Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/vYs6XcNGET6Yyr6yCVAGSZEbXZ4.roa
File: vYs6XcNGET6Yyr6yCVAGSZEbXZ4.roa (raw, json)
Hash identifier: 26M978tre4wUMBPg0k81pX5/IG+qHc/0trGUlN1mu0s=
Subject key identifier: BD:8B:3A:5D:C3:46:11:3E:98:CA:BE:B2:09:50:06:49:91:1B:5D:9E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C0A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vYs6XcNGET6Yyr6yCVAGSZEbXZ4.roa
Signing time: Wed 29 Sep 2021 02:50:47 +0000
ROA not before: Wed 29 Sep 2021 02:50:47 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 103.25.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3082 (0xc0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:47 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BD8B3A5DC346113E98CABEB209500649911B5D9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:0b:b9:67:bc:04:84:a6:41:4f:32:de:68:
e1:42:94:dc:05:69:4d:d1:38:4b:02:7d:5c:c5:f7:
01:e5:b2:b3:3b:32:39:8d:37:7c:38:82:47:35:19:
9a:d7:7b:41:71:ab:46:78:10:e8:e7:a1:71:30:99:
64:99:49:3a:00:43:3e:a4:01:fc:4e:13:ef:fa:42:
14:30:a0:31:10:6a:10:ce:88:bf:6d:70:5a:2e:00:
c1:de:23:4d:a7:a8:43:35:ba:34:cc:f2:b7:50:66:
f2:4c:0e:eb:84:79:f4:f7:7a:ab:b4:24:5c:4b:93:
a9:46:07:1d:04:44:23:7d:bf:a6:89:f0:e0:0f:1b:
cb:92:b3:e6:ad:36:39:2a:10:ea:9a:eb:1b:0e:49:
3e:d2:9e:2f:3d:f5:3d:65:b7:c2:61:65:14:0f:46:
c1:e5:25:09:de:32:c8:bf:1c:be:cc:1b:4e:8d:bc:
ea:e7:5d:43:4a:c7:5d:3c:27:d8:ec:ff:9a:9b:cb:
69:f0:2d:fb:fd:f6:6a:09:6a:35:e0:29:40:4b:64:
d5:d6:d4:6a:c0:dd:8b:63:c7:d5:e8:94:95:7d:81:
52:f1:b2:66:16:e5:4b:bf:a2:0f:1b:e6:72:88:36:
39:60:e5:ee:be:f9:c3:b7:f4:23:64:49:ea:a5:cc:
1f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8B:3A:5D:C3:46:11:3E:98:CA:BE:B2:09:50:06:49:91:1B:5D:9E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vYs6XcNGET6Yyr6yCVAGSZEbXZ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.236.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:d0:ef:30:0e:6f:47:7b:d0:a2:67:6f:59:b4:3e:34:dd:8e:
90:ff:f6:0c:b2:38:c3:c2:0f:df:ca:4f:2e:ab:1e:ac:05:cc:
e5:9e:6a:27:2d:dd:e7:3e:64:bc:e1:d7:f3:8d:4e:35:cd:3b:
41:10:f2:6d:cf:ea:61:b0:d1:04:1d:e4:23:4a:ec:ec:63:7f:
7a:49:9d:c1:8d:4c:01:1c:d5:f2:3e:9a:f8:6f:87:89:6b:84:
7c:ab:55:26:34:ca:2e:62:4c:8e:fb:bf:b9:28:0d:18:79:13:
70:ac:67:35:96:7d:86:4d:98:49:57:b8:1a:0a:2a:88:71:ef:
a6:ab:95:1c:12:c3:a0:9e:bb:fb:05:83:67:be:3e:3b:ed:70:
91:6c:59:64:0c:3b:de:24:36:0b:97:86:19:03:30:4b:ea:bd:
5d:ac:c9:fb:9c:ec:02:0d:25:da:13:d5:db:5f:6d:3e:ea:9b:
07:c4:c4:22:8f:89:08:a3:9e:23:c4:2b:19:cc:0c:7b:81:03:
28:05:a0:a4:a2:32:1d:01:bc:0e:b7:01:ed:08:bf:44:bb:08:
74:50:f9:95:bc:83:6f:17:64:18:50:69:7f:e3:37:f9:17:06:
37:85:28:83:c1:99:83:61:62:c1:d7:44:51:0b:94:ea:5b:be:
50:ec:cb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org