Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/VFCh0RbX2X8fCC9a1GUOGQVGcPQ.roa
File: VFCh0RbX2X8fCC9a1GUOGQVGcPQ.roa (raw, json)
Hash identifier: 2UT5MYqw410hs9058lSRBPU6RzUBQtaDH0DH8uQs0dQ=
Subject key identifier: 54:50:A1:D1:16:D7:D9:7F:1F:08:2F:5A:D4:65:0E:19:05:46:70:F4
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/VFCh0RbX2X8fCC9a1GUOGQVGcPQ.roa
Signing time: Thu 15 Sep 2022 02:48:12 +0000
ROA not before: Thu 15 Sep 2022 02:48:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 210.61.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5450A1D116D7D97F1F082F5AD4650E19054670F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:27:b3:8c:2c:aa:58:70:af:40:77:57:9a:
51:af:c1:fa:14:19:a3:81:e1:7a:55:61:8d:07:fa:
1b:ef:82:8b:e6:a1:1c:8d:65:99:7e:33:70:fb:58:
b0:81:98:2f:49:f9:19:65:7a:be:ab:3d:08:bf:9d:
ea:db:81:48:6b:6f:b0:99:e3:3e:be:ce:2e:27:59:
96:2a:a0:a1:cd:60:fe:26:32:82:c1:fe:dd:75:0b:
e6:d7:4b:61:73:03:85:3a:4d:d9:58:3e:c5:e8:ad:
3f:7a:6d:01:a8:03:6a:6b:af:e2:92:a9:ad:80:1d:
b1:9d:3b:ce:2f:e3:61:81:31:4e:13:af:2b:35:4e:
df:f5:4b:71:dd:8f:e2:da:f4:5e:f6:bc:a6:f2:1b:
c5:74:f8:ae:f8:f3:04:ea:97:9f:e1:83:6a:19:8b:
b6:2b:3a:1a:d2:40:1c:aa:4b:29:be:35:45:07:be:
c3:3a:be:1e:6f:09:13:d7:8f:1f:db:05:02:4e:d1:
01:48:f5:5b:38:73:fe:aa:dc:98:32:26:f2:1e:cd:
b4:c3:6a:7b:03:94:40:56:67:03:e8:0e:88:c4:7a:
b0:42:92:38:5b:25:08:e1:e1:09:b7:55:2a:43:9e:
0e:f8:f8:31:6f:1c:94:72:84:52:69:b0:fe:ec:66:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:50:A1:D1:16:D7:D9:7F:1F:08:2F:5A:D4:65:0E:19:05:46:70:F4
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/VFCh0RbX2X8fCC9a1GUOGQVGcPQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:08:38:6a:05:8b:80:f0:bb:62:90:b6:8b:01:c7:e8:f0:df:
12:57:e8:5e:14:c4:e8:09:95:27:2c:e1:96:29:c4:54:6c:c4:
c4:69:b8:6e:d2:d6:e2:93:69:93:9d:41:19:33:d0:35:ab:0c:
c8:1a:9d:b6:cf:b7:2c:51:46:0d:13:01:26:28:4b:be:dd:b0:
07:f3:dd:2f:5c:fe:1e:5f:9a:23:62:8b:b2:06:e9:1d:1b:58:
f9:39:01:5c:90:44:3c:24:18:5f:4b:a7:92:27:27:78:27:08:
c8:59:af:f5:e6:37:e8:fa:ce:c2:27:5c:e1:00:c2:7b:d8:84:
cd:a4:e5:6a:14:15:45:9f:6d:15:7b:af:ca:fa:c1:13:f0:45:
38:d8:ca:a8:5f:70:9f:40:f5:23:82:c1:b7:89:9c:c8:8e:43:
64:f0:57:e9:bb:b6:61:62:5a:d5:04:d4:f3:72:40:9c:60:a9:
eb:a2:7e:12:ed:43:d7:49:61:d6:d0:e3:21:6b:06:47:30:58:
b9:1c:95:f3:9e:11:4b:2f:ed:a4:0d:76:7a:2b:44:3d:2d:d3:
3a:ff:67:10:39:8b:b8:fd:7c:09:b5:ea:6a:e9:c7:3b:74:3e:
28:6d:aa:ea:0c:44:58:0a:bf:d8:8e:d6:72:84:77:7a:d3:ab:
65:7c:35:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org