Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/L5pCHA00uqPcWzQ0x0nYx2uUUfE.roa
File: L5pCHA00uqPcWzQ0x0nYx2uUUfE.roa (raw, json)
Hash identifier: gL7WfcvCprXFyxSNf+PKhF/8FFSS7rLSQKkeV6Vi0z4=
Subject key identifier: 2F:9A:42:1C:0D:34:BA:A3:DC:5B:34:34:C7:49:D8:C7:6B:94:51:F1
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/L5pCHA00uqPcWzQ0x0nYx2uUUfE.roa
Signing time: Thu 15 Sep 2022 02:48:34 +0000
ROA not before: Thu 15 Sep 2022 02:48:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7481
IP address blocks: 210.62.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2F9A421C0D34BAA3DC5B3434C749D8C76B9451F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:94:05:57:11:74:8a:a3:e7:b4:b1:4e:ff:
55:25:e8:d4:64:5a:8f:7d:1e:42:86:db:21:2f:6c:
d3:19:4b:39:08:85:4c:c7:e8:67:29:0d:2a:2e:06:
bf:62:55:bc:0c:8c:3e:78:73:3d:03:34:9b:5a:3f:
99:7c:fe:b0:3f:5b:55:c9:e3:63:a5:2a:2b:55:1e:
c8:d8:bc:4e:83:96:b4:be:3e:c5:3d:30:75:9e:de:
7f:cc:d5:88:84:8e:a7:e7:71:ca:05:0f:87:79:83:
e0:77:8b:89:01:5b:c8:0c:90:4d:ca:a0:aa:11:29:
7f:60:25:9d:e2:00:b7:7d:6c:86:95:77:9c:70:b8:
32:3a:a4:c0:bb:5e:35:a3:ab:48:13:ff:54:df:6f:
7c:38:8d:06:c2:45:58:01:40:62:92:f7:05:24:66:
04:89:92:39:bd:0b:28:6c:51:33:7d:94:c7:de:f8:
93:c2:02:70:77:cf:94:6e:96:ca:9b:56:50:52:1c:
e6:bf:2a:e9:8f:1d:84:58:06:35:e9:dc:49:8d:8f:
08:77:b6:2b:a7:24:5e:0d:d4:6a:f9:a3:ee:7f:10:
20:ef:56:77:c8:7b:6e:a2:78:be:74:06:a3:dd:4a:
05:51:6b:09:c3:29:0d:ba:1b:66:b5:72:a5:85:c6:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9A:42:1C:0D:34:BA:A3:DC:5B:34:34:C7:49:D8:C7:6B:94:51:F1
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/L5pCHA00uqPcWzQ0x0nYx2uUUfE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.255.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f7:c6:4c:39:a7:8e:ee:e4:81:b0:65:b5:0f:b4:ad:d2:29:
e1:11:11:92:c0:17:ee:2e:3e:cc:66:9e:a1:30:38:f2:a6:3a:
01:07:04:0f:2f:1f:80:94:a0:6b:9c:1a:53:6b:f2:84:e6:54:
c9:03:50:87:bc:57:55:14:06:fc:12:49:b2:d6:23:9a:c9:75:
fc:23:93:db:08:b0:14:f5:3c:1f:ac:e3:f1:b2:3b:22:16:f8:
a5:4a:80:5c:09:0a:04:8d:13:aa:e3:a0:c7:f0:8e:c2:3d:03:
67:f2:eb:67:fe:db:94:65:2a:8a:29:ef:29:b0:67:89:3f:8c:
fb:24:d9:4c:14:87:b6:9f:9b:e9:2a:a4:e1:81:29:4d:13:d2:
24:63:09:9a:91:4c:b8:1d:53:0c:e3:80:0f:11:d5:32:09:a7:
cb:b2:5f:48:5f:d6:bf:3c:9d:d1:b8:98:30:17:b1:8b:8d:6e:
f4:99:9b:45:9e:d6:96:76:82:28:c3:ec:7e:2d:96:a7:3a:b5:
ab:cd:ba:21:2d:35:77:97:99:90:a9:02:04:fc:6f:e6:81:5b:
41:84:8f:9f:ba:8d:10:23:27:75:e9:df:a8:0a:ff:2b:63:96:
a3:65:c2:a6:73:dd:e4:ec:05:c8:75:a3:1a:df:2c:ac:d8:bc:
a5:5d:18:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org