Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/29SBwbRQS8uoL0ebREMMZz6gK2c.roa
File: 29SBwbRQS8uoL0ebREMMZz6gK2c.roa (raw, json)
Hash identifier: D/gGjG77bbZluD3j7RuUp24Cd75VWccHTVg6gQfqp3Q=
Subject key identifier: DB:D4:81:C1:B4:50:4B:CB:A8:2F:47:9B:44:43:0C:67:3E:A0:2B:67
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C11
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/29SBwbRQS8uoL0ebREMMZz6gK2c.roa
Signing time: Wed 29 Sep 2021 02:50:50 +0000
ROA not before: Wed 29 Sep 2021 02:50:50 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 122.118.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3089 (0xc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:50 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DBD481C1B4504BCBA82F479B44430C673EA02B67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:f3:4a:d2:8c:fd:dd:d8:46:e0:c7:3a:8b:
1e:73:b4:11:91:39:b4:bb:ec:58:e4:d7:af:c1:a1:
bd:04:77:98:9e:fc:c4:2d:da:55:94:38:35:53:63:
d0:46:d5:7a:8e:59:ee:bf:79:4b:47:48:72:a2:d3:
ee:3c:e5:a0:ff:86:2f:01:0f:ba:29:13:f4:74:ce:
5e:d7:0b:46:5e:43:0a:06:0d:08:74:a4:c2:cc:50:
ca:de:79:ef:9b:5c:e1:36:67:90:19:d2:3c:cb:9d:
33:fd:6f:e2:ac:e4:fa:44:06:45:ed:85:08:81:86:
72:4a:e8:31:ca:89:81:70:05:57:44:c4:2e:c0:86:
6b:8c:46:21:51:a9:e9:af:7b:9b:ee:75:b7:74:62:
c2:f9:a2:8a:ab:78:14:2b:9d:f3:58:82:44:f7:56:
2c:01:f2:d6:71:d6:65:0b:c1:ff:3a:43:76:af:2a:
5b:bd:42:ed:d3:74:86:b0:55:fd:9f:22:73:ee:94:
89:e7:bb:03:2a:38:12:3c:71:1c:5e:b8:8b:c9:4d:
15:4e:14:bf:f4:88:56:82:2f:e3:5f:24:f6:e9:69:
76:44:6a:29:f9:3e:83:fc:9c:db:63:da:84:0b:cf:
53:04:77:1f:02:1b:09:7d:92:2f:4a:be:af:f6:df:
76:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D4:81:C1:B4:50:4B:CB:A8:2F:47:9B:44:43:0C:67:3E:A0:2B:67
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/29SBwbRQS8uoL0ebREMMZz6gK2c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.118.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c7:53:61:d1:fd:86:40:bd:32:4f:f0:f5:d7:0a:18:8e:4b:ea:
65:a6:c8:1e:a7:e8:9b:83:35:90:c6:39:67:c2:84:9b:b2:3b:
ac:df:d3:3e:60:f3:a1:29:25:88:a3:5c:c7:15:9e:51:20:a9:
3a:b3:ca:be:ae:45:21:eb:72:a6:75:4a:fa:06:02:fe:16:b1:
1c:86:bd:67:94:32:7b:93:ad:f8:6d:7c:24:13:8c:46:9d:76:
02:16:95:1a:c7:87:a4:06:7e:20:d6:02:c8:3f:04:00:ff:38:
bf:26:28:da:7e:2a:40:32:31:5f:97:65:1c:46:5f:b3:4b:89:
7e:43:5a:47:c5:c5:7c:93:61:04:90:85:46:ac:96:8e:b2:cf:
b2:fb:63:3d:7d:ad:4d:db:7c:27:02:77:54:3c:08:4e:3e:67:
62:37:9b:9d:cb:47:41:2b:9a:1e:e6:23:14:fc:ad:95:fc:ea:
4e:5a:75:e6:9c:42:b3:e4:32:34:34:8e:f0:6d:11:c3:30:29:
cd:46:fe:27:e6:e3:e0:35:89:d9:76:a1:40:ef:a9:c4:79:ef:
c4:ee:af:3a:2c:62:e0:cb:7a:bf:c2:bb:93:74:e0:7d:7e:81:
a7:cf:cb:24:01:ea:e8:6b:e9:c1:2a:64:8e:6c:60:86:02:3e:
11:87:76:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org