Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/GlNIVQ1tiU4ES54ZiRt6LomUx90.roa
File: GlNIVQ1tiU4ES54ZiRt6LomUx90.roa (raw, json)
Hash identifier: WR0Q9FnLEMgiUsOfG0+Ah5epQmyoa5CN8m0MLxbNx1k=
Subject key identifier: 1A:53:48:55:0D:6D:89:4E:04:4B:9E:19:89:1B:7A:2E:89:94:C7:DD
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GlNIVQ1tiU4ES54ZiRt6LomUx90.roa
Signing time: Thu 15 Sep 2022 02:48:10 +0000
ROA not before: Thu 15 Sep 2022 02:48:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 20940
IP address blocks: 2001:b034:700:580::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1A5348550D6D894E044B9E19891B7A2E8994C7DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:84:ca:27:66:f8:8e:1b:87:18:55:48:db:
ef:0d:e5:3c:1a:c4:1f:b1:29:24:97:2a:aa:83:17:
c7:40:c8:40:90:32:86:88:d5:3f:4a:5e:c1:17:52:
b6:c4:73:4c:df:6f:3c:7b:84:b8:d2:5d:e2:fb:18:
ba:cb:30:9d:9a:04:68:2b:fc:dd:0e:bd:cc:5a:83:
89:53:56:61:92:29:08:0d:b4:66:90:de:18:2b:9f:
70:dc:28:28:e3:c5:71:27:0d:05:c2:91:ba:ff:00:
a1:9c:d0:cb:07:bb:32:12:a3:4c:3e:9d:5a:af:79:
fe:31:ae:5e:39:6c:a0:80:e9:a6:cf:a3:97:97:89:
eb:aa:0d:8a:d8:9c:e3:f8:bb:82:7d:16:8f:7b:d5:
5c:60:70:01:20:37:7c:e0:e0:ce:81:98:cd:8e:ae:
59:a3:34:d4:98:60:70:dd:71:76:36:ed:b3:75:6c:
53:a8:f2:50:49:5f:d0:6c:bb:d1:d0:71:a4:90:dd:
47:ef:4d:a6:02:0c:50:37:3b:15:e7:fa:3f:8b:1b:
fe:e9:4f:7e:b2:1a:ec:4b:c7:df:ee:2b:96:10:74:
ca:47:18:f3:e2:81:d1:93:5d:3e:dc:58:07:bf:f1:
8e:45:13:43:08:1c:b3:5b:21:af:a7:f6:93:61:8b:
85:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:53:48:55:0D:6D:89:4E:04:4B:9E:19:89:1B:7A:2E:89:94:C7:DD
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GlNIVQ1tiU4ES54ZiRt6LomUx90.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b034:700:580::/64
Signature Algorithm: sha256WithRSAEncryption
08:41:fe:fe:2c:56:59:79:2f:0b:6d:89:dd:e5:b5:de:43:6e:
bf:75:84:2b:cf:83:43:51:00:38:1b:73:32:4e:85:eb:dc:b8:
26:ce:a2:74:40:12:1e:bb:e8:4d:3a:ef:79:0b:50:63:84:72:
f6:d3:06:f8:d0:57:c8:72:eb:f2:48:11:95:0a:ba:d4:a5:25:
e2:65:2a:29:44:92:86:29:f2:a0:44:50:7e:2f:3e:6b:5c:42:
55:ab:b0:a6:b4:bf:02:ce:00:a6:63:7c:45:f3:44:db:e0:b1:
e9:af:d9:a7:63:81:c2:92:b3:26:cc:34:16:94:a0:3b:a5:a2:
d3:9f:08:0a:53:e3:ea:71:15:ec:b1:52:de:5e:5c:3f:9c:65:
f2:fa:1d:96:a9:99:88:d8:1e:56:3c:e2:83:bb:bc:b6:71:a9:
de:17:de:8e:94:60:a8:d4:7d:26:4d:ae:63:60:82:90:bd:b9:
c1:6e:fb:cb:74:3f:38:9b:de:22:12:ba:09:97:b0:fb:1b:ee:
60:01:cd:06:b2:b8:61:76:56:d8:ef:19:32:9c:ea:57:e5:1a:
43:a6:60:cd:45:59:d6:e4:00:93:59:f1:09:ff:60:78:4c:9f:
d8:a7:89:67:db:13:ab:0c:3d:5e:b7:6d:1d:33:73:ba:38:15:
1e:f1:93:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org