Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/pI-EDjQqfHviWZ6vI6sTYbsd2Oo.roa
File: pI-EDjQqfHviWZ6vI6sTYbsd2Oo.roa (raw, json)
Hash identifier: hVaKASD3lUgMvvcFQgeUAh12mlM+Qw6HjbAA6vlxZIg=
Subject key identifier: A4:8F:84:0E:34:2A:7C:7B:E2:59:9E:AF:23:AB:13:61:BB:1D:D8:EA
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pI-EDjQqfHviWZ6vI6sTYbsd2Oo.roa
Signing time: Thu 15 Sep 2022 02:48:03 +0000
ROA not before: Thu 15 Sep 2022 02:48:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 36040
IP address blocks: 202.39.67.192/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A48F840E342A7C7BE2599EAF23AB1361BB1DD8EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:68:57:f0:a5:32:eb:91:a0:d0:78:ed:fb:25:
35:58:42:6c:8b:ad:d9:7e:c7:f7:8e:74:1b:21:52:
8e:9f:4f:60:2c:67:aa:29:ae:6a:2a:aa:bb:2a:6d:
39:8b:2a:87:11:56:22:ef:e9:42:e2:b0:eb:e7:55:
60:6e:c2:29:3d:5d:29:ef:9b:a7:53:65:92:1e:1c:
76:4b:3b:da:7b:f2:21:d8:04:fe:11:a4:21:f9:33:
d0:d6:ee:eb:c9:99:c8:7b:8b:b2:6f:d1:d7:98:22:
17:52:54:c5:96:6b:de:7e:f7:67:e3:f4:49:b4:e5:
47:7d:4a:1d:c5:5a:17:87:d0:f4:ab:2f:69:1e:fb:
80:cd:bb:13:68:5f:55:5d:f2:eb:e6:be:cb:43:3d:
60:74:33:83:7b:4e:d2:b4:f5:08:91:b4:bd:76:de:
83:73:bf:6e:f3:a8:9d:3b:1f:87:bf:d5:4e:41:76:
63:c1:9c:d3:39:37:35:f8:d9:1e:b2:9d:78:4a:b2:
77:0e:b3:55:57:d3:90:fe:71:c9:d5:4e:be:2a:d4:
d1:75:7d:b0:01:47:a6:60:7f:2d:28:0c:41:d5:67:
be:ea:9e:03:f7:8d:e9:30:a9:ef:19:c0:c1:95:1e:
a3:8b:fd:3d:70:26:12:5e:c6:fd:2a:b4:f3:e5:ee:
8d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8F:84:0E:34:2A:7C:7B:E2:59:9E:AF:23:AB:13:61:BB:1D:D8:EA
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pI-EDjQqfHviWZ6vI6sTYbsd2Oo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.67.192/27
Signature Algorithm: sha256WithRSAEncryption
30:8d:15:aa:d7:b9:58:60:14:d2:96:77:32:3b:3f:23:68:22:
79:cd:fc:fb:39:dc:91:d0:50:6b:ca:94:50:84:22:34:c0:96:
55:23:b5:ea:ec:d5:a3:e5:3c:8e:23:03:88:6c:af:10:de:26:
b5:39:c3:24:c8:e4:e2:24:57:65:85:63:5c:ff:67:02:6c:91:
ca:a8:1a:01:60:65:1b:9a:b9:89:16:d0:5d:6b:61:f7:bb:f1:
8a:77:3d:13:42:45:87:b9:ce:29:1a:01:08:59:70:b3:59:a6:
ae:37:89:74:ec:58:81:ba:49:3d:71:34:f8:18:31:a2:89:57:
34:28:a0:1d:80:bf:2c:9c:25:b5:21:8c:d6:30:93:34:f9:be:
6e:f9:6f:51:c4:f0:5a:b4:aa:82:6e:2d:5b:c4:ef:e5:cb:22:
47:d3:6c:fd:55:9b:83:5a:85:92:6f:7e:66:f1:4f:af:0e:08:
4b:ca:3f:ad:a6:c2:c2:75:0b:49:dc:7d:ed:07:b8:e4:00:f6:
45:27:6e:e6:ec:96:72:a2:4f:3b:fb:aa:36:8f:8d:2f:e5:84:
a0:92:31:14:e2:2d:cd:b8:6f:03:e5:fe:4e:67:85:cc:75:c8:
8d:53:d4:e0:0b:92:1a:22:14:e1:c6:8a:f3:bd:77:76:51:db:
e6:29:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org