Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ve67Lz4vXYgS3SaUiyD-dYQozsQ.roa
File: ve67Lz4vXYgS3SaUiyD-dYQozsQ.roa (raw, json)
Hash identifier: Va5wAJfqVYHqtoLj6gdVJj2lGNlz8/X4SOK5QMP1IiQ=
Subject key identifier: BD:EE:BB:2F:3E:2F:5D:88:12:DD:26:94:8B:20:FE:75:84:28:CE:C4
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 084E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ve67Lz4vXYgS3SaUiyD-dYQozsQ.roa
Signing time: Tue 29 Sep 2020 09:58:35 +0000
ROA not before: Tue 29 Sep 2020 09:58:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17421
IP address blocks: 114.136.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2126 (0x84e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:35 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BDEEBB2F3E2F5D8812DD26948B20FE758428CEC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:7e:e5:59:af:26:45:a5:7e:51:94:38:55:
d1:a6:49:da:de:04:08:86:9b:23:2a:9b:94:1c:f8:
e6:80:1e:3d:a3:81:9c:39:90:96:87:69:45:77:74:
08:36:49:3f:4f:6e:5c:18:f6:03:8f:1e:d0:de:3d:
b2:aa:1f:79:e8:15:59:37:b9:11:04:e6:bf:e3:75:
f3:33:97:c8:1a:20:34:a1:d1:84:b6:db:80:c2:01:
9b:af:9b:e3:88:cb:05:ab:25:ff:3d:67:b3:73:4e:
ac:54:d2:dc:b9:af:d8:aa:a7:88:b8:a6:ca:c5:ca:
b8:e3:41:b4:50:e5:75:43:56:5c:1d:2c:cc:2c:a3:
71:09:12:14:d7:ff:75:26:ee:4c:d2:b4:ac:05:21:
3c:25:53:d9:43:08:b2:3d:32:5c:7d:66:18:67:55:
ef:55:26:0b:5a:b0:9f:37:18:4d:ae:9b:88:4a:71:
cd:14:6a:ad:3d:5e:38:8c:2c:85:7e:79:fc:e1:08:
f0:fd:f3:38:f8:85:49:42:b7:43:f8:c3:fd:f7:9a:
7f:e7:a7:cf:13:87:41:20:d4:26:e3:04:c6:08:f1:
fb:21:a2:4f:a2:a1:73:d1:1d:73:e8:0d:96:9b:dd:
3d:a3:1a:a7:5d:15:62:d0:b9:ff:87:67:37:11:31:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EE:BB:2F:3E:2F:5D:88:12:DD:26:94:8B:20:FE:75:84:28:CE:C4
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ve67Lz4vXYgS3SaUiyD-dYQozsQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.136.0.0/15
Signature Algorithm: sha256WithRSAEncryption
ab:a2:90:22:1a:99:bc:4a:ee:ca:51:d1:bb:db:61:a9:0d:ba:
c2:f0:58:15:0c:1d:0e:4e:10:90:c5:77:2c:e9:20:9f:61:a0:
87:42:c3:46:0b:19:56:d8:ca:84:0b:3d:e3:52:2c:9b:8a:1e:
a9:52:ee:97:b9:60:f9:72:d9:c0:09:b3:0e:c4:89:ee:1d:d9:
c7:87:b5:31:e1:a3:e1:94:f0:8a:e7:80:51:88:d5:cf:91:b7:
76:69:07:7d:8c:ca:cd:57:c2:1e:b5:9b:a5:04:c5:d3:42:44:
0d:bd:da:53:6d:bb:70:bf:f1:f7:ae:65:64:d4:19:68:d2:8b:
6d:7f:ab:f1:11:4e:51:c4:9e:1a:f2:4d:b5:89:d2:2a:f2:da:
6a:ac:25:df:1e:87:a6:14:05:4e:18:82:24:af:fe:9f:d7:01:
29:ef:4b:92:19:73:9e:9c:36:33:62:18:b2:d8:5f:e2:24:21:
b5:b7:be:d5:8e:a4:fa:e6:2e:3a:c5:20:cf:ec:8f:ad:48:a8:
12:19:30:d4:81:8d:b0:2a:cb:ae:14:cf:c7:70:30:17:4b:72:
9c:41:98:75:b8:18:38:1c:d0:fa:32:6f:f5:2c:d3:74:8e:4e:
12:26:7c:13:22:2d:f8:3a:f2:22:3c:75:40:cb:44:ce:3f:d0:
21:7c:03:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org