Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/S7YOhiTqRdOm_Sl5CfJuAWj1dxU.roa
File: S7YOhiTqRdOm_Sl5CfJuAWj1dxU.roa (raw, json)
Hash identifier: u0hh5/vOEMTQVy62Y2hdB8GmVd6egETCadMHk6EpQV0=
Subject key identifier: 4B:B6:0E:86:24:EA:45:D3:A6:FD:29:79:09:F2:6E:01:68:F5:77:15
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/S7YOhiTqRdOm_Sl5CfJuAWj1dxU.roa
Signing time: Thu 15 Sep 2022 02:48:33 +0000
ROA not before: Thu 15 Sep 2022 02:48:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 20940
IP address blocks: 203.69.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4BB60E8624EA45D3A6FD297909F26E0168F57715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:f2:dc:c3:52:58:11:ce:49:c8:47:6f:81:
a7:8e:f4:e6:36:2f:4b:35:0a:77:04:6c:4c:98:64:
96:16:f4:55:29:76:a1:06:08:87:61:ef:5e:62:e6:
c6:f7:26:5a:92:90:01:59:bc:63:fc:47:df:d4:81:
3f:dd:65:cb:e0:fd:28:28:25:96:e9:81:d8:ae:e2:
61:74:7a:28:e5:ba:92:38:e3:2e:b3:f7:ea:cb:2d:
fe:78:63:bf:04:80:f5:eb:27:8b:77:fe:84:c2:4c:
f0:96:01:f6:da:ae:b0:fe:99:22:f7:80:df:a5:3f:
23:16:19:60:bb:47:b1:bc:4a:bb:88:1d:f5:16:69:
02:dc:59:10:d7:ab:b1:fb:a0:5d:23:4f:dd:d1:e6:
f7:74:d0:70:e8:9b:4a:d9:77:52:da:07:d2:d1:bd:
00:46:54:4e:42:fe:03:02:f3:88:89:8b:ee:ca:e8:
6d:22:52:8d:64:33:31:7e:ed:d8:5a:42:bf:67:f8:
92:78:fa:4d:ec:8a:82:f0:b6:c5:f6:a8:4b:57:59:
8b:62:65:dd:3f:2a:88:5a:db:da:72:8b:b5:05:9e:
3c:ef:ff:03:64:f1:1f:5e:60:54:c9:2d:43:c6:b3:
3c:39:f6:b5:af:00:99:22:5d:ce:c7:f4:a9:c4:c8:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B6:0E:86:24:EA:45:D3:A6:FD:29:79:09:F2:6E:01:68:F5:77:15
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/S7YOhiTqRdOm_Sl5CfJuAWj1dxU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.69.141.0/24
Signature Algorithm: sha256WithRSAEncryption
86:5d:5a:3a:ab:83:60:f7:41:ab:ab:15:b0:c5:a9:d0:53:1c:
45:9f:4f:05:dc:e7:d2:af:f9:34:3b:4f:02:36:6f:b5:12:13:
95:93:e7:e3:59:03:b1:56:a4:9a:85:f9:e0:40:5f:62:02:ae:
39:e8:42:4f:3f:4f:66:7d:15:b8:ec:e4:51:f2:7b:a6:1f:ee:
98:a2:fe:33:8c:78:72:e9:7d:70:38:b8:8f:0c:55:aa:0f:92:
d6:24:55:91:6b:a5:f0:ac:ab:72:16:60:48:ce:db:8b:69:06:
94:19:5d:b4:e0:95:0d:dd:25:2a:c0:d3:ef:cd:78:6f:6c:bb:
9c:06:83:6a:36:de:03:04:7a:69:56:29:f1:87:54:f6:4f:f7:
5d:e1:9f:d2:b2:38:7e:b4:2f:25:a9:43:b0:42:4f:e4:ee:62:
a6:68:9b:43:cd:7e:75:17:8b:9c:cf:4c:69:6b:b5:43:89:e2:
a4:59:45:13:87:39:d6:74:34:6e:48:b7:63:f1:03:ab:98:53:
3e:5a:38:b8:ab:38:e7:e2:1f:8b:e2:55:a2:ae:3e:12:2c:e2:
8f:11:44:41:30:43:6c:57:fc:fd:e3:48:91:7b:10:79:2d:17:
b0:b9:6b:8e:97:27:a7:e2:4b:a2:86:0a:1c:5c:cc:0e:9e:60:
5a:77:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org