Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/A-n59ReMhWdRZPo9QjqPeIyDKqk.roa
File: A-n59ReMhWdRZPo9QjqPeIyDKqk.roa (raw, json)
Hash identifier: wLastC2HryCK2hjWMC3Yv3fbRvtdSl11LEwVaIsa7fo=
Subject key identifier: 03:E9:F9:F5:17:8C:85:67:51:64:FA:3D:42:3A:8F:78:8C:83:2A:A9
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/A-n59ReMhWdRZPo9QjqPeIyDKqk.roa
Signing time: Thu 15 Sep 2022 02:48:18 +0000
ROA not before: Thu 15 Sep 2022 02:48:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 2001:b400:e9f0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=03E9F9F5178C85675164FA3D423A8F788C832AA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:62:c6:6f:81:70:9e:e7:9f:d3:01:2e:fb:c4:
6a:5d:54:bd:6c:67:34:a2:80:1d:2e:36:8d:57:90:
de:56:03:48:3b:83:59:4c:7d:cb:60:61:0b:a5:d8:
29:9c:2d:52:f0:5d:70:b5:03:5a:f5:20:5a:2e:7e:
01:8e:4f:64:f0:c3:96:58:bf:4d:ea:e2:ea:b5:f6:
8c:69:ed:6a:9f:5e:dc:5f:0c:06:f2:4f:e0:88:28:
19:2f:7e:9b:d8:9b:fa:28:10:37:0e:ba:48:de:40:
aa:31:c2:b1:cb:be:f5:fa:2b:3a:61:5e:f8:7d:c0:
dc:70:44:d0:2b:3e:ff:1a:fb:62:b3:b3:4b:f0:ad:
ab:d5:fe:54:13:03:97:43:f2:5b:c8:c5:e9:5c:65:
9e:bd:2b:c6:b2:01:e7:d9:5c:0f:ee:d1:9a:14:87:
ec:c8:70:ef:26:54:31:d3:bd:99:eb:57:f6:dd:25:
52:10:00:72:f0:c2:3d:57:15:3e:1d:01:77:b1:7c:
11:7c:20:43:6e:be:6c:e5:6f:0f:39:76:a1:7a:9b:
15:7e:9a:95:c2:1a:83:b6:1d:c7:fe:cb:db:c9:87:
d4:f7:4a:0a:de:ef:4d:a2:f3:71:d6:ed:41:6e:44:
07:55:b1:83:c6:df:7a:74:c1:5a:da:68:77:5d:87:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E9:F9:F5:17:8C:85:67:51:64:FA:3D:42:3A:8F:78:8C:83:2A:A9
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/A-n59ReMhWdRZPo9QjqPeIyDKqk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b400:e9f0::/44
Signature Algorithm: sha256WithRSAEncryption
00:ed:89:59:10:9a:68:7e:9c:27:34:e2:22:9c:b8:11:63:27:
17:93:b7:a2:30:52:e8:8d:22:f4:64:30:53:e9:1f:5c:5e:fe:
fb:86:a1:42:3a:28:cc:8b:43:db:76:49:80:96:d9:66:49:bb:
58:17:1f:4a:76:48:ef:e7:45:fe:bc:cd:18:c0:0a:08:a2:b9:
e7:ad:b7:f9:4e:18:3c:9d:79:b9:29:9f:7a:99:34:72:53:f7:
16:94:5a:01:3b:a2:5b:ad:70:8b:94:88:18:2e:26:a9:49:18:
e9:ad:37:41:9e:79:e5:0a:fd:3e:39:2c:c0:55:b4:5b:99:d7:
87:ab:9c:5b:0c:4c:3f:ef:47:b9:87:83:60:0e:30:12:d7:6f:
7a:a7:a5:88:cb:2a:dd:5b:4b:4c:6b:3b:3f:eb:85:6d:ff:81:
e4:e4:3e:01:85:b9:0a:91:ee:68:aa:e3:9b:ab:ea:d3:c9:ac:
aa:fb:35:a6:e8:c8:c8:29:b2:a5:0a:81:71:30:5d:8f:02:3e:
23:c0:3c:19:3c:9a:d2:29:77:a1:c3:c9:da:bc:1c:6a:7a:9b:
12:9c:54:d7:7d:5d:79:63:db:c4:aa:6b:1e:8e:1f:30:da:11:
a6:46:d3:9f:04:bb:46:3e:66:76:33:f9:41:c1:1c:f9:39:ac:
d5:1e:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org