Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Imdj6Zde_dmRdpnKlzLjk_zjIZg.roa
File: Imdj6Zde_dmRdpnKlzLjk_zjIZg.roa (raw, json)
Hash identifier: AFBG35ku38pWZVs/JrM7iBChquMJmvtXX2A0VbMpknE=
Subject key identifier: 22:67:63:E9:97:5E:FD:D9:91:76:99:CA:97:32:E3:93:FC:E3:21:98
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Imdj6Zde_dmRdpnKlzLjk_zjIZg.roa
Signing time: Thu 15 Sep 2022 02:48:44 +0000
ROA not before: Thu 15 Sep 2022 02:48:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9505
IP address blocks: 2001:b200::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=226763E9975EFDD9917699CA9732E393FCE32198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:da:df:9f:c7:95:73:4e:92:45:d3:84:55:
ab:5b:84:5f:53:8a:f3:88:30:44:f4:94:19:e3:54:
0d:e7:53:dc:ab:18:37:a5:a5:5d:8d:df:b2:f1:cd:
9d:c3:7b:dd:fc:97:c7:e8:67:8f:14:10:2c:02:48:
5f:0d:22:cd:67:0f:b4:f6:27:4f:f0:17:f9:a7:09:
83:64:24:a0:97:a2:f0:41:58:6d:b0:c9:9f:b5:bc:
52:f7:f2:89:49:be:2c:ff:9f:09:a7:9f:d6:2b:f5:
d6:ff:e6:60:54:91:94:ff:60:3a:21:2d:67:09:dd:
9b:0b:e6:09:3e:bd:c8:3c:1c:50:95:06:4d:c0:f8:
23:98:46:34:af:c3:49:e9:19:09:b0:0f:16:de:87:
02:0c:85:09:d3:c3:cf:13:33:d8:c1:f3:31:02:ae:
ad:ac:67:1f:2d:bb:c0:4d:6c:5d:96:28:e8:9b:08:
89:09:59:d9:7c:27:55:31:70:2b:dc:8a:e2:02:fd:
e9:48:bd:19:52:8a:a1:1a:29:5f:30:2d:89:3a:ed:
98:f1:99:1f:f0:03:1f:82:85:65:c7:13:51:c8:eb:
b2:aa:b5:b0:71:62:b7:4a:c0:ab:fc:9d:9e:ce:c1:
fb:86:24:32:1b:0f:a8:17:33:5f:eb:20:5b:55:07:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:67:63:E9:97:5E:FD:D9:91:76:99:CA:97:32:E3:93:FC:E3:21:98
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Imdj6Zde_dmRdpnKlzLjk_zjIZg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b200::/32
Signature Algorithm: sha256WithRSAEncryption
51:48:60:4f:4d:70:43:c1:1d:44:7b:4c:18:00:78:17:d2:4c:
74:ce:4e:9a:fd:20:a4:5d:8f:53:37:32:94:5f:d0:a8:a6:78:
42:cf:1f:b8:1f:d3:94:6e:db:fe:6f:70:7d:63:e7:12:2f:54:
23:7e:e6:34:07:98:c3:9a:24:5d:0f:12:9d:56:b2:86:0a:30:
73:e4:97:36:f3:30:7c:74:31:b8:51:e8:cd:2d:7e:54:88:ba:
22:7a:28:24:49:ad:9a:9c:26:84:db:a9:20:3e:6a:16:b5:9d:
49:f8:6f:e1:7f:26:95:82:2c:11:1f:0d:00:fc:3a:85:73:60:
88:f6:63:44:94:6e:d1:aa:de:92:b6:b3:22:22:c0:38:8d:26:
44:2e:1b:b8:8e:52:ee:b1:c5:b2:29:dd:3d:41:1e:91:84:bc:
0b:a4:8e:63:07:91:02:62:b4:7e:79:b9:bd:af:38:e5:6b:7a:
78:d8:46:90:f3:e7:6e:ed:fe:da:f3:97:75:a5:8d:0e:20:b7:
42:f8:c7:04:b5:c7:d9:16:3f:16:42:78:98:7d:0e:20:e3:00:
39:1b:f5:bc:6e:52:0c:0e:05:39:28:f8:f9:41:45:9b:1b:39:
9a:5c:86:b5:26:ae:3a:39:33:ab:f1:b9:55:3b:7d:c9:3a:eb:
68:97:e2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org