEF470BC226D6A0B70E65DDBC0AD1F29C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:26:68:b3:73:bc:c1:1f:bc:bc:8c:3a:bf:
be:78:0e:84:62:b4:09:f5:ad:12:23:dc:1c:09:e1:
c0:22:be:b5:4c:cc:4f:90:c8:e6:05:cc:27:36:be:
48:13:16:cf:1f:e4:09:95:53:d1:91:a9:98:d1:47:
2c:56:63:c3:2f:4f:43:25:ab:24:d2:a1:50:99:62:
df:6d:e5:eb:4e:ba:bf:e4:63:b3:ac:89:19:12:1b:
df:d7:d5:af:fa:bc:7e:84:66:0a:9a:7c:0b:6e:da:
15:28:94:6c:f5:58:36:3b:3b:e4:f3:1f:e3:d6:9c:
c2:a2:9b:0b:93:d7:fc:ff:1b:5f:62:93:c3:5e:b4:
97:81:a9:24:2d:0e:e5:1a:5c:27:a8:c5:74:bd:2e:
64:ab:cd:cf:80:83:0b:da:76:28:63:8d:2c:81:99:
34:2e:a0:9a:74:26:ab:8d:94:f4:3b:5f:aa:b7:d7:
4c:65:71:d1:e9:8f:d9:5a:2d:f7:82:1c:91:a3:40:
5b:4a:79:f1:05:46:b1:b2:0a:fc:db:1f:18:61:1c:
ae:91:31:4f:1c:76:97:ee:d0:48:6b:bb:ea:c3:45:
04:62:c0:77:2a:2e:e6:95:f7:8e:5c:ca:9a:9e:b0:
1f:8f:11:19:02:12:3c:3d:64:ee:a8:c5:e4:87:45:
26:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:34:72:CE:F4:70:BC:22:6D:6A:0B:70:E6:5D:DB:C0:AD:1F:29:C0
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vDRyzvRwvCJtagtw5l3bwK0fKcA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.192.0/18
Signature Algorithm: sha256WithRSAEncryption
ba:c4:ae:b4:fd:9a:e2:44:23:50:5c:71:ac:82:6b:ee:82:ee:
7e:f3:d6:b9:96:42:b8:62:a8:1d:cd:6b:a8:cb:5b:9c:31:84:
cf:97:c0:fb:08:4f:a5:b9:e6:c9:c3:f2:73:6f:bf:78:64:36:
8f:af:10:b9:5d:15:28:24:a7:87:ab:c6:fa:b0:8a:a8:fc:aa:
26:a8:3d:86:ba:62:bc:09:23:66:70:ef:6b:81:37:9f:61:8b:
58:23:36:2c:59:fb:f9:49:27:e5:3b:37:cb:46:bb:15:40:de:
58:0f:13:32:c0:39:9c:71:89:78:59:ae:ad:e2:93:5c:bf:61:
d8:de:68:c0:1a:fb:24:d5:b5:4e:89:74:df:db:2d:5d:07:a2:
f2:84:39:16:05:50:80:07:16:be:07:ea:29:e8:62:1e:99:d2:
06:c5:bb:44:0f:88:62:68:d4:95:af:52:ca:ac:21:3a:8b:e6:
b4:64:f1:fb:cb:a1:fc:cc:20:f8:8b:b1:6b:72:31:c2:4e:f7:
fd:a3:b2:6b:af:18:5c:9b:71:7e:38:d3:53:4a:bd:d0:f9:1d:
53:c6:f9:ea:af:8a:15:89:4b:69:7a:c2:16:23:73:10:fb:5c:
ae:aa:96:b6:a4:57:7e:a5:a2:5e:b5:5e:ea:d4:00:01:bd:89:
50:3f:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org