Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/S4iGOB9sQAofP3B8_1Ps3ABCQPU.roa
File: S4iGOB9sQAofP3B8_1Ps3ABCQPU.roa (raw, json)
Hash identifier: thPrR49Z7VwOppDM1e3vkdkNj2RaEtqfVy/A9t0i7cs=
Subject key identifier: 4B:88:86:38:1F:6C:40:0A:1F:3F:70:7C:FF:53:EC:DC:00:42:40:F5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C09
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/S4iGOB9sQAofP3B8_1Ps3ABCQPU.roa
Signing time: Wed 29 Sep 2021 02:50:47 +0000
ROA not before: Wed 29 Sep 2021 02:50:47 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 1.34.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3081 (0xc09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:47 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4B8886381F6C400A1F3F707CFF53ECDC004240F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:0f:72:e3:57:6e:88:1a:6f:27:11:2c:4a:
c6:bc:93:00:d1:20:da:c4:22:27:34:55:f7:c1:ba:
01:33:59:0b:7d:5e:74:7e:37:11:65:cd:0b:b4:94:
dc:b2:3a:6c:86:a9:39:3b:0d:b1:8a:54:69:06:25:
e6:90:e1:ac:df:14:5b:9d:d7:e4:61:4e:e1:91:7f:
eb:e9:2f:24:3e:23:55:82:90:97:df:6c:ad:c2:dd:
59:12:01:5e:89:f4:e0:00:b5:a3:7f:60:05:3e:30:
03:03:b4:d7:fc:b1:ef:b9:f8:10:75:6c:bf:73:c4:
b4:c9:d1:0b:64:43:16:b6:ac:e4:ca:8e:02:a6:d2:
9b:dd:92:b1:c6:de:4a:27:41:28:e6:18:6c:04:2c:
14:28:aa:52:eb:b4:da:3e:62:6c:85:4b:1e:ab:ae:
04:eb:22:3d:ea:ea:86:65:cd:b2:7f:d2:67:d3:a5:
1c:b7:6e:1a:41:83:50:c6:a1:a5:0c:82:de:ed:8c:
76:8e:8f:36:76:31:ed:9d:ec:de:4f:ac:01:a6:96:
db:78:1e:d4:f0:63:57:2d:26:ef:8b:e3:ca:a9:84:
c5:cd:a9:7c:8f:00:2c:d6:e0:c9:f6:70:50:2f:8d:
45:84:3a:4b:aa:1e:f9:ae:3e:66:7b:eb:2a:b7:d7:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:88:86:38:1F:6C:40:0A:1F:3F:70:7C:FF:53:EC:DC:00:42:40:F5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/S4iGOB9sQAofP3B8_1Ps3ABCQPU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.34.0.0/15
Signature Algorithm: sha256WithRSAEncryption
94:25:20:24:d5:2f:11:01:90:28:a3:33:0c:14:ff:b4:c5:d6:
14:28:f9:7a:55:87:a5:2f:2d:e8:25:aa:b8:bf:ce:27:e5:21:
b4:22:23:ad:00:cc:47:b0:4c:1a:3a:1e:ad:e9:9d:cc:fc:4f:
34:68:e5:a9:f2:12:d2:28:14:f2:8e:2a:ed:04:4e:b9:d2:b3:
27:ca:9d:59:85:c6:10:5f:dd:98:6d:99:55:81:fc:6c:ea:d8:
4d:7d:b4:a6:cb:e7:a4:dd:2a:fb:73:f1:c5:13:95:cf:8e:4c:
f6:d3:bb:8d:81:77:60:07:8a:26:ba:a7:6d:c9:1f:12:e0:a1:
38:9a:61:62:9f:31:1a:d6:9e:02:52:c7:bd:da:d1:62:b4:e7:
ec:c0:54:78:90:45:5a:c3:21:05:ea:54:c5:ed:25:a3:51:8d:
f8:15:21:e3:d2:4f:61:99:8c:77:e6:f9:95:97:c4:55:71:a8:
28:d6:4b:7f:e5:48:08:e3:e3:08:e4:2d:ad:3f:68:a1:dc:9a:
37:38:e2:68:5d:59:92:91:47:28:90:bf:cb:ce:52:14:ca:69:
a8:fb:c6:81:68:6a:f4:3a:ec:d6:b9:dd:fb:b1:79:29:db:7d:
b5:f4:16:e3:76:75:1c:67:40:30:9a:f5:7f:58:2f:21:f6:48:
e6:2a:f8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org