Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/p92qVSAx5nUONJG2WZdFbEUyG2M.roa
File: p92qVSAx5nUONJG2WZdFbEUyG2M.roa (raw, json)
Hash identifier: 0+7o/2SdCTv+Oz+KBdPXBH1Oe6gBHWBw28HylT3Tbr4=
Subject key identifier: A7:DD:AA:55:20:31:E6:75:0E:34:91:B6:59:97:45:6C:45:32:1B:63
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/p92qVSAx5nUONJG2WZdFbEUyG2M.roa
Signing time: Thu 15 Sep 2022 02:48:11 +0000
ROA not before: Thu 15 Sep 2022 02:48:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 122.116.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A7DDAA552031E6750E3491B65997456C45321B63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:90:73:a8:29:be:36:18:6f:09:15:6d:88:
d9:f0:fa:98:89:7f:df:ff:ba:67:c6:86:04:49:2c:
96:ad:38:79:a2:27:c0:17:1d:6a:f5:2e:48:46:a3:
72:9c:53:98:c4:38:f6:8d:a2:2c:b2:a1:b2:25:5c:
7f:4a:03:1a:32:1a:c3:1e:74:dc:fe:fa:20:3b:c1:
36:d5:c5:63:94:88:c0:26:72:1a:81:51:54:0c:4f:
82:f2:db:7b:51:98:07:13:4a:e9:41:ae:38:9f:bd:
f7:8f:d2:73:11:3f:bb:3d:78:95:88:77:a5:ea:a1:
4f:69:4e:8c:2f:0d:e0:a2:b2:29:9e:45:5c:c6:bf:
6f:1e:1b:89:b7:81:31:4f:fb:67:81:95:86:25:32:
09:11:46:0a:cc:b8:00:21:20:67:bf:cf:4b:16:f8:
a1:4e:a2:9f:c7:f4:81:4e:0b:b7:7d:b3:be:ad:7b:
f6:b2:a0:4e:66:c5:a1:2d:73:84:8d:f2:49:b6:2d:
1c:0b:03:c0:11:b0:f7:b3:55:4a:4b:e1:ad:0f:d7:
5c:83:fe:eb:fd:10:41:9b:bf:b8:67:88:ef:9a:0c:
75:22:d4:8e:21:b3:d5:1d:80:68:2d:75:be:9d:52:
17:6d:ec:13:ba:02:69:73:79:33:68:dc:d0:7d:88:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DD:AA:55:20:31:E6:75:0E:34:91:B6:59:97:45:6C:45:32:1B:63
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/p92qVSAx5nUONJG2WZdFbEUyG2M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.116.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2f:23:1c:34:ce:b2:74:48:37:7a:47:51:f4:4f:81:2b:60:80:
51:c8:d9:cc:3b:e5:7d:c4:90:13:86:66:99:4c:d7:8c:f8:1d:
f6:a8:bb:7e:17:24:0c:f6:e8:ae:46:e8:59:a1:45:56:7c:72:
92:89:a7:32:fd:9e:82:23:a5:bb:68:ec:34:1d:e0:ce:15:0e:
c9:a1:1a:73:47:85:d6:27:eb:22:9f:4f:87:4e:db:e8:5a:00:
4c:80:6e:85:c7:50:8b:81:9f:a2:7d:69:df:46:2c:08:58:10:
ff:ac:1a:99:43:42:6d:9a:91:b0:3e:51:3e:49:19:9c:3e:4f:
39:08:96:05:20:1e:66:1e:db:1a:bf:2f:3d:a2:90:43:4e:84:
a2:30:e1:78:0d:9f:a0:56:ac:9c:97:1a:a6:09:43:42:1f:50:
92:95:9d:34:60:29:42:34:71:d3:a5:ab:36:0e:33:17:5e:a8:
6f:e6:08:a6:f8:52:4a:ed:22:16:e8:fe:5b:ed:4d:ac:49:1f:
5a:51:99:b8:a0:33:13:0f:53:91:77:3e:91:42:a3:ca:7a:99:
41:c4:a6:1c:9c:9d:ba:d9:01:0c:a5:c5:69:87:7a:08:79:c5:
d0:4b:d9:03:79:84:5c:45:c3:29:85:7c:2c:05:3d:b6:55:0f:
a0:74:54:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org