Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/yf_sHa-LAkoRBotkylXsKwN7Jic.roa
File: yf_sHa-LAkoRBotkylXsKwN7Jic.roa (raw, json)
Hash identifier: mYgJYF/AcVzC4F+bF1gyXjXK9o82FfQ1v8EEhUccGYI=
Subject key identifier: C9:FF:EC:1D:AF:8B:02:4A:11:06:8B:64:CA:55:EC:2B:03:7B:26:27
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0816
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/yf_sHa-LAkoRBotkylXsKwN7Jic.roa
Signing time: Tue 29 Sep 2020 09:58:20 +0000
ROA not before: Tue 29 Sep 2020 09:58:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 36040
IP address blocks: 2001:b032:c0ff:1::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2070 (0x816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:20 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C9FFEC1DAF8B024A11068B64CA55EC2B037B2627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5a:1c:4d:92:d5:c6:53:71:69:ea:e7:bc:6b:
de:4f:8c:d2:e8:f7:b7:da:1d:37:08:44:e2:ef:8c:
5c:45:22:23:6a:c4:62:f0:03:4f:7e:4c:03:f1:66:
7b:c9:3a:dd:c0:43:32:a3:0e:93:2f:3f:0c:79:8f:
44:46:f1:d4:b0:8e:19:66:dd:d6:94:50:b3:6e:93:
e5:39:3b:b3:a8:8b:5f:c4:96:6d:c7:b8:c2:bc:07:
84:37:2c:12:9c:4a:96:67:fb:d7:e0:fe:d0:75:0d:
28:af:71:cf:49:4c:91:a2:62:98:7f:15:0b:dc:5b:
32:90:ca:34:c5:49:26:03:a5:fb:4e:49:c1:49:34:
8f:1e:36:69:2f:a1:7f:4a:bd:54:8c:e6:56:54:ac:
bc:2d:d6:fa:84:e2:e8:ea:b8:bd:1e:a7:04:11:a8:
7e:d6:e6:5b:f9:b1:ce:b2:02:8b:be:59:b1:b1:ba:
39:3e:66:be:0e:7e:d2:d1:49:e3:20:04:20:10:12:
61:98:59:36:53:63:b5:e0:c2:11:3e:92:32:85:7f:
99:7b:3a:46:8d:e2:92:77:77:dc:b3:88:97:8e:f7:
f3:ea:c3:dc:6d:73:23:8a:73:2a:9b:65:9b:17:d2:
34:59:ea:de:6d:39:09:de:c9:5f:07:26:90:2c:84:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FF:EC:1D:AF:8B:02:4A:11:06:8B:64:CA:55:EC:2B:03:7B:26:27
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/yf_sHa-LAkoRBotkylXsKwN7Jic.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b032:c0ff:1::/64
Signature Algorithm: sha256WithRSAEncryption
1b:21:04:cf:a7:94:07:df:47:e9:45:9c:f4:f6:29:5e:bf:a5:
7f:45:a2:79:0d:5a:8a:0b:19:cb:6e:de:2a:84:21:54:97:9f:
b0:68:e5:fd:7b:2d:45:dc:94:ef:3a:eb:f7:7d:3b:37:03:e8:
58:6e:f4:1a:8a:6b:0d:e5:8c:fa:43:07:c7:95:80:ec:56:02:
6a:14:93:aa:9c:0a:7b:08:59:ac:a5:9c:6e:3a:09:bc:53:ac:
a0:b5:6b:d8:d7:bb:4d:6b:7d:5e:3b:1f:77:59:c0:25:b7:e3:
40:92:3c:01:8b:d5:db:5d:19:24:3b:75:bb:ee:2d:a4:3c:db:
ec:88:e5:f2:21:28:f5:dc:4d:67:1e:11:19:ac:2e:5c:25:d9:
1c:64:69:73:bb:19:6f:5c:39:08:66:1b:46:19:4f:46:ff:b4:
fb:4d:f0:fe:34:da:fd:8b:43:a1:8c:29:eb:76:36:a3:c1:57:
e6:2d:c1:91:f0:fc:f0:0c:5d:2b:14:cc:14:17:96:56:bc:c8:
6a:13:9f:d7:11:fe:51:82:a6:f3:ac:60:a1:90:99:4c:82:53:
0e:4d:12:9c:cc:a1:a1:10:b5:6d:7c:c2:38:49:66:67:18:89:
8d:e3:22:fb:f0:2a:49:8c:20:27:93:d9:6e:76:af:7c:7b:b2:
75:71:22:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org