Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/SjsyWmuEjXSmkbAYHiR9g_qFZlw.roa
File: SjsyWmuEjXSmkbAYHiR9g_qFZlw.roa (raw, json)
Hash identifier: uu1NzqPKeB8+4Bv/zEHcl+HEL0BLJtKAZ55cu3cmy/s=
Subject key identifier: 4A:3B:32:5A:6B:84:8D:74:A6:91:B0:18:1E:24:7D:83:FA:85:66:5C
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0835
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SjsyWmuEjXSmkbAYHiR9g_qFZlw.roa
Signing time: Tue 29 Sep 2020 09:58:28 +0000
ROA not before: Tue 29 Sep 2020 09:58:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17421
IP address blocks: 42.64.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2101 (0x835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4A3B325A6B848D74A691B0181E247D83FA85665C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:d3:21:57:ae:b7:9b:fb:b8:8a:f9:5c:56:
26:fb:ea:96:31:f7:ef:36:47:fd:88:5a:c2:fd:f1:
35:d5:bb:7c:7e:48:ea:3a:e1:39:1d:04:f9:f1:f6:
fe:4d:e2:46:e0:26:fa:86:eb:b7:97:c7:e6:53:b1:
be:f3:ac:96:91:52:19:79:2f:a4:b2:27:f6:63:c9:
4e:71:3f:0a:84:d8:d7:b8:97:40:63:29:59:7d:7b:
70:2c:67:0d:ed:06:39:58:d1:1c:55:36:3d:99:45:
c4:ca:a9:3b:6d:28:8a:b5:2b:61:08:cc:d0:9e:17:
f9:5f:3d:94:37:f3:12:69:47:cd:4d:7c:db:fc:be:
5a:49:e3:fc:e5:d6:9b:04:0f:70:f0:95:09:62:cd:
05:b4:ef:c6:e2:de:89:06:5c:ae:21:38:e2:e4:b8:
c5:db:81:09:40:21:80:48:41:3c:4b:23:bc:10:49:
3a:6c:92:96:dc:ee:f0:76:80:69:97:93:e0:f7:bb:
71:a7:2c:cd:9f:3c:bb:56:37:c3:d6:6a:75:be:27:
c5:76:02:70:97:b3:c6:f4:85:cf:b2:70:c5:97:00:
90:33:1a:f2:54:ff:5e:e5:d8:f5:f3:25:42:f5:c8:
f8:77:07:1f:8a:5d:83:1a:68:81:c6:54:b8:91:fe:
75:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3B:32:5A:6B:84:8D:74:A6:91:B0:18:1E:24:7D:83:FA:85:66:5C
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SjsyWmuEjXSmkbAYHiR9g_qFZlw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.64.0.0/12
Signature Algorithm: sha256WithRSAEncryption
2b:41:72:9b:09:20:d5:9a:1c:06:9d:dd:ad:d1:b5:27:10:81:
6e:7e:92:80:c3:1c:f5:37:88:ae:0b:74:95:57:ff:9f:68:f5:
b3:37:1f:4a:f6:1b:a4:33:06:38:23:28:c3:65:fb:b8:31:70:
32:aa:bf:18:8d:5d:3d:c5:b2:41:26:01:3f:7d:90:4d:9b:ab:
64:71:d2:a3:eb:f7:0a:17:46:39:5d:2d:b0:92:3e:73:6c:0f:
b8:06:09:99:d9:42:2d:f8:6f:71:ae:d2:b9:01:84:ad:e0:98:
18:8d:00:e7:68:ba:d9:a0:a5:77:43:19:66:1c:35:e2:de:a0:
0f:7e:ee:79:8c:8b:41:60:51:7c:96:15:76:a8:9f:fc:88:b1:
06:55:6f:f1:0c:40:47:2f:ce:ae:cb:3d:a7:98:5f:b5:54:f9:
42:63:42:11:13:eb:9a:1a:2f:28:f8:c9:95:b2:22:24:4d:d0:
75:1e:b0:4f:c6:a3:fd:d8:c7:b2:aa:c7:8d:f2:28:34:9d:1a:
3f:ae:aa:5e:40:ef:cd:30:30:77:84:91:e1:46:ae:be:9e:e1:
98:bb:a9:f3:b2:c0:f8:24:c5:75:4c:71:87:fc:9e:ea:1b:f3:
51:da:7f:51:b8:f0:7e:01:ff:16:12:b2:af:ab:f0:b7:03:0e:
5f:71:9b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org