Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/QkoG9z3Rg_HuFHB2OOB-PGde1m8.roa
File: QkoG9z3Rg_HuFHB2OOB-PGde1m8.roa (raw, json)
Hash identifier: wch75DZej0SFJclPoHUoVvADCG6ksohxcdRA0nbFFzE=
Subject key identifier: 42:4A:06:F7:3D:D1:83:F1:EE:14:70:76:38:E0:7E:3C:67:5E:D6:6F
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/QkoG9z3Rg_HuFHB2OOB-PGde1m8.roa
Signing time: Thu 15 Sep 2022 02:48:12 +0000
ROA not before: Thu 15 Sep 2022 02:48:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 15133
IP address blocks: 203.74.4.64/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=424A06F73DD183F1EE14707638E07E3C675ED66F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:5d:c7:7f:01:00:47:80:24:85:36:85:cc:
02:28:38:fa:1c:8d:08:4d:80:55:52:b8:a9:3b:26:
d3:7b:8b:34:bc:1e:63:aa:22:f0:52:ce:07:79:7c:
38:4b:43:f1:7d:2b:e7:77:14:b3:a3:e1:93:6f:cd:
a9:e8:38:12:c9:9c:35:41:0d:dd:4b:be:cf:d8:18:
e2:15:11:f8:86:cb:65:67:61:04:8c:01:80:e3:73:
ac:74:c9:7a:7f:46:a9:d9:c2:e4:59:3c:95:e6:f5:
7e:51:d5:eb:96:6d:e0:88:eb:04:61:9a:24:d9:31:
89:21:a9:f7:0b:e0:bd:71:68:7e:7d:54:86:3c:42:
ff:94:86:1e:36:f0:5a:c2:e3:02:9d:11:ce:cb:7e:
d1:ef:b6:6e:64:fe:dc:4d:87:ae:63:46:71:df:f9:
d1:06:6d:1d:d0:bc:5b:76:c7:b7:75:05:9a:f4:76:
16:f2:09:77:71:ce:99:15:48:aa:1a:2e:09:05:d9:
94:9d:6c:66:d6:d3:b1:6c:f0:b2:f5:bb:98:34:42:
c3:1d:ff:57:7c:b9:b3:38:31:68:ad:7f:02:47:49:
47:dd:92:e8:01:08:b5:ff:07:45:6b:a3:1f:dc:4a:
19:65:8f:15:e2:aa:ca:54:27:2e:ba:a1:21:a7:bf:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4A:06:F7:3D:D1:83:F1:EE:14:70:76:38:E0:7E:3C:67:5E:D6:6F
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/QkoG9z3Rg_HuFHB2OOB-PGde1m8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.4.64/26
Signature Algorithm: sha256WithRSAEncryption
03:90:40:b7:7b:c2:e3:9d:fa:e7:05:c4:c5:c6:e9:8b:12:e3:
4a:cc:fa:72:96:94:06:2f:f4:3f:3d:72:cd:28:b6:4f:58:f1:
6a:59:de:19:0d:5f:0f:6f:0c:bf:6b:4e:dc:61:9b:b3:29:8c:
81:38:f3:76:90:9e:e6:eb:43:59:79:ba:6c:e6:b9:d6:67:35:
ae:d9:a6:23:f4:2c:b4:d2:ec:38:fa:12:50:03:df:8a:90:d8:
d9:13:ee:fa:bb:ba:78:14:a3:db:80:84:5d:4c:d7:71:da:29:
d2:da:14:aa:64:a1:1c:61:b4:1b:ca:82:3d:0c:f7:78:b1:13:
57:29:b1:07:0c:29:19:21:36:8b:43:38:5e:78:24:49:b0:9b:
97:47:73:a4:6b:6f:41:ed:74:17:9a:4a:55:45:6f:a5:ab:ae:
d3:b0:ee:4d:89:c4:15:c4:4a:75:be:61:a0:91:1c:ae:f3:63:
0f:c4:41:ad:88:2a:fc:e1:7e:98:5a:38:ae:59:15:e8:2f:9c:
79:83:ec:53:f4:fd:db:f9:49:8a:ac:42:35:0a:a9:eb:59:23:
7f:28:24:ea:2d:78:00:45:b7:a3:50:c4:74:86:9d:d2:67:4c:
77:40:bb:8b:6c:14:74:96:3d:52:4f:87:e2:bb:9d:ef:40:a8:
cc:31:33:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org