Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/FvdTReqeyT2v_2ZbHeXnmSaXCqM.roa
File: FvdTReqeyT2v_2ZbHeXnmSaXCqM.roa (raw, json)
Hash identifier: /3gyL9sq9+z4idEy3Xp15mKjv5Yn5JNwYH8RIJhsOuo=
Subject key identifier: 16:F7:53:45:EA:9E:C9:3D:AF:FF:66:5B:1D:E5:E7:99:26:97:0A:A3
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C5F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FvdTReqeyT2v_2ZbHeXnmSaXCqM.roa
Signing time: Wed 29 Sep 2021 02:51:12 +0000
ROA not before: Wed 29 Sep 2021 02:51:12 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17421
IP address blocks: 111.80.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3167 (0xc5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:12 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=16F75345EA9EC93DAFFF665B1DE5E79926970AA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:32:a2:82:c3:64:d9:de:33:ef:13:57:38:
e3:f7:19:d8:a7:3f:61:cb:20:d3:e5:e6:29:4c:01:
df:d9:2c:29:d6:26:e7:68:3b:e9:82:fc:1a:21:07:
65:20:12:4d:9f:ed:25:82:72:cf:f8:92:2e:0c:8f:
25:7e:1e:02:18:c3:6e:70:1e:c4:d3:cd:14:fa:15:
f0:e0:92:82:e8:7f:60:fd:73:81:99:a3:2f:da:db:
24:51:fa:90:54:83:45:dc:92:16:2e:df:8b:c1:a4:
5e:ae:95:b5:bf:58:89:8e:05:d7:7e:5e:81:f0:9c:
cc:d4:ed:5b:99:10:6e:46:f6:ee:79:4e:86:6b:80:
c7:98:7c:ba:07:be:71:4c:24:52:dc:b7:5a:33:58:
4a:c4:86:d8:35:0b:0e:a3:b2:7e:b7:0b:35:c6:7f:
4b:c5:6e:c1:9b:b3:e8:33:3e:58:96:5b:80:31:ac:
9f:b8:18:ce:e4:bc:72:52:8f:ba:db:71:c2:f4:de:
83:9e:31:f4:9d:5a:1c:7c:ca:69:eb:85:5c:2e:4b:
a6:b2:5d:c9:4d:ba:5d:98:f5:35:64:84:77:47:00:
ca:bb:2a:0b:7e:a6:33:b6:f5:fc:56:0f:aa:b5:1f:
6a:ae:47:4a:3a:e4:24:ec:57:f3:46:0e:da:cd:07:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F7:53:45:EA:9E:C9:3D:AF:FF:66:5B:1D:E5:E7:99:26:97:0A:A3
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FvdTReqeyT2v_2ZbHeXnmSaXCqM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.80.0.0/14
Signature Algorithm: sha256WithRSAEncryption
5a:de:59:f2:0a:21:76:95:e1:09:e6:33:f6:19:39:6f:11:06:
3b:42:b2:23:d9:21:54:18:37:ca:f0:76:e6:15:98:be:1c:b3:
fb:00:8d:fd:11:ab:7f:35:33:73:12:95:2a:4f:2b:a8:34:4a:
db:c8:61:84:58:b3:e7:07:f4:98:01:53:f0:89:4f:25:23:03:
6a:00:26:2d:d3:ed:cf:0a:8c:87:09:d2:60:62:8f:79:db:80:
a1:c9:90:d7:98:7c:fd:1c:70:20:2c:a1:b3:93:9c:f1:99:d3:
7e:27:3e:d4:e1:57:a2:ee:42:6f:cd:3c:67:8f:3a:bd:33:84:
b9:91:3f:4b:7a:dd:f6:ed:19:a2:1c:8e:78:70:e8:ff:41:65:
a7:fa:33:db:78:96:1d:35:16:35:2d:af:f7:a5:f6:39:e2:9c:
19:85:94:db:25:2d:0b:8b:ce:cb:91:3f:02:4f:78:9a:9d:bc:
3a:87:ef:d7:9f:2b:3c:0b:1b:fd:c5:55:cb:0e:16:23:bc:43:
69:11:51:bf:54:2e:0a:32:20:fd:37:60:b4:4f:12:34:40:0a:
b7:f8:6d:f5:60:c7:ad:f6:16:89:30:28:51:eb:72:cc:50:67:
3b:e2:f3:bb:82:75:ae:de:39:62:2d:27:9d:82:c1:9e:1a:41:
c3:1e:f6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org