Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/TC82InMNbcyxDW7B2FU54FkZ-a0.roa
File: TC82InMNbcyxDW7B2FU54FkZ-a0.roa (raw, json)
Hash identifier: WuVBbBE+L9aBz/PN8dzNPIlbVZKC3a9sE3M46wVDpi0=
Subject key identifier: 4C:2F:36:22:73:0D:6D:CC:B1:0D:6E:C1:D8:55:39:E0:59:19:F9:AD
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C1E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TC82InMNbcyxDW7B2FU54FkZ-a0.roa
Signing time: Wed 29 Sep 2021 02:50:54 +0000
ROA not before: Wed 29 Sep 2021 02:50:54 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 210.61.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3102 (0xc1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:54 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4C2F3622730D6DCCB10D6EC1D85539E05919F9AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:06:de:75:7f:27:93:59:a2:1d:ab:de:1e:
4a:e7:c0:c5:40:81:28:0c:c9:2f:0e:fa:40:94:64:
5c:2e:17:72:4a:7c:16:4d:c9:90:e8:ac:fd:94:62:
5f:2f:6c:f0:6e:25:d3:94:16:69:0f:99:8e:69:d4:
b9:2f:07:7b:84:27:f9:54:d8:45:24:f2:fe:8b:8b:
38:0d:6a:27:0a:19:15:9b:09:ee:7f:65:c7:ef:6d:
69:40:6a:7a:8a:5b:a6:72:f1:14:d9:cb:56:4d:5d:
ef:2e:53:a1:5a:ca:ba:7b:e6:ff:c5:af:10:f7:49:
82:ec:3e:a4:da:ce:94:56:01:41:69:28:f8:ea:15:
e9:c4:a1:66:98:44:fc:cb:80:28:97:61:73:13:73:
d8:83:f4:01:e2:e0:7d:7c:b6:43:38:ea:8d:80:ea:
db:fb:54:04:f2:da:6f:74:8c:95:1e:80:62:f1:fd:
84:5d:18:70:31:48:8b:2d:d9:87:26:6b:92:b2:b8:
f2:cc:6f:ab:61:6b:81:43:90:62:d6:ef:e5:b4:87:
47:69:24:e4:e5:b5:7c:54:20:2a:20:14:67:54:41:
05:4e:84:c9:f4:a0:e6:6d:8c:43:e7:92:54:b1:cc:
14:ba:21:2f:2f:53:b7:fa:44:11:7c:cf:e6:39:b8:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2F:36:22:73:0D:6D:CC:B1:0D:6E:C1:D8:55:39:E0:59:19:F9:AD
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TC82InMNbcyxDW7B2FU54FkZ-a0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b8:56:0f:2c:59:8d:de:4f:7c:7e:0d:1c:5d:4a:9b:ad:56:63:
26:63:6e:4b:1d:8d:d2:38:9a:79:67:97:e1:4b:d8:d0:20:a1:
da:13:f1:f4:7d:c5:ee:28:e0:a7:53:b9:b3:79:c6:1e:65:06:
4b:bb:37:fe:fe:fe:87:8d:02:d2:09:ae:03:93:6d:e9:44:fc:
53:21:ea:2c:9c:bb:97:e0:06:6c:f5:2a:b9:8b:35:43:af:e7:
14:49:03:4b:79:5e:a7:ce:90:b8:26:a3:31:40:76:9e:69:64:
f9:ae:06:7e:a6:80:23:c9:27:77:bf:48:ac:bd:ca:65:5d:8f:
10:09:c9:4f:4f:a8:25:34:e3:6c:10:47:72:52:9b:72:af:63:
24:6a:1e:83:7e:1d:86:a8:06:17:f9:c4:e1:0a:bc:e2:8e:a1:
6f:8a:a3:aa:88:bd:42:b3:c3:d7:d8:e0:77:95:14:cb:70:e6:
c7:39:65:70:5a:46:43:9f:7b:11:48:2c:7f:c8:5b:db:15:f4:
6a:2c:8c:dd:6a:c7:dc:b0:92:1e:47:a0:9e:a9:5f:b2:6a:89:
a5:5f:04:bb:06:79:20:42:b6:9c:e5:0b:c9:0e:79:8a:57:2c:
0a:7f:84:08:09:86:d3:b0:99:0f:da:77:cb:fa:0c:4c:e4:e2:
25:e1:6c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org