Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/KxBkY3B9bobq-0-19B3RCqczo0Q.roa
File: KxBkY3B9bobq-0-19B3RCqczo0Q.roa (raw, json)
Hash identifier: MQfDAIdL28V1UeNY4cBgtYxgbGS3J5bs2b7jVYV4Lyg=
Subject key identifier: 2B:10:64:63:70:7D:6E:86:EA:FB:4F:B5:F4:1D:D1:0A:A7:33:A3:44
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KxBkY3B9bobq-0-19B3RCqczo0Q.roa
Signing time: Thu 15 Sep 2022 02:48:20 +0000
ROA not before: Thu 15 Sep 2022 02:48:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 211.20.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2B106463707D6E86EAFB4FB5F41DD10AA733A344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:f9:be:91:3f:d1:b8:d8:b7:7d:f8:39:84:
88:48:ce:90:b7:46:51:ec:96:34:c5:7b:1b:72:85:
b5:74:2d:85:e3:7d:ae:fe:ac:01:60:6a:47:ab:a2:
a0:93:cd:f7:6d:3e:1f:03:f3:15:b9:cc:01:ad:53:
39:2e:26:3a:2a:fd:eb:ed:d0:03:dc:08:0e:31:9b:
1e:18:93:4c:b7:bc:c9:46:17:36:33:35:bb:25:da:
33:74:e3:64:25:eb:a6:4c:37:f9:16:b0:aa:1a:e7:
b1:09:12:cb:21:cd:27:a6:04:3c:f4:bd:ef:ae:c2:
20:d7:f5:a4:5f:e3:99:4c:2a:3a:6d:53:03:5a:c7:
8d:5f:ef:ab:54:54:fb:55:1f:49:5e:6e:5a:d7:45:
2a:b1:5d:ca:fa:a7:e7:a2:3d:c9:32:1c:d7:e9:78:
65:df:b2:d3:2c:43:4f:a5:6b:68:9d:9e:66:d8:9c:
8b:a1:ce:39:ee:99:53:a1:35:b6:48:45:ec:29:28:
3f:29:b7:a5:90:3c:cb:17:9d:d4:cc:8c:f8:59:35:
4c:23:d9:0e:33:2d:94:72:38:2c:39:24:e0:ce:36:
8f:18:6c:6a:2a:ca:5c:58:49:9c:d3:50:ca:01:fb:
26:43:30:c4:64:c0:91:91:0f:03:84:19:9b:3f:ce:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:10:64:63:70:7D:6E:86:EA:FB:4F:B5:F4:1D:D1:0A:A7:33:A3:44
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KxBkY3B9bobq-0-19B3RCqczo0Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:27:36:7d:8d:7a:61:ea:fa:0b:7f:33:9a:a8:c0:ef:17:6c:
86:2e:80:07:10:cc:82:1c:bf:73:59:5f:10:a9:e5:61:97:92:
57:62:01:32:36:6e:b3:5e:da:e4:76:bb:97:06:71:ff:3e:92:
df:80:fc:08:53:38:4e:3d:12:80:0f:ff:33:48:f6:99:50:e1:
79:69:36:f4:03:a0:5c:34:91:6e:dd:9e:5a:dd:3e:24:20:da:
7f:fc:59:03:dd:ca:fe:4f:bd:47:ed:8f:c7:e5:bd:75:7e:be:
9f:d5:61:d9:e4:c8:88:48:9a:1d:6d:bf:c5:0b:ac:d2:2c:38:
79:10:f1:02:d7:b4:4f:de:be:61:af:c0:e3:86:dc:f3:93:62:
d1:8d:49:cd:a1:bd:01:4b:b4:75:05:ff:8e:06:16:e6:f9:9f:
b5:39:86:0f:a3:b0:9a:3a:2a:f5:db:a9:80:5c:82:a6:e3:29:
ac:9b:45:89:84:21:a4:75:ef:22:5d:5e:fc:87:73:64:18:33:
f0:81:36:bb:cc:f6:db:d3:8e:00:fd:16:f7:be:ed:46:b2:51:
f5:02:7f:a9:d2:6f:b2:ff:69:51:2e:9e:71:7a:78:b0:22:b0:
e4:f5:4c:0a:7c:5d:0d:79:80:67:ba:80:f9:fd:78:22:f7:f0:
e0:95:5b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org