Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/I3niIHFUpeDK4ZoyYjrKb9dyAU8.roa
File: I3niIHFUpeDK4ZoyYjrKb9dyAU8.roa (raw, json)
Hash identifier: dts/iV/GRPDNuWtPkTm0n71J7wqY3fcLXjSMYkzkMNg=
Subject key identifier: 23:79:E2:20:71:54:A5:E0:CA:E1:9A:32:62:3A:CA:6F:D7:72:01:4F
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C37
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/I3niIHFUpeDK4ZoyYjrKb9dyAU8.roa
Signing time: Wed 29 Sep 2021 02:51:01 +0000
ROA not before: Wed 29 Sep 2021 02:51:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 59.124.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3127 (0xc37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2379E2207154A5E0CAE19A32623ACA6FD772014F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:dd:39:3d:8d:89:02:12:58:d9:36:9c:75:
ee:a3:cf:1e:18:be:9d:cb:38:b7:23:ef:cb:c5:ac:
3d:c2:17:6c:12:50:80:d6:d5:9d:98:9b:05:d8:f3:
2b:63:24:e9:d3:b3:3a:0d:40:17:78:89:44:27:60:
d0:47:62:fc:5c:e9:17:af:00:12:34:03:68:b9:a9:
64:78:3d:5f:d0:ce:d6:06:2c:2e:fb:20:a7:19:fb:
08:88:5b:9b:2b:34:9a:e2:ee:b9:0a:2f:12:c0:a0:
fc:7c:5c:6f:e3:a5:4c:a5:fe:23:8c:6a:38:7c:c5:
f9:af:b5:79:39:2f:6f:5c:e8:12:3b:a2:a2:e4:8b:
9f:0f:db:88:59:47:e9:99:69:b7:b7:ec:7c:d2:ca:
d2:bd:0e:b3:86:1f:c3:00:fd:b1:31:55:f0:82:f4:
b5:74:a8:c4:bc:d2:78:27:72:04:98:49:16:35:3f:
32:a5:32:89:ac:ae:df:1b:95:2f:ff:f7:a4:e2:f4:
82:02:74:ef:b6:39:11:bb:63:fd:ad:2d:9c:b5:d4:
34:9a:0d:fe:67:93:e2:93:71:65:48:ff:1c:7a:92:
ed:9a:3f:58:1c:cf:45:e5:ce:88:2c:a7:e8:71:0d:
58:91:1f:53:f9:a1:79:8d:e9:22:cf:0e:fe:98:e5:
65:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:79:E2:20:71:54:A5:E0:CA:E1:9A:32:62:3A:CA:6F:D7:72:01:4F
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/I3niIHFUpeDK4ZoyYjrKb9dyAU8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.124.0.0/14
Signature Algorithm: sha256WithRSAEncryption
70:40:14:97:ea:80:b7:04:f6:9c:36:45:a9:20:56:b2:f3:20:
8a:78:52:da:40:3e:ac:04:9e:42:ef:92:35:c4:b5:ec:03:92:
20:59:88:42:4e:0a:18:91:6b:42:a2:42:bd:20:a9:22:bd:cb:
d4:88:87:cc:8b:b7:7e:a7:38:fd:64:8e:0a:d1:56:4c:f0:6a:
ed:8a:0c:3f:6c:df:b1:34:78:7f:5c:30:e0:23:db:ea:af:ba:
c7:57:ed:06:6b:34:40:b0:8f:2d:a2:a3:03:54:7d:15:28:86:
d5:f5:36:33:a1:95:22:05:20:cc:84:a1:79:7c:3b:14:14:bf:
c7:92:40:06:6d:8b:f1:ed:70:dd:d0:13:be:62:2e:89:2e:49:
29:8a:8f:ee:ee:63:49:4c:29:54:26:ba:0c:30:05:e9:d7:38:
8f:d7:a0:19:42:8b:82:98:f0:9a:7f:de:c5:93:37:ef:46:13:
30:d1:4a:32:40:96:46:26:73:1c:cd:30:5f:a4:3c:43:1f:72:
92:e6:db:f8:a6:8b:43:d8:a5:4e:9e:db:3d:7a:a3:44:43:d4:
08:12:95:7c:25:b8:aa:3e:10:f8:26:87:72:48:c0:a6:60:e8:
7f:d9:9a:8d:7c:88:c3:51:a5:d8:0f:f1:e1:05:3a:d3:a2:35:
70:9e:21:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org