Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/xw1O-LMyfuYA_8RJWCsxt1cQVMc.roa
File: xw1O-LMyfuYA_8RJWCsxt1cQVMc.roa (raw, json)
Hash identifier: tKF/KpumXkeRgdo58JqPIUZNKfIwMDmSl9RbQSnSQ8c=
Subject key identifier: C7:0D:4E:F8:B3:32:7E:E6:00:FF:C4:49:58:2B:31:B7:57:10:54:C7
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0A76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xw1O-LMyfuYA_8RJWCsxt1cQVMc.roa
Signing time: Sun 07 Feb 2021 11:37:54 +0000
ROA not before: Sun 07 Feb 2021 11:37:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 114.32.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2678 (0xa76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:37:54 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C70D4EF8B3327EE600FFC449582B31B7571054C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:e8:46:5c:de:10:1f:11:4a:ca:88:01:2b:
f0:63:ec:49:ae:42:30:00:5b:55:68:07:5c:ab:cb:
ee:a2:48:4b:6b:8c:34:73:93:32:44:e6:cc:85:01:
b4:b7:af:19:b8:00:4d:c1:72:2b:8d:56:35:7c:b6:
87:53:a2:07:8c:4b:ad:53:df:d7:22:54:91:6d:4d:
80:09:57:92:0c:54:f1:bf:43:4f:2e:01:83:52:95:
5d:35:9d:14:c1:fc:72:60:06:62:7f:ff:8d:3f:a2:
85:8b:c9:80:12:0e:03:8c:40:73:b8:6a:75:f0:1e:
a9:65:8a:43:03:c4:6d:0d:0a:79:96:0e:8b:19:a6:
c9:26:32:8f:48:e1:81:73:5c:ed:4b:12:2e:16:ff:
0a:34:3c:b6:07:ad:04:f7:57:c5:51:ab:19:f0:0f:
34:ce:d2:2e:1e:39:81:c9:53:e0:05:9d:46:fb:e1:
a9:cb:38:ee:40:65:0a:a0:95:b2:63:52:78:ca:31:
3b:69:61:d6:ea:67:d6:7c:24:fd:08:70:e8:09:d6:
91:27:12:34:08:31:25:a8:32:f2:3f:80:16:5d:08:
c2:0f:87:d7:6f:68:d9:1c:98:3a:14:78:5c:12:00:
69:ec:bd:13:3f:d5:eb:07:cd:f5:bd:e0:7e:ba:a6:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0D:4E:F8:B3:32:7E:E6:00:FF:C4:49:58:2B:31:B7:57:10:54:C7
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xw1O-LMyfuYA_8RJWCsxt1cQVMc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.32.0.0/12
Signature Algorithm: sha256WithRSAEncryption
3b:45:67:3c:77:fe:98:79:64:e0:32:03:6f:f6:34:94:6a:e5:
8b:94:72:c9:a8:06:a2:21:04:6d:4b:51:ee:2a:0f:21:f8:d1:
7e:18:74:e5:4e:27:27:82:0e:49:1d:fe:4f:1d:3f:7c:6d:20:
69:30:95:fb:33:87:f1:f1:c3:1c:11:20:3f:d8:25:f2:0d:01:
3a:c0:f3:33:fc:a7:a6:48:f4:3a:e5:db:7c:d5:8b:e3:e4:14:
70:b0:6f:68:07:0d:04:2a:f0:9e:09:bc:93:9f:57:9d:d6:fc:
5b:d2:83:b1:5c:e8:c1:70:e3:4a:99:2a:55:5d:e2:fd:fd:cb:
a7:f8:ea:3a:4c:2b:b1:1d:65:9d:bd:9f:ad:6e:04:56:ef:7e:
ec:27:07:1f:63:0d:8b:a2:0e:8c:26:e8:67:ac:5a:94:74:2c:
87:e4:fe:18:5a:bc:5e:1e:1d:64:5d:6c:67:7b:99:41:90:50:
5b:f1:02:0e:e3:2d:f6:46:b5:8a:6a:0b:f8:e9:f4:d6:b1:7b:
f2:8c:0a:55:0a:b7:46:00:7c:38:0d:a6:6b:42:b0:9b:05:fb:
76:5e:f0:5e:94:2b:dc:59:8a:22:a5:e6:7d:3e:93:2a:62:ad:
2a:47:d2:e7:64:d2:8d:8c:94:41:87:d1:97:75:fc:df:81:30:
df:7b:95:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org