Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/BWVHlbumcGpXnLbokOFmvk_XhPQ.roa
File: BWVHlbumcGpXnLbokOFmvk_XhPQ.roa (raw, json)
Hash identifier: BiTglLo6q/qxoL6nRzIqR9mTLxkwT6qXG4Thc9pkqew=
Subject key identifier: 05:65:47:95:BB:A6:70:6A:57:9C:B6:E8:90:E1:66:BE:4F:D7:84:F4
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C5D
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/BWVHlbumcGpXnLbokOFmvk_XhPQ.roa
Signing time: Wed 29 Sep 2021 02:51:11 +0000
ROA not before: Wed 29 Sep 2021 02:51:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17421
IP address blocks: 116.59.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3165 (0xc5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=05654795BBA6706A579CB6E890E166BE4FD784F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:11:8a:fa:89:11:6e:64:ef:30:7d:4e:86:
0b:d4:db:a7:da:b6:c4:13:bb:89:7a:6b:72:5a:0b:
72:5e:1f:bd:7d:09:2c:de:e3:15:cb:2c:94:25:9d:
f8:72:23:cf:04:c4:bf:b8:f6:42:33:6b:3c:cc:02:
15:ad:6e:9d:9d:38:82:19:5e:8e:98:26:d5:3b:15:
21:ea:9a:56:c6:13:99:bd:af:cf:6a:d8:c3:76:f9:
76:1c:29:4a:ac:45:a6:1c:1e:6f:fb:9f:e3:d2:b3:
80:b9:4c:15:27:d1:ce:9d:d8:97:0f:da:88:fe:fe:
ea:ee:41:4e:9c:24:04:75:ca:00:96:a4:9a:dc:71:
90:aa:74:a0:5d:59:c6:aa:8e:df:fc:45:2c:15:22:
a0:c2:5f:24:d0:ec:ea:4c:e9:ce:d4:25:ca:44:0f:
f3:bf:84:d9:e0:89:9a:32:2e:40:47:0f:a9:cb:0c:
8d:21:ff:33:7f:4f:06:28:3a:64:3b:6b:6e:4d:1f:
d2:b9:c7:2d:a3:34:e1:22:96:e3:7b:9d:63:c2:a6:
6d:bf:8f:c5:71:1c:5c:57:98:f9:c8:a8:f4:58:f0:
12:0a:6a:41:f8:64:55:c1:4d:4c:22:7a:8d:34:3e:
80:59:49:e4:a5:99:a5:d5:2e:07:c2:fc:23:22:c6:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:65:47:95:BB:A6:70:6A:57:9C:B6:E8:90:E1:66:BE:4F:D7:84:F4
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/BWVHlbumcGpXnLbokOFmvk_XhPQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
116.59.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:77:a4:00:59:02:a2:6f:a6:52:9f:c3:ab:91:b0:de:27:f4:
19:17:aa:0e:23:15:3b:07:bc:39:ec:cb:34:cd:31:15:cd:18:
d3:3c:0e:25:00:89:1c:08:1c:8f:10:c8:86:29:63:fb:4a:35:
9b:18:e2:1f:22:d5:90:1c:34:b2:07:0b:de:b0:7b:4d:2d:2d:
82:d6:d3:ad:6a:1f:1d:58:e0:17:bc:34:67:7e:8e:09:de:27:
bd:ed:18:85:6b:96:f7:ab:14:2a:d6:82:dc:dd:d3:6e:e1:9f:
16:86:83:04:b4:29:35:32:3e:f9:a6:2c:ca:8d:02:d3:86:4f:
79:16:57:d0:35:b2:c1:f0:a6:ab:c9:e2:2a:1b:07:88:52:2b:
6b:9a:50:ff:96:7a:3a:dd:7a:a0:47:ab:4f:e7:61:c3:66:08:
63:9d:44:b7:bf:d9:2c:75:65:39:e8:15:b9:b1:c1:42:77:27:
83:8c:c1:63:54:4f:e4:af:52:d3:1b:bc:c0:4a:81:e8:16:4f:
11:97:ee:55:33:4e:5b:f4:b3:0b:e9:d3:1f:05:a9:8d:f6:6d:
23:0a:d1:73:c8:6d:6d:ff:02:b1:dc:ab:fc:b0:b8:78:85:06:
08:5d:56:d4:d8:de:79:10:b3:67:4b:f6:0c:22:01:ff:70:9a:
38:cd:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org