Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/o8ThZlkaxD6fGYEKS2gGxaYzxRA.roa
File: o8ThZlkaxD6fGYEKS2gGxaYzxRA.roa (raw, json)
Hash identifier: GMaSKgl625gztrpi9LREURzEXUC0CQyd9RH8BfW0Jpk=
Subject key identifier: A3:C4:E1:66:59:1A:C4:3E:9F:19:81:0A:4B:68:06:C5:A6:33:C5:10
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/o8ThZlkaxD6fGYEKS2gGxaYzxRA.roa
Signing time: Thu 15 Sep 2022 02:48:15 +0000
ROA not before: Thu 15 Sep 2022 02:48:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 59.124.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A3C4E166591AC43E9F19810A4B6806C5A633C510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:a8:80:f4:bf:f4:cf:33:16:f8:5f:0e:31:
57:93:62:9f:fa:b6:6b:b1:35:d2:ef:36:88:75:dc:
42:80:fc:75:87:48:9b:dc:78:5e:9e:5a:7c:c3:5c:
44:d4:7f:85:9a:26:ea:00:14:9f:88:e4:5c:2f:7d:
ee:a7:c9:f4:d5:57:82:1d:40:f8:89:11:6a:d8:0d:
93:b3:35:f3:03:81:12:9b:2b:c2:01:ef:60:49:a9:
e4:3f:f7:fd:8b:11:04:cc:72:bb:40:c7:6b:85:d9:
34:ef:92:ef:6a:92:6a:51:77:de:7a:e6:25:9c:ba:
3d:4a:ce:35:fe:7f:b0:71:e6:6f:a8:43:b0:e7:64:
6f:a5:d6:78:94:0b:ae:e3:1c:88:0c:33:69:ed:3b:
27:cc:f7:85:d1:87:20:5c:eb:1b:09:6d:4e:ff:cf:
16:23:03:6e:99:55:cf:10:12:08:85:92:0f:a7:4d:
27:b0:50:07:7c:4c:2f:e9:6e:01:b4:a8:fc:f7:c4:
bc:2a:84:e9:c9:f6:f9:3a:83:0e:10:d4:ba:fb:4e:
4f:72:2f:23:54:e9:03:0d:10:a0:f8:7e:4f:ce:a3:
4e:87:6f:6d:66:66:ca:c0:15:2b:49:32:9c:c5:d8:
c1:71:ed:36:5a:df:e4:9b:2f:bd:2d:f4:7c:b9:e6:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C4:E1:66:59:1A:C4:3E:9F:19:81:0A:4B:68:06:C5:A6:33:C5:10
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/o8ThZlkaxD6fGYEKS2gGxaYzxRA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.124.0.0/14
Signature Algorithm: sha256WithRSAEncryption
55:c7:76:61:b0:2c:9e:5d:68:dd:67:f8:83:7b:65:6f:e0:30:
60:5e:81:de:1f:74:0b:4d:df:c9:c5:00:77:b7:a1:ba:e3:7e:
44:3d:39:7c:d7:76:31:c7:2e:ed:82:a8:ab:97:19:79:ec:f9:
6b:d2:54:2d:6c:19:07:7b:af:9c:c5:62:5e:3f:fc:e4:f2:1c:
58:5b:3d:c6:bf:ed:83:77:46:23:92:72:24:14:c6:1c:52:56:
f8:52:58:d2:ea:47:56:49:55:95:5d:5a:74:26:40:ec:25:78:
ed:b0:0c:31:0c:65:11:0a:56:9f:db:31:f6:32:d0:ad:e3:24:
7b:ab:91:37:d8:42:e0:e2:d0:fe:99:9f:f1:11:92:18:6d:41:
0d:96:4c:71:7d:40:8a:08:a2:a0:a4:72:47:f9:c2:99:96:15:
a9:06:68:0d:63:c5:3b:ce:79:00:fc:c9:40:95:ac:51:1f:74:
78:4f:56:55:92:1b:d9:19:fe:68:53:56:82:ff:64:5f:3d:f6:
60:ed:ee:67:38:2e:e4:d7:50:a4:c9:38:93:62:ca:8d:d6:4e:
c6:da:11:17:ac:72:dc:77:2b:f7:d7:30:a4:0b:17:60:d4:24:
b9:ed:c6:0a:56:7e:a6:03:d9:10:53:d8:e5:ad:4d:fb:5c:c2:
b3:45:63:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org