Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/NfVNeEDXpZYwCgTnOjcT3_PR5TE.roa
File: NfVNeEDXpZYwCgTnOjcT3_PR5TE.roa (raw, json)
Hash identifier: EnBaBTj18PN8KWLdxoa61CxKFDIikUCXdjxDxcCdwmo=
Subject key identifier: 35:F5:4D:78:40:D7:A5:96:30:0A:04:E7:3A:37:13:DF:F3:D1:E5:31
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0BEB
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/NfVNeEDXpZYwCgTnOjcT3_PR5TE.roa
Signing time: Wed 29 Sep 2021 02:50:40 +0000
ROA not before: Wed 29 Sep 2021 02:50:40 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 36040
IP address blocks: 2001:b032:c0ff:2::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3051 (0xbeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:40 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=35F54D7840D7A596300A04E73A3713DFF3D1E531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:ba:84:97:4e:8b:31:62:0a:e2:d2:19:30:
c1:cf:d3:5d:db:98:65:08:00:00:39:c4:ab:19:f0:
26:b8:61:3c:9b:ab:71:98:2f:fa:55:a1:dc:de:fd:
db:8d:33:e7:c0:d9:99:69:8e:7b:b1:ab:6d:39:e4:
66:53:30:30:b0:86:0c:4d:56:0d:20:20:16:02:17:
2d:1d:ab:b7:96:d5:bc:17:58:b4:11:19:fe:fc:6a:
b5:33:54:32:da:ce:09:b5:38:21:e0:31:1e:8b:7d:
09:37:de:27:33:6a:a6:40:65:1a:c5:bb:cc:14:0e:
dd:1e:7f:a2:a4:9a:03:66:a1:a6:81:76:56:81:93:
26:b0:e7:90:a4:46:b7:28:85:ee:1c:e7:43:a2:72:
55:7d:36:32:ed:07:7c:32:42:da:96:7f:33:38:4a:
82:ec:8b:40:fb:eb:2c:2a:7d:cd:bd:e3:57:4a:33:
c0:01:eb:a6:cb:ec:ec:67:8c:ad:df:54:c4:6d:cf:
ee:34:e4:8b:6d:79:93:13:8f:04:6f:c1:bc:42:cd:
d6:0a:d5:a8:a2:b0:a7:4d:2d:fd:72:91:01:da:5d:
6c:c0:12:05:7e:01:33:da:d7:20:2c:83:89:e8:2c:
db:84:f0:7a:51:86:18:f3:6d:4e:1d:66:93:ff:94:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F5:4D:78:40:D7:A5:96:30:0A:04:E7:3A:37:13:DF:F3:D1:E5:31
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/NfVNeEDXpZYwCgTnOjcT3_PR5TE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b032:c0ff:2::/64
Signature Algorithm: sha256WithRSAEncryption
25:f9:48:f7:25:d0:b5:8b:0e:d5:46:17:e3:9d:ff:df:ed:9b:
0e:55:38:e3:91:4c:cf:48:1d:e5:6e:04:ec:ae:69:5c:a9:4e:
23:1e:8f:9b:07:f2:fc:10:a9:87:34:21:c0:54:ab:9a:bd:5e:
84:d0:8b:95:25:59:9d:59:46:ac:a1:e8:ea:a7:5f:68:39:39:
bc:ba:66:f6:be:de:50:f1:96:65:af:1e:43:e8:c0:a7:4e:fb:
c1:5a:ee:94:d9:02:56:0e:32:89:e8:06:ab:ab:11:56:b9:fd:
e3:eb:ba:6a:fe:eb:33:bb:a6:77:12:ba:54:dd:aa:49:53:70:
c7:f5:c3:ea:b7:b3:88:3a:8e:32:78:53:32:c0:5e:e9:8a:16:
6b:8d:7c:08:31:f2:c7:65:5e:33:48:d5:ec:10:5b:47:11:64:
79:8c:be:2f:e4:44:c2:04:dc:21:45:55:8d:62:bc:f4:98:26:
36:bb:ba:59:c2:c3:6d:16:3a:8c:35:70:58:e4:15:a7:8a:39:
af:fb:cd:cf:9c:c9:e9:38:81:c3:2e:b8:f1:1d:00:2d:9c:f6:
c5:b0:93:09:22:ec:23:f6:a7:77:8c:83:77:9f:ad:86:77:2e:
4b:a9:b5:0e:2c:32:b5:95:96:87:d0:75:a8:1d:28:9e:75:e7:
a3:f2:23:64
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICC+swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTA5Mjkw
MjUwNDBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDM1RjU0RDc4NDBEN0E1
OTYzMDBBMDRFNzNBMzcxM0RGRjNEMUU1MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRNLqEl06LMWIK4tIZMMHP013bmGUIAAA5xKsZ8Ca4YTybq3GY
L/pVodze/duNM+fA2Zlpjnuxq2055GZTMDCwhgxNVg0gIBYCFy0dq7eW1bwXWLQR
Gf78arUzVDLazgm1OCHgMR6LfQk33iczaqZAZRrFu8wUDt0ef6KkmgNmoaaBdlaB
kyaw55CkRrcohe4c50OiclV9NjLtB3wyQtqWfzM4SoLsi0D76ywqfc2941dKM8AB
66bL7OxnjK3fVMRtz+405ItteZMTjwRvwbxCzdYK1aiisKdNLf1ykQHaXWzAEgV+
ATPa1yAsg4noLNuE8HpRhhjzbU4dZpP/lLdXAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUNfVNeEDXpZYwCgTnOjcT3/PR5TEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9OZlZOZUVEWHBaWXdDZ1RuT2pj
VDNfUFI1VEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAGw
MsD/AAIwDQYJKoZIhvcNAQELBQADggEBACX5SPcl0LWLDtVGF+Od/9/tmw5VOOOR
TM9IHeVuBOyuaVypTiMej5sH8vwQqYc0IcBUq5q9XoTQi5UlWZ1ZRqyh6OqnX2g5
Oby6Zva+3lDxlmWvHkPowKdO+8Fa7pTZAlYOMonoBqurEVa5/ePrumr+6zO7pncS
ulTdqklTcMf1w+q3s4g6jjJ4UzLAXumKFmuNfAgx8sdlXjNI1ewQW0cRZHmMvi/k
RMIE3CFFVY1ivPSYJja7ulnCw20WOow1cFjkFaeKOa/7zc+cyek4gcMuuPEdAC2c
9sWwkwki7CP2p3eMg3efrYZ3LkuptQ4sMrWVlofQdagdKJ5156PyI2Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org