Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/wfTPAKruTuUA-721WTkX6AHM4-o.roa
File: wfTPAKruTuUA-721WTkX6AHM4-o.roa (raw, json)
Hash identifier: nqoOn1PcGcxSdHqdzsFsu7Htk4C74Ts7t8Ht1MpCw9I=
Subject key identifier: C1:F4:CF:00:AA:EE:4E:E5:00:FB:BD:B5:59:39:17:E8:01:CC:E3:EA
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0A87
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wfTPAKruTuUA-721WTkX6AHM4-o.roa
Signing time: Sun 07 Feb 2021 11:38:09 +0000
ROA not before: Sun 07 Feb 2021 11:38:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 202.39.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2695 (0xa87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:38:09 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C1F4CF00AAEE4EE500FBBDB5593917E801CCE3EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:bf:13:cc:54:aa:4d:21:69:f3:5f:17:8f:
e9:21:18:e7:82:be:8b:6c:bc:23:cc:59:84:04:02:
bd:ba:56:90:b4:dd:a0:0b:85:b7:e9:ac:64:cc:a1:
da:55:90:82:13:9d:66:3c:16:c8:fb:d6:c0:59:c5:
48:1a:c2:5c:82:59:e4:c5:dd:bd:8e:2a:c2:76:3c:
d5:2b:b5:1c:16:a7:79:5f:c0:9f:7f:53:d3:ea:69:
ee:a1:ce:18:fc:7b:25:b8:f1:f1:d6:2f:a3:a1:19:
57:c7:6b:06:32:d3:f6:45:8a:4e:50:39:fb:14:1a:
13:a0:b0:9f:44:73:d8:e0:2c:ec:8c:af:47:1d:1d:
72:ce:bf:06:13:f7:84:db:82:c0:02:f0:77:26:b2:
de:a4:e4:28:d9:89:38:d7:41:0f:43:40:8e:a0:ac:
57:b6:ff:2e:f0:5a:bf:7e:9b:ce:c2:16:42:4b:ec:
2b:4f:6a:81:26:98:35:5b:d7:53:66:88:45:f7:e7:
7e:68:ba:36:fb:3e:2c:23:82:ef:2c:5c:27:16:cd:
37:6a:15:6d:c2:7a:51:fe:c4:e3:8b:95:6a:4c:97:
19:56:f2:84:c5:f7:c4:17:d1:ec:b7:a8:03:5c:02:
e0:67:1e:1f:76:8f:a2:92:2e:9c:7b:1b:f2:d7:f3:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F4:CF:00:AA:EE:4E:E5:00:FB:BD:B5:59:39:17:E8:01:CC:E3:EA
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wfTPAKruTuUA-721WTkX6AHM4-o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.0.0/18
Signature Algorithm: sha256WithRSAEncryption
a4:a8:5f:94:37:55:fb:4c:ab:b9:e1:f6:2c:d9:65:59:0a:54:
33:c0:ab:0b:53:80:f5:a9:0b:b8:c7:a9:63:2e:92:d4:45:42:
63:be:98:90:71:d1:3b:d6:8b:ce:e5:98:d0:e2:d0:7a:67:d7:
57:8d:66:4e:6b:8f:32:30:6b:b6:03:1f:e2:50:4b:ca:e8:e9:
44:0c:c9:96:5a:20:45:83:bc:40:89:71:23:b1:b5:38:b5:4c:
3e:2e:c5:cd:6c:d1:e3:b3:37:e8:ed:8d:92:dd:26:2c:a2:f9:
cd:8a:1c:b1:fb:48:03:25:55:4d:f8:94:48:a7:f6:42:db:b6:
f7:38:e0:31:e0:86:40:2a:01:db:2f:0d:94:14:0e:60:c2:8c:
55:39:3f:7e:46:3b:61:67:20:bf:00:f8:df:13:12:19:64:73:
c1:15:64:3b:f5:45:4a:88:6c:09:df:7f:46:ee:a5:b7:0c:4f:
fd:bd:e1:23:dc:33:bc:93:f5:b7:21:2b:e4:dc:0b:45:13:6b:
17:97:bc:6e:89:4a:06:91:60:2d:25:a8:72:0f:03:22:0d:61:
a3:da:04:1e:2d:1e:60:f0:a0:e1:00:e8:4a:35:df:7e:d5:66:
c9:21:bf:f2:eb:3b:0d:2c:94:47:42:66:49:11:c8:f0:44:00:
2b:ef:32:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org