Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/zyy6sh8F13rznEGv2abjW4kd53k.roa
File: zyy6sh8F13rznEGv2abjW4kd53k.roa (raw, json)
Hash identifier: npqGebRFXr9jqXIIFlADMGAc2AIQ3rLj1ElNqNu4B3A=
Subject key identifier: CF:2C:BA:B2:1F:05:D7:7A:F3:9C:41:AF:D9:A6:E3:5B:89:1D:E7:79
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C3C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/zyy6sh8F13rznEGv2abjW4kd53k.roa
Signing time: Wed 29 Sep 2021 02:51:03 +0000
ROA not before: Wed 29 Sep 2021 02:51:03 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 61.217.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3132 (0xc3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:03 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=CF2CBAB21F05D77AF39C41AFD9A6E35B891DE779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:51:ef:ec:2e:b2:61:66:d1:cb:de:5c:6a:12:
77:21:01:a2:5a:f5:e5:4f:36:33:5c:8f:f8:93:18:
d2:d9:de:12:46:69:da:9d:88:19:f4:38:9f:ac:af:
64:6b:a1:75:2c:7c:ca:09:3e:7c:b5:8c:ec:af:94:
99:b9:a6:f7:34:8e:97:13:7d:06:b0:65:ae:7f:79:
06:cb:b6:54:6b:16:36:4e:c9:f2:d8:88:0a:2b:5a:
9f:0e:a0:3e:37:d2:93:4a:82:cb:15:4d:59:84:cb:
e9:2b:95:a6:63:fc:d1:9f:b1:2a:df:ba:0a:db:ea:
94:34:82:fb:56:8d:eb:76:cb:45:b5:ed:52:de:12:
4e:ec:ac:46:68:a3:19:30:7e:ec:8b:9a:6b:6b:39:
7f:21:7d:7f:14:b1:83:81:48:e8:5d:0a:ff:47:b5:
7d:4b:a3:83:7d:c1:93:94:2c:b2:ee:8e:10:7c:2f:
05:8a:d3:1c:3c:57:70:13:0a:66:b6:2c:d9:40:18:
1c:5f:68:95:c3:06:e4:8a:4e:8b:cb:ee:11:67:c6:
bf:b5:a1:03:f9:a4:6e:8b:93:5a:d5:3e:59:41:9b:
0e:d8:75:6f:7e:cb:53:43:d0:fa:49:8e:50:53:86:
8b:7c:ba:29:9b:a4:cc:c3:57:c9:55:72:29:54:67:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:BA:B2:1F:05:D7:7A:F3:9C:41:AF:D9:A6:E3:5B:89:1D:E7:79
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/zyy6sh8F13rznEGv2abjW4kd53k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.217.0.0/16
Signature Algorithm: sha256WithRSAEncryption
be:d1:07:18:b0:b9:9a:2b:ca:65:9f:03:ef:1a:98:8a:45:a2:
f3:ca:11:d6:82:08:01:2d:fe:e4:c2:92:6f:43:44:11:18:19:
c1:7d:e3:79:c6:1f:dc:56:4b:78:d1:ee:1f:d9:c0:17:ea:33:
37:93:22:b5:8b:5a:0a:35:e3:15:13:2d:2f:ad:17:61:18:b3:
5f:2a:82:01:f3:2f:eb:46:3c:a6:4e:66:cf:d7:8a:ac:bd:13:
52:4c:3c:4b:68:4b:90:ea:aa:0e:c8:00:49:55:cf:49:bc:68:
9f:10:8a:81:8b:54:ae:06:2e:e9:e3:c8:1c:c6:a7:a9:67:d2:
57:66:73:5c:c0:de:b4:c3:b3:d6:e5:8c:f6:e3:8f:4d:d4:60:
05:3d:5b:0b:c7:65:0d:49:c0:69:b2:d4:f1:31:d4:c9:19:5c:
2c:dd:d5:0c:ac:82:e5:05:18:97:4d:3d:d8:3d:ff:df:43:de:
ab:cc:18:4d:8c:9d:06:2e:bb:20:94:35:65:13:0f:7f:2c:ca:
d1:84:79:dc:09:29:ec:5e:12:6c:4d:3f:40:ef:2d:02:aa:46:
47:e7:c0:75:32:2d:25:a9:a8:e9:bb:69:8b:af:e6:d3:dc:51:
ef:a0:cd:b4:61:12:78:fd:c0:24:b3:1e:75:af:91:a5:70:fd:
61:08:6f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org