Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/Hl5HNn4APvzHMwZC2XkMFoQZHYA.roa
File: Hl5HNn4APvzHMwZC2XkMFoQZHYA.roa (raw, json)
Hash identifier: a35aG1/oxmBJYL5URPuxWUcgM/25+2jYVr7HoU9aJAk=
Subject key identifier: 1E:5E:47:36:7E:00:3E:FC:C7:33:06:42:D9:79:0C:16:84:19:1D:80
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0937
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/Hl5HNn4APvzHMwZC2XkMFoQZHYA.roa
Signing time: Sun 07 Feb 2021 07:52:31 +0000
ROA not before: Sun 07 Feb 2021 07:52:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24168
IP address blocks: 121.50.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2359 (0x937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Feb 7 07:52:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1E5E47367E003EFCC7330642D9790C1684191D80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:60:30:b7:95:d3:82:4d:47:71:d9:3f:15:
1b:7d:08:85:c1:50:1a:3f:d0:22:4b:0a:65:b0:05:
f3:33:01:b2:ff:ab:77:0f:4f:18:46:61:bb:af:9c:
df:8b:59:6d:fd:44:c0:39:45:12:b3:8d:d0:51:bb:
48:d1:73:ad:64:02:ee:97:d3:a8:6d:06:6d:24:0d:
6e:b4:1e:5b:c5:64:1d:c2:0a:5b:06:e8:41:ef:17:
f8:f1:3e:50:e4:38:7e:86:55:46:8e:84:ef:9c:e7:
9c:08:3c:90:6b:8c:93:93:c4:a6:d4:97:7e:70:01:
7b:00:63:6d:b1:bc:14:e3:7d:64:c6:be:c0:ec:bf:
8e:e7:86:4c:c7:bc:69:20:bc:2c:96:3b:6a:c8:f8:
28:55:fe:cd:5b:db:aa:66:92:4f:c6:95:9a:e0:7f:
57:57:9e:e4:49:5c:cb:81:21:2e:e4:c9:08:b6:2e:
c4:eb:e7:df:97:f4:fb:c8:cf:49:a8:3e:9e:69:c0:
63:d2:f8:da:de:17:0e:10:54:ce:4a:e6:5f:11:a7:
ef:ea:01:4e:8d:60:80:45:2e:82:e7:ee:4c:06:87:
fb:6b:c0:7c:86:0c:b5:9e:6b:31:aa:fd:44:bd:9c:
ed:28:7d:ae:c7:62:26:7e:fb:6e:56:5a:12:e8:b9:
66:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5E:47:36:7E:00:3E:FC:C7:33:06:42:D9:79:0C:16:84:19:1D:80
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/Hl5HNn4APvzHMwZC2XkMFoQZHYA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.150.0/24
Signature Algorithm: sha256WithRSAEncryption
69:96:73:94:68:11:81:e4:03:83:75:37:da:78:38:66:9f:46:
80:4d:f2:e5:7c:dc:a3:aa:50:31:bb:fd:76:c6:3c:b1:01:3a:
cb:e8:2a:74:ad:bc:c1:46:1c:bf:45:df:2c:9a:35:fa:80:50:
35:c2:94:ea:ca:5a:82:9e:b0:77:22:03:45:8d:82:a9:46:e8:
42:c1:ec:86:17:c1:15:fc:d2:74:6a:7a:93:b6:4f:ed:34:9c:
c1:88:8f:f1:9f:c3:bf:13:3c:a6:f3:b1:4c:a7:08:71:33:3a:
77:c1:95:27:6c:32:12:16:a0:61:0c:32:af:40:f8:e7:50:ed:
60:51:4b:96:fe:52:ee:ff:e2:84:ae:11:73:c6:90:41:10:a8:
64:3f:ed:0b:78:16:a2:39:cd:f0:71:15:60:e3:17:8f:a2:29:
b5:83:42:53:d5:c4:fd:fa:ab:54:43:f2:64:58:b0:88:2a:3e:
e5:48:fa:60:04:f8:f8:05:59:9d:d2:8a:77:b2:31:09:03:e0:
da:e2:7d:89:fd:91:36:33:54:78:e8:54:99:8a:be:ac:af:d8:
91:93:75:53:14:65:f1:30:bd:86:31:9a:13:cc:52:81:ac:95:
d7:6a:13:d4:22:53:b3:dc:5d:c4:6b:6d:ed:8a:79:50:e4:5a:
cc:8d:ac:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org