Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/PEMBGNuI7hFCrgjhkCQ8qWpYxqk.roa
File: PEMBGNuI7hFCrgjhkCQ8qWpYxqk.roa (raw, json)
Hash identifier: D76hd0FTtzNfIqClJ+nC4MaQ+VUuJpP8ODqglZUTiCc=
Subject key identifier: 3C:43:01:18:DB:88:EE:11:42:AE:08:E1:90:24:3C:A9:6A:58:C6:A9
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/PEMBGNuI7hFCrgjhkCQ8qWpYxqk.roa
Signing time: Thu 15 Sep 2022 02:48:15 +0000
ROA not before: Thu 15 Sep 2022 02:48:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131621
IP address blocks: 203.75.51.0/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3C430118DB88EE1142AE08E190243CA96A58C6A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:de:d6:4d:aa:cb:6a:9e:b8:10:66:90:ab:
44:75:33:6d:10:3b:7b:0f:f3:e4:ba:c5:3e:fa:68:
cc:55:26:77:80:56:84:80:7b:05:07:2a:77:b8:dc:
4f:f0:9e:e5:b4:f6:4b:46:de:d5:2d:bd:7c:98:39:
89:87:d1:d0:6a:ed:91:63:c5:91:09:78:1b:54:95:
94:c3:f6:70:d5:cd:18:73:8c:32:cb:52:e1:0b:c1:
f1:bb:31:73:e9:e1:3a:78:d5:18:3d:ef:70:3b:1a:
a3:29:eb:fa:f7:05:25:78:f9:94:ae:d0:97:bd:b8:
6d:d5:c4:d9:1c:11:d4:47:4c:98:a9:a1:ea:c6:d4:
a0:43:6e:13:b1:d8:79:86:b2:64:18:63:a2:ba:b2:
18:f5:b8:bd:b9:bd:55:05:74:4e:87:17:31:37:da:
ab:03:db:9c:58:52:40:75:7a:d2:9d:1b:12:36:55:
38:1f:f0:1a:06:23:62:da:78:01:60:0d:6f:b5:3f:
44:27:eb:2c:4e:e6:53:00:e5:17:bb:91:fc:ac:35:
53:f4:82:98:de:5a:e0:99:d3:7c:5d:c7:82:8c:f9:
39:9f:fc:33:7b:30:c3:72:29:88:bb:cd:2e:7f:59:
16:16:60:0b:2c:24:d5:f8:f5:8f:1c:5d:96:61:ec:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:43:01:18:DB:88:EE:11:42:AE:08:E1:90:24:3C:A9:6A:58:C6:A9
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/PEMBGNuI7hFCrgjhkCQ8qWpYxqk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.75.51.0/27
Signature Algorithm: sha256WithRSAEncryption
c6:ce:06:d8:aa:75:88:ee:9d:c5:7b:6f:cf:65:f0:b3:b3:d3:
40:8a:bf:f6:3a:5b:79:0c:f9:f7:66:e0:9d:fb:de:db:65:d1:
b8:fb:ac:71:13:31:d7:6b:a4:aa:67:8c:bf:71:77:ea:f0:c2:
99:b8:5a:f4:8d:15:4c:55:2d:77:91:c5:b0:40:80:58:20:2c:
f8:00:3d:42:91:81:3a:0f:74:2b:c0:a4:4f:4d:2f:8a:16:5c:
2b:bb:84:1d:00:40:b6:cd:0b:cd:38:65:ee:a1:57:d2:e8:ae:
bb:01:d8:89:e8:62:93:51:ca:a0:33:70:93:82:3a:b6:4a:99:
62:29:a7:7d:90:6e:e5:af:63:c0:16:ab:b8:1f:09:29:c6:75:
74:33:fa:58:64:54:86:5c:33:9f:63:79:ad:b7:bf:1d:05:c3:
a8:be:ec:58:d9:2e:2c:02:f9:7d:50:d0:d1:e9:89:35:3d:95:
91:e5:fd:b1:40:31:77:b4:df:49:7f:8f:4d:3b:6e:26:a7:3c:
f6:ca:fc:c2:96:0d:66:26:1c:9b:c3:80:ca:23:f7:3f:75:fb:
63:3a:7d:e2:9c:ac:77:dd:a2:af:3e:00:1e:d7:bc:8d:f5:bc:
55:3b:70:01:f9:07:ac:c2:5f:62:c5:0b:16:17:e3:70:e1:1d:
57:59:15:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org