Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/3injfcx1pVrYerA4-EkTVWNxveM.roa
File: 3injfcx1pVrYerA4-EkTVWNxveM.roa (raw, json)
Hash identifier: krolmRYPwYLhUJ4W/UQ7M7MRvkiSwNy7BAdyJIX4DrU=
Subject key identifier: DE:29:E3:7D:CC:75:A5:5A:D8:7A:B0:38:F8:49:13:55:63:71:BD:E3
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0815
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3injfcx1pVrYerA4-EkTVWNxveM.roa
Signing time: Tue 29 Sep 2020 09:58:19 +0000
ROA not before: Tue 29 Sep 2020 09:58:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17714
IP address blocks: 114.30.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2069 (0x815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:19 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DE29E37DCC75A55AD87AB038F84913556371BDE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:14:44:9b:60:4f:2d:cd:d6:a2:4e:fc:33:
f3:5a:2a:11:30:dc:ae:38:5e:82:61:7d:18:6f:31:
e6:ad:61:b4:15:0b:4c:14:32:26:71:f1:4e:25:7e:
98:b6:5c:7b:7e:84:07:b2:ea:0f:37:0d:c7:5b:19:
06:01:7b:c8:2e:a3:6e:8f:51:ea:d9:e4:8b:f1:b6:
c7:23:fd:11:77:1b:3c:78:ff:e5:9d:35:05:81:83:
37:f0:6e:ed:b6:65:1d:95:13:2a:4c:c6:2d:e4:bf:
8c:85:b7:9c:d1:28:18:63:51:96:97:ca:3b:43:f5:
dd:2c:d7:f2:b5:50:02:80:8b:9d:76:69:5a:1f:20:
e2:c2:c0:67:17:e1:4e:e3:56:0f:7a:15:ae:e3:58:
8c:b9:df:68:25:fc:cb:d4:f7:a2:a2:12:1e:2e:7d:
33:45:61:1a:df:4c:26:e5:86:ca:23:98:29:8e:6b:
52:56:f9:1d:f6:2b:63:54:4f:dd:20:31:26:67:89:
9e:4c:8c:da:8a:22:24:3d:18:b1:52:f0:7a:0b:f2:
65:d9:c1:5f:d1:d1:88:1d:f3:b4:90:93:e0:bf:35:
02:f8:2a:bb:03:25:86:61:28:56:87:16:e4:aa:77:
f0:17:a0:55:6f:7d:05:00:10:df:0c:41:34:2e:ec:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:29:E3:7D:CC:75:A5:5A:D8:7A:B0:38:F8:49:13:55:63:71:BD:E3
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3injfcx1pVrYerA4-EkTVWNxveM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.30.35.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:62:7f:85:40:d0:c5:64:64:16:e2:63:e8:2d:26:8e:55:79:
9a:72:dd:89:06:35:63:fa:3a:e0:9e:68:4b:d1:7a:a0:df:a2:
0c:a2:24:a4:47:51:9d:2c:95:39:6b:d0:31:3e:0f:60:5d:f1:
ac:9a:14:ca:ef:0f:da:35:35:ce:28:e9:84:da:e7:13:f4:70:
88:52:e8:f6:f7:95:85:a8:a4:b8:5b:72:a3:a3:ed:1b:3d:ee:
65:50:a4:66:56:7a:90:56:85:c6:79:8d:a2:d1:a3:ca:93:5a:
c4:b1:36:e8:de:f2:c3:6a:80:4e:93:d9:06:8e:1e:54:ef:91:
3b:f8:77:cc:7a:e1:73:98:90:36:8d:4a:91:34:3f:e1:15:1e:
4e:84:10:4d:9f:92:51:37:87:51:e3:32:96:ee:02:27:2c:58:
94:db:51:0f:a1:7c:d1:23:4f:d0:92:c3:75:92:e8:76:09:23:
56:b1:b7:24:53:fa:7e:b6:f1:1f:78:75:6d:53:ed:6d:05:cd:
f6:f9:23:c6:19:59:3f:96:2e:f0:79:aa:6f:1f:80:88:02:51:
ac:1b:6d:7f:0b:1a:5d:83:86:54:8c:1a:46:e4:e5:58:47:35:
a6:c1:1d:b6:90:d9:7a:8e:15:6f:15:2f:a6:b3:f2:39:d1:63:
92:dc:25:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org