Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/WzZFSakmKUTkSbavyxm28Vv-mFE.roa
File: WzZFSakmKUTkSbavyxm28Vv-mFE.roa (raw, json)
Hash identifier: HIeeXYMUA4XO4xmsnIQ5CwILS7gobLboZ+Id5iAenV8=
Subject key identifier: 5B:36:45:49:A9:26:29:44:E4:49:B6:AF:CB:19:B6:F1:5B:FE:98:51
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C74
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WzZFSakmKUTkSbavyxm28Vv-mFE.roa
Signing time: Wed 29 Sep 2021 02:51:17 +0000
ROA not before: Wed 29 Sep 2021 02:51:17 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 114.30.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3188 (0xc74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:17 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5B364549A9262944E449B6AFCB19B6F15BFE9851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:c5:53:35:35:84:d2:0d:7e:5f:e1:04:37:
a5:5f:aa:fb:89:d9:1c:b8:6e:9b:12:50:4f:c2:f9:
84:11:8c:9c:81:6b:37:ce:9b:4a:7d:ba:d3:c3:bb:
6f:d4:68:3b:b7:d8:99:45:d9:66:a8:37:17:95:60:
1b:a2:af:91:31:ae:f3:ec:e9:ee:87:7e:a7:9d:6c:
00:7b:dc:fb:37:c7:66:a3:24:55:f6:72:7d:90:71:
7b:39:05:8f:7a:4f:67:96:4d:06:63:29:41:ca:c6:
03:2c:47:39:ff:82:1c:09:df:b0:34:3a:7d:d1:2c:
f2:1e:69:30:02:10:c4:75:f9:35:a8:bc:2e:fc:90:
f4:49:a6:fc:d8:20:b6:47:98:d6:63:e4:fb:a5:1c:
26:f7:17:45:cf:18:4e:72:3b:54:d6:b4:b0:d4:ce:
5d:a1:13:29:5d:b7:51:27:9c:e8:7a:44:0d:8d:53:
1d:9d:04:6e:a1:e2:df:82:52:dc:99:e3:c2:1b:bf:
d2:63:fb:d7:c3:20:f6:09:e9:55:16:32:cc:80:c1:
04:88:55:14:13:f7:49:f0:48:79:f5:cb:a5:a4:1e:
15:7c:85:5d:59:43:dd:a2:0f:0d:1b:bd:d8:71:ab:
17:67:69:b7:2c:89:1c:a8:3a:5f:9a:bc:a8:84:c9:
bc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:36:45:49:A9:26:29:44:E4:49:B6:AF:CB:19:B6:F1:5B:FE:98:51
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WzZFSakmKUTkSbavyxm28Vv-mFE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.30.44.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:08:72:26:df:2b:32:53:e2:92:e8:33:a7:a7:26:6e:40:6c:
8d:cb:dc:cf:48:81:94:55:95:7b:c7:67:06:0a:99:39:28:93:
75:b4:70:72:02:ba:5d:ac:75:2d:88:e1:c1:1b:d0:6b:f8:d1:
32:23:39:52:8f:c1:43:7a:ff:34:6f:dc:3f:b8:31:ec:f2:b0:
75:39:63:8f:53:b0:1b:43:81:18:e4:ab:91:e9:61:db:19:33:
d5:71:d8:b1:df:81:2d:fb:c3:c4:a2:ef:b1:2f:c3:b1:31:80:
4f:c7:5f:48:b0:8b:55:78:28:44:7d:a4:5d:8d:42:7a:e4:3b:
ee:4c:7e:dd:c8:75:05:06:d4:03:b1:67:c3:63:26:f4:ca:c3:
89:88:d9:dc:0d:ff:b4:78:25:00:1c:69:93:23:12:d1:bd:20:
67:25:30:c7:9f:6d:67:fc:18:1a:21:34:19:dd:58:d8:b0:d0:
95:b9:ff:32:3b:d5:25:87:6b:f8:38:60:9a:08:28:15:bf:79:
56:ba:02:7f:aa:33:2b:79:f7:ed:0e:10:bd:1f:65:cb:40:c7:
90:a7:25:79:3e:9a:3e:dc:a4:14:7e:0d:19:3c:7e:cd:20:d2:
ab:7e:8e:e0:09:f4:36:17:6f:ad:d2:e3:5d:85:e1:9f:88:92:
63:6e:2d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org