Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/m9RvmAhrqDo1lKM2Vb4kYmSh_6U.roa
File: m9RvmAhrqDo1lKM2Vb4kYmSh_6U.roa (raw, json)
Hash identifier: K8vT1gNOAlRFav0QjAEHKM5c3NUVCWU0ppbDwvfqP4Q=
Subject key identifier: 9B:D4:6F:98:08:6B:A8:3A:35:94:A3:36:55:BE:24:62:64:A1:FF:A5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/m9RvmAhrqDo1lKM2Vb4kYmSh_6U.roa
Signing time: Thu 15 Sep 2022 02:48:43 +0000
ROA not before: Thu 15 Sep 2022 02:48:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 220.128.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9BD46F98086BA83A3594A33655BE246264A1FFA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:cd:58:2c:64:cd:bf:07:8c:1f:ac:71:9f:
3a:e4:48:98:1c:79:69:fb:71:57:97:9f:71:55:15:
4e:55:bd:43:e5:21:a6:d6:05:8a:1d:a9:6a:99:4e:
87:48:00:51:74:2e:a5:24:8f:be:78:9d:df:06:5c:
ec:a7:4e:35:63:87:80:5a:92:4d:a2:3e:a1:d5:7c:
7c:aa:32:60:8c:5a:98:14:aa:05:a7:d0:50:bc:7e:
cd:4b:06:87:84:60:46:ae:06:06:ac:b4:2f:4e:09:
d6:a1:53:51:d4:19:82:31:e3:d0:90:1e:26:cd:c8:
14:18:67:2c:0e:80:1d:e7:bf:3a:58:f2:f7:b8:4b:
60:5e:6c:6f:5b:77:60:a5:56:79:26:ff:00:37:78:
c7:ec:3e:d2:7b:bf:55:34:4a:54:e0:a5:e9:e6:f4:
4f:0d:d2:a0:f7:36:b9:a2:e8:d4:ac:b1:24:e4:c8:
b3:68:da:7b:38:8b:5b:94:43:7d:c6:7c:9c:4d:64:
19:46:2e:f1:8e:cd:a9:fe:94:a2:12:02:da:39:6e:
f2:c1:4d:39:0c:05:a4:0e:7e:1e:51:0d:31:af:b3:
3e:17:78:2e:17:1a:d6:3d:12:17:ca:82:52:44:56:
17:e4:af:3c:f9:fc:9e:3c:be:af:8b:d0:19:cb:07:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D4:6F:98:08:6B:A8:3A:35:94:A3:36:55:BE:24:62:64:A1:FF:A5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/m9RvmAhrqDo1lKM2Vb4kYmSh_6U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3c:23:bc:7a:a6:76:11:18:2e:42:e5:7c:85:d8:f1:07:55:1f:
51:d5:59:d0:8f:03:db:d0:26:9b:92:ab:e8:79:ec:6b:d0:7b:
e6:2a:61:1a:f3:a0:e5:39:87:0a:7a:34:fb:c1:93:dd:c0:33:
09:51:2c:aa:ab:da:cc:38:2c:17:11:80:63:92:76:dd:5b:2b:
ca:c9:4b:64:08:17:1f:f9:ff:cb:bb:da:6d:0c:de:83:34:d3:
7a:60:86:70:96:a9:9a:75:7d:92:2d:0e:aa:9f:56:a9:47:1a:
68:93:bd:8b:5e:83:58:42:d0:d5:94:6e:8d:75:a7:09:fc:1c:
e0:1b:2c:49:17:b0:56:2e:a5:7a:dd:87:8d:28:60:61:a9:15:
21:b0:15:c4:06:9f:88:8f:f6:30:ee:6b:20:61:5a:09:fb:e1:
4c:4c:70:d2:5c:de:68:41:2c:bb:6d:8f:5b:5e:c3:85:9a:b9:
a9:78:6c:e1:f5:7b:1b:ad:86:36:eb:aa:60:0f:b1:bd:a4:58:
42:b5:2e:3c:6c:f5:24:c5:4a:cd:02:99:49:e0:66:53:ca:73:
5f:48:2b:3c:cf:fd:c4:9d:a9:c9:b3:a6:bb:34:f4:16:32:f2:
d8:73:38:29:44:cc:7f:b0:68:a4:74:4e:8c:c7:7d:bc:09:04:
2a:49:75:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org