Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Frn7s352zsjyfCxCLgaUlbns5Ak.roa
File: Frn7s352zsjyfCxCLgaUlbns5Ak.roa (raw, json)
Hash identifier: mk9VZn4B5cdRUd7ZYaFwhuJT8JKtopHS2vElDDBBM+g=
Subject key identifier: 16:B9:FB:B3:7E:76:CE:C8:F2:7C:2C:42:2E:06:94:95:B9:EC:E4:09
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C0E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Frn7s352zsjyfCxCLgaUlbns5Ak.roa
Signing time: Wed 29 Sep 2021 02:50:48 +0000
ROA not before: Wed 29 Sep 2021 02:50:48 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 118.160.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3086 (0xc0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:48 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=16B9FBB37E76CEC8F27C2C422E069495B9ECE409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:f2:27:86:44:cd:fb:60:dc:11:d8:6b:95:
92:8a:ae:21:45:d8:8a:86:f0:07:53:9a:65:b3:06:
d7:f4:a7:9b:29:2a:1a:b8:ca:37:c9:ec:cb:f4:63:
75:87:65:2b:53:ce:54:64:0e:9b:47:c6:66:84:e3:
d9:56:b4:43:82:80:a2:f5:87:c4:43:d1:22:e2:50:
5c:03:61:b5:cb:4c:4a:70:60:47:f5:a4:b3:cd:25:
b6:1a:9f:41:98:89:f4:b0:2d:61:45:71:6f:6d:c4:
b1:4a:d0:21:f8:e4:c6:d2:53:66:f0:03:4b:f2:85:
3d:8f:f6:31:60:d0:89:6d:7d:33:73:54:81:c7:26:
c3:1a:d0:ce:12:d0:3e:0d:6b:78:30:49:04:fc:ea:
de:a3:cd:20:42:35:3f:42:bb:d3:e4:6d:a3:24:c7:
ca:d5:14:c9:51:de:bc:c8:9d:ba:ad:d5:5a:3b:a3:
76:56:6e:01:1e:be:8d:4d:56:84:1f:b6:67:0d:08:
6c:2f:29:83:cd:a9:40:3b:16:89:ac:c8:7d:9d:8c:
06:ff:d8:c6:f2:08:80:9e:5e:84:ab:49:e3:1e:50:
24:f8:f7:6d:0f:23:9e:2b:1b:28:c2:6a:a6:15:c2:
93:47:42:0f:5e:9c:96:d3:b2:4d:41:63:48:f5:fa:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B9:FB:B3:7E:76:CE:C8:F2:7C:2C:42:2E:06:94:95:B9:EC:E4:09
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Frn7s352zsjyfCxCLgaUlbns5Ak.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.160.0.0/13
Signature Algorithm: sha256WithRSAEncryption
31:d1:55:13:aa:e6:4f:d0:0e:52:30:0c:f3:ec:4b:11:6b:d5:
c4:10:4f:cd:94:d1:60:ca:21:32:29:fc:5c:a2:9b:19:b8:df:
0e:c4:39:a7:8e:23:d9:f3:85:e6:17:27:19:9d:61:79:bb:89:
70:51:28:a4:d3:e6:f7:45:58:9f:6c:bb:6e:42:ee:3a:bb:ea:
75:63:a2:00:df:1b:24:88:1b:7e:f8:a3:9a:5e:87:aa:20:f5:
d8:55:4d:10:65:f1:98:9f:94:b0:0e:09:a2:b2:9a:21:88:a6:
a6:83:81:26:07:c3:c5:39:a8:6c:0a:49:0b:50:a7:9a:f6:26:
d7:b6:06:6e:b0:29:0c:bb:3b:f9:d9:fe:c3:bc:32:97:d0:1c:
d3:f0:3a:74:d8:7b:6c:6e:4f:ec:20:da:47:c9:ad:d2:6d:00:
b3:e4:c2:b7:26:62:3f:c9:c3:29:d7:c0:6d:f4:dd:51:33:07:
76:ff:51:b2:c4:75:d6:8b:27:27:5e:97:a0:7a:a8:e8:27:46:
25:b0:c4:41:00:80:e7:e6:64:00:9e:33:44:6d:17:de:13:fa:
35:aa:ee:e7:ac:82:e3:fa:26:9e:62:35:85:7f:b2:2e:14:eb:
ee:78:76:75:f7:ce:68:6d:9c:1f:f0:8b:16:37:6f:97:a0:79:
c5:08:c7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org