Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/RrFmnG4eH3KKjDPxTCYXStdZR4k.roa
File: RrFmnG4eH3KKjDPxTCYXStdZR4k.roa (raw, json)
Hash identifier: TfLHVl3+EIIfAgank7MUA1Mw+oej62ZsNzqRx53EJlo=
Subject key identifier: 46:B1:66:9C:6E:1E:1F:72:8A:8C:33:F1:4C:26:17:4A:D7:59:47:89
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RrFmnG4eH3KKjDPxTCYXStdZR4k.roa
Signing time: Thu 15 Sep 2022 02:48:11 +0000
ROA not before: Thu 15 Sep 2022 02:48:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 8068
IP address blocks: 61.220.60.200/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=46B1669C6E1E1F728A8C33F14C26174AD7594789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:50:36:b1:f3:9a:de:59:f9:5b:7b:76:eb:
6e:fe:88:9f:36:6f:d7:1b:06:28:47:7f:ad:1d:b9:
f5:18:4e:a4:93:df:cc:07:6e:86:cc:ce:a8:94:69:
22:b7:4b:82:55:77:d1:8c:fb:62:2e:db:9a:09:e4:
37:57:db:60:ff:4a:0a:47:af:fd:27:a1:78:04:b9:
cc:d7:49:28:3d:a2:93:fc:c3:17:33:b2:f3:58:ae:
ae:db:fa:94:51:9d:c5:1e:1f:96:3a:74:95:0a:83:
e7:ed:3e:89:72:d6:97:51:9b:b8:9b:2b:eb:60:f1:
6c:5a:41:67:39:69:95:8c:06:54:f0:5f:9f:49:3b:
d9:e5:65:ee:e7:cf:cc:08:26:05:76:48:57:f6:4c:
17:4e:62:5c:94:08:48:fa:71:9b:0b:ee:e1:bd:d3:
7f:1d:b2:b0:c8:c1:a6:fb:c3:05:52:6e:f3:de:99:
07:13:3d:9c:5e:de:e6:38:16:ec:17:75:c8:83:c0:
44:37:d4:36:10:9b:21:58:72:60:7b:44:39:44:1c:
5e:1f:be:58:fd:c4:7b:32:41:3e:ff:44:12:71:67:
a8:7d:48:f4:d0:24:4d:e3:cc:21:53:55:f0:dc:aa:
34:b4:c6:66:36:79:26:6b:e6:4f:5e:b2:54:0a:6a:
97:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B1:66:9C:6E:1E:1F:72:8A:8C:33:F1:4C:26:17:4A:D7:59:47:89
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RrFmnG4eH3KKjDPxTCYXStdZR4k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.220.60.200/29
Signature Algorithm: sha256WithRSAEncryption
c7:79:d2:de:29:6c:62:6b:5a:62:45:95:2c:ab:66:c5:4f:8e:
f1:09:7d:dc:76:0a:6e:60:5a:bd:86:f7:60:c1:6a:4f:60:54:
8b:30:63:07:77:f9:f9:73:d6:34:97:3a:fb:73:db:75:bd:37:
96:32:77:53:d6:13:65:a6:a1:b4:1a:6c:09:f1:13:a9:81:17:
75:84:77:9a:da:4e:a7:09:87:12:14:cb:80:60:de:d0:51:83:
17:4b:1f:35:f4:b3:35:a4:55:17:5f:e0:ae:b1:82:99:aa:6d:
a0:f3:e5:48:09:f5:45:2a:3c:78:6f:7d:75:42:6e:a0:7f:e4:
27:59:f9:a6:e6:f7:1d:15:00:bd:3b:42:8d:e0:27:fb:1e:7d:
c0:80:d2:35:41:c8:4b:07:3e:dc:eb:5d:b2:c8:a6:09:ac:91:
9e:a4:f0:c0:d0:83:2a:c6:6c:81:53:6c:af:e7:40:ba:0d:73:
47:10:10:94:7c:21:55:61:d0:4a:5e:a8:66:77:cd:82:10:ab:
67:41:22:a5:5d:2c:a2:d9:10:1f:c6:35:6e:3c:3f:17:ae:f9:
c1:36:6d:13:9f:19:23:8a:9a:43:b1:39:82:d1:09:f9:1f:a6:
fb:71:e2:00:82:c8:72:42:42:0b:f3:31:14:32:06:30:71:71:
d0:49:ac:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org