Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/c96DHlt5ayNnBc13FQfY-VoUPWg.roa
File: c96DHlt5ayNnBc13FQfY-VoUPWg.roa (raw, json)
Hash identifier: B7VnnX8IsqIVh2hFPZWlNyD35WyNcQmqby+woDjKt3o=
Subject key identifier: 73:DE:83:1E:5B:79:6B:23:67:05:CD:77:15:07:D8:F9:5A:14:3D:68
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C24
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/c96DHlt5ayNnBc13FQfY-VoUPWg.roa
Signing time: Wed 29 Sep 2021 02:50:55 +0000
ROA not before: Wed 29 Sep 2021 02:50:55 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 211.22.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3108 (0xc24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:55 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=73DE831E5B796B236705CD771507D8F95A143D68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:c9:c1:cd:79:4a:47:98:86:82:df:6f:2f:
07:d6:2d:fb:6d:78:51:1d:f0:a5:ea:d5:40:95:dc:
7c:03:85:d4:0c:69:32:ee:f0:e5:68:5e:e7:7e:65:
96:fb:a4:a8:b3:de:e4:2c:2c:d7:a4:83:3e:95:13:
6a:96:1d:74:d7:a1:e7:1c:c1:f6:62:58:50:fd:53:
8c:24:2e:31:6c:db:73:35:70:80:ff:60:c3:b1:f6:
b0:f2:44:a4:2e:e3:b2:31:36:d8:b3:28:9f:86:49:
64:52:25:77:7c:1e:ee:70:13:0a:cf:6b:64:4a:70:
3c:e5:94:e9:82:ec:95:94:98:8d:15:b1:30:a6:94:
d5:84:fb:64:e5:b2:75:fc:76:e7:9d:89:ec:94:f8:
a6:bd:a3:82:41:2f:d9:26:18:86:fb:53:c5:cd:e5:
55:4b:2f:f6:2a:8d:57:b1:70:a8:1f:e0:4d:ae:94:
3d:20:d7:c4:85:c2:fa:10:9a:97:2b:90:3a:4f:28:
42:c8:08:7a:05:94:1c:ff:33:0c:7c:bc:a4:e8:28:
0e:5a:78:fe:f5:33:e8:98:7a:29:d1:d2:17:9c:50:
31:ec:55:0d:c6:c3:a2:db:ac:0e:44:99:e5:cc:91:
a2:06:d7:ce:a7:c8:4a:91:0a:44:52:b5:10:a8:40:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DE:83:1E:5B:79:6B:23:67:05:CD:77:15:07:D8:F9:5A:14:3D:68
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/c96DHlt5ayNnBc13FQfY-VoUPWg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.22.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:2b:55:87:05:e5:55:b2:fe:48:f1:86:d5:d3:fe:85:08:bc:
a4:24:75:d1:49:c5:8e:b2:07:7a:50:c8:af:84:8d:b4:14:5c:
6f:f8:91:c4:90:c1:9c:25:77:7e:4b:d4:f3:e0:98:b9:5c:6f:
9b:f7:37:1a:e9:14:ff:49:6c:32:64:32:b7:c9:52:34:f4:62:
00:84:50:9d:b2:71:05:38:6b:e4:8c:83:09:c9:b1:2f:24:fa:
9d:30:f8:5d:9c:a9:9b:10:5b:5a:bf:99:b8:25:d7:ef:ba:58:
be:69:63:e0:ec:80:8e:54:75:42:bb:a9:5d:cf:2e:24:4a:ec:
d5:74:75:42:8f:5e:de:52:2b:0b:24:f6:36:2c:7a:c9:65:c2:
fb:88:b6:44:f7:5c:48:7f:84:3a:48:7a:27:3c:b9:d5:27:12:
7c:17:63:f9:f0:cc:c9:fa:e8:23:0e:b4:99:90:c5:19:cc:ba:
f0:92:d0:f4:ef:b0:21:bc:91:79:05:a8:c5:25:0d:8f:5d:05:
19:e5:7d:c0:fc:cb:41:c1:1b:55:7a:09:68:15:b4:1f:d0:ff:
79:74:70:85:83:92:ca:37:9c:a9:ae:23:13:67:cc:ab:ca:97:
d0:5d:04:b8:d6:17:bb:0c:50:a0:6a:06:44:84:47:f9:3b:ed:
d3:88:5a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org