Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/-InQRxhtXfNgIAg2QnKrM7847RE.roa
File: -InQRxhtXfNgIAg2QnKrM7847RE.roa (raw, json)
Hash identifier: 2uQxUgQNrOp5mJbyyb+Jn9rlejauf9Rbs81Bn7Zjm14=
Subject key identifier: F8:89:D0:47:18:6D:5D:F3:60:20:08:36:42:72:AB:33:BF:38:ED:11
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F59
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-InQRxhtXfNgIAg2QnKrM7847RE.roa
Signing time: Fri 01 Sep 2023 08:56:58 +0000
ROA not before: Fri 01 Sep 2023 08:56:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17421
IP address blocks: 111.70.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3929 (0xf59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F889D047186D5DF3602008364272AB33BF38ED11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:de:9e:f3:1d:7b:fc:6d:97:bf:9f:d3:03:
5f:e6:c2:af:90:df:ce:0a:94:27:61:22:28:35:15:
ac:23:a4:43:66:dc:ff:24:ff:69:77:77:4f:41:85:
ed:1f:af:5e:f3:fe:f5:60:09:45:b2:59:ab:40:b2:
59:83:d6:7c:ea:c1:ce:66:a2:58:11:c8:46:50:10:
b2:b7:d1:c5:37:db:58:d8:9b:80:3a:b8:36:4c:3b:
42:a5:4c:b8:2b:7f:e0:5e:e6:c6:5b:b4:0e:45:92:
cb:c6:be:57:47:0d:e5:f8:11:dc:46:e0:86:d8:2c:
da:ea:98:af:db:4d:db:10:38:15:fa:6a:4e:36:2a:
2e:fb:f1:30:5d:e0:b3:6b:9c:a1:fd:be:d3:6f:04:
2b:4e:03:79:f1:9d:23:3f:7e:37:2a:35:6d:a8:3e:
8b:24:e9:db:bb:f4:cc:94:3b:d7:e0:c5:d6:da:6f:
3b:26:39:ac:47:61:dd:e2:95:6e:72:9f:31:46:a2:
c2:49:c3:8f:23:b2:5a:75:08:81:b3:b2:c9:22:15:
58:f4:c6:ff:16:2a:24:5b:4a:26:62:c9:f9:df:90:
5e:62:f4:43:c9:7a:d5:20:9c:3d:cf:42:7b:6e:e2:
90:32:49:c9:16:bb:55:8d:56:f3:54:ef:b4:f8:de:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:89:D0:47:18:6D:5D:F3:60:20:08:36:42:72:AB:33:BF:38:ED:11
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-InQRxhtXfNgIAg2QnKrM7847RE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.70.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b3:20:a0:a3:2a:04:73:77:b6:38:d8:61:bc:2b:3d:c0:a4:aa:
5e:23:d7:ba:05:86:01:fa:54:0e:be:78:54:57:7f:2a:40:29:
68:eb:31:71:70:fa:30:98:56:35:6a:f6:f1:66:29:38:cf:fa:
02:25:cc:bf:e9:40:1c:00:fc:fb:8d:92:84:ff:09:bd:8a:2c:
fa:8b:c5:c9:a4:1c:a0:28:bb:6f:e3:78:ca:fc:6a:c2:18:93:
56:3d:c6:25:de:ea:9f:ad:f4:d1:66:a6:88:ba:1a:68:dd:71:
59:ea:ec:07:61:d9:37:26:c3:06:78:e1:80:7d:67:3c:7a:cb:
8c:55:9d:0a:18:a3:f2:e2:37:03:a4:06:39:f7:f0:8f:fd:95:
c2:bf:72:1c:06:43:0c:17:61:39:f7:18:3d:92:26:d3:42:f1:
32:47:85:8f:08:3f:24:5e:47:54:80:5b:d6:56:22:cf:09:63:
8a:53:a7:28:e3:d0:85:72:23:c1:df:7a:42:25:38:23:b4:61:
e8:02:7f:a2:0e:ce:d9:c9:f1:88:f2:89:09:c0:e2:a7:32:e0:
89:67:97:d7:72:92:bd:8d:d6:2d:9d:e3:b6:ec:db:f4:df:5d:
67:f1:62:b6:59:58:f4:da:23:f9:51:78:5d:f1:10:3f:60:37:
79:07:89:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:42 2025 by rpki-client