Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Aa7Sg231MF7G5WR1MdZJ28YVCyE.roa
File: Aa7Sg231MF7G5WR1MdZJ28YVCyE.roa (raw, json)
Hash identifier: q4x1dxngh1mN+Nn0eKzXS/cTmr200LRsd27bVrv6E+E=
Subject key identifier: 01:AE:D2:83:6D:F5:30:5E:C6:E5:64:75:31:D6:49:DB:C6:15:0B:21
Certificate issuer: /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Certificate serial: 0B2C
Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Aa7Sg231MF7G5WR1MdZJ28YVCyE.roa
Signing time: Thu 15 Sep 2022 02:48:41 +0000
ROA not before: Thu 15 Sep 2022 02:48:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131660
IP address blocks: 168.95.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2860 (0xb2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Validity
Not Before: Sep 15 02:48:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=01AED2836DF5305EC6E5647531D649DBC6150B21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:59:90:cd:0d:69:5f:cb:e1:ed:26:68:87:
fe:86:fd:71:3b:06:80:75:dd:9b:04:50:3f:4d:ba:
62:b7:5d:b8:32:95:a8:b8:d9:e7:f3:12:51:08:45:
72:46:36:df:02:c1:f2:49:a8:63:e9:e9:30:87:af:
e8:4b:5b:ef:c8:64:2f:e0:d9:5a:aa:98:a5:eb:dc:
d1:1a:59:5d:88:11:b6:d3:e1:36:01:35:e7:4b:2f:
5a:f9:59:28:bf:3d:60:08:4d:fd:5a:25:14:82:7c:
07:a3:7e:c6:8f:38:dc:c3:a6:89:28:8f:ed:44:70:
00:33:8c:5f:b0:8c:13:d1:54:41:a9:75:f8:15:89:
c7:8b:b5:2e:68:e1:46:fa:c6:8e:a3:4c:a1:18:ca:
65:72:04:48:ee:98:82:6a:13:5f:bc:bd:4d:7a:bc:
68:8d:46:7c:61:4f:84:ae:6e:ed:11:cf:1f:ab:f0:
06:cc:27:e7:77:d0:5d:b3:1e:13:bb:41:61:b3:a5:
dc:6c:cf:2e:cc:e0:63:88:2e:d9:0c:0a:70:56:15:
12:82:5d:e3:ae:d1:17:49:b4:4e:c5:5c:ee:40:34:
10:f9:3d:a7:2c:8b:ae:42:ea:58:42:5a:d5:13:da:
69:20:9a:05:fc:64:c3:e7:49:84:d9:e2:46:80:e2:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AE:D2:83:6D:F5:30:5E:C6:E5:64:75:31:D6:49:DB:C6:15:0B:21
X509v3 Authority Key Identifier:
keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Aa7Sg231MF7G5WR1MdZJ28YVCyE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
168.95.245.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c3:88:e8:dc:40:c7:7d:1c:4e:14:b8:4b:2a:48:1f:4b:66:
a7:5e:cb:f6:f3:89:e2:82:aa:9a:43:76:c7:41:77:21:60:2c:
0e:7b:e0:10:9d:05:5a:f2:9f:26:b1:70:bf:5e:9a:b7:d2:08:
ff:9b:7f:05:29:d9:25:1e:d4:8a:a2:8a:e5:74:f9:c0:22:22:
f8:50:7c:6d:3b:3b:58:6e:de:82:c8:44:cf:06:48:30:92:cd:
43:ad:bb:a7:0c:b8:84:8c:42:55:07:6f:fe:f6:b0:58:15:a0:
f4:7a:50:c7:b2:72:8b:8c:e7:6f:e8:a7:87:80:83:f4:d6:d8:
c3:58:49:ce:1a:3d:52:82:7f:b5:5e:77:77:44:58:22:5e:c3:
e6:75:3a:8a:43:61:dd:f8:26:0f:5f:40:94:27:ec:42:24:46:
24:0a:a5:53:3c:32:50:cb:46:7c:41:28:73:66:04:0e:06:1a:
2f:bb:6c:03:d8:37:a8:bb:aa:f7:88:8f:f9:e8:85:ae:3a:f2:
89:de:f9:d5:d0:2e:43:21:0e:23:4a:c0:2b:43:f3:33:e1:88:
78:ed:f1:9e:0d:1d:15:29:6e:ac:89:64:81:52:3c:45:4a:a4:
ee:f5:f9:f2:c6:2d:ca:58:3d:40:aa:fe:a6:9b:2c:15:41:61:
c9:c9:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org