Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Aym4z2hqlMxNOnt88iYHu_LBBuk.roa
File: Aym4z2hqlMxNOnt88iYHu_LBBuk.roa (raw, json)
Hash identifier: +NArbsY0z0gEGCsidyLMHrBiNEKbq02ac8P64qtxtss=
Subject key identifier: 03:29:B8:CF:68:6A:94:CC:4D:3A:7B:7C:F2:26:07:BB:F2:C1:06:E9
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Aym4z2hqlMxNOnt88iYHu_LBBuk.roa
Signing time: Thu 15 Sep 2022 02:48:41 +0000
ROA not before: Thu 15 Sep 2022 02:48:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 111.240.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0329B8CF686A94CC4D3A7B7CF22607BBF2C106E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:9d:7f:bb:a9:55:be:b6:c0:3c:63:68:88:
61:20:bd:e6:e8:64:10:eb:43:73:d4:96:b8:2d:4e:
22:04:2d:ab:2c:8b:fb:b1:84:88:71:12:55:02:ab:
65:79:0e:9b:ed:ee:eb:f7:7a:da:4a:21:51:bc:94:
96:dd:27:2b:6c:56:e5:e8:fd:08:6d:ff:bf:fa:8a:
31:72:45:e9:64:60:26:07:f6:5c:d2:4f:da:c2:11:
35:cb:25:a6:e7:33:d2:9d:ce:f8:7a:e7:55:55:b0:
1c:68:2e:a9:a5:d5:ce:23:12:63:5d:de:23:4c:fc:
7f:69:a7:2d:c9:cb:30:ac:9e:07:2c:43:5d:37:4a:
a7:48:56:05:9e:94:8d:b0:3f:f1:01:9a:81:f8:b8:
fd:12:21:40:27:65:0d:8c:e7:0f:25:18:5b:e2:86:
66:d5:53:e7:06:83:46:1c:64:03:0d:30:ce:1c:6b:
3c:85:d3:29:d9:66:fa:44:4e:06:41:80:2b:dd:6a:
bb:99:9f:73:63:42:ba:1a:0f:33:55:4e:3e:01:ad:
4c:44:1c:e3:08:f9:05:2d:db:db:da:19:22:de:28:
fb:ef:32:d3:76:93:53:82:52:0d:f7:86:5a:77:31:
24:e0:5c:74:6b:62:25:2d:a7:0b:2f:de:9c:c5:ca:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:29:B8:CF:68:6A:94:CC:4D:3A:7B:7C:F2:26:07:BB:F2:C1:06:E9
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Aym4z2hqlMxNOnt88iYHu_LBBuk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.240.0.0/12
Signature Algorithm: sha256WithRSAEncryption
8b:b5:82:ab:95:7d:77:32:5d:45:2f:8f:22:66:49:7a:61:96:
18:0b:1a:ea:72:3c:b4:b8:e3:91:33:ca:51:27:f0:6b:20:db:
71:f1:3e:8f:b8:f8:ef:30:57:28:66:28:17:3b:93:04:65:0b:
a2:29:56:76:0b:d6:80:1a:e2:d4:b9:43:05:3b:12:98:3c:30:
fd:97:6f:24:0e:a3:20:9e:88:d2:5f:2b:75:3f:b0:44:85:08:
a4:a4:6a:b2:d9:51:91:4d:23:6e:7d:f9:91:30:bd:15:5b:8a:
9a:6a:02:43:d1:31:75:e0:b7:ce:d0:e3:0c:00:b6:a0:bf:1f:
d1:82:76:01:4f:ab:7d:da:84:61:67:c1:d7:63:0a:74:aa:7c:
83:d6:db:0e:22:af:fd:0b:53:7e:1e:b9:19:9c:91:f2:f4:fa:
45:61:61:1a:2d:97:0b:a8:67:23:88:45:29:23:09:bc:df:32:
6d:46:1f:a2:54:05:f4:81:18:55:95:70:c9:86:ff:00:9f:a7:
d9:67:5e:7e:06:a6:df:c2:c5:ce:19:6b:76:b2:7e:0c:9c:bf:
b4:5d:e2:50:61:14:f7:0b:58:ca:f1:e3:e5:7e:8d:67:18:51:
4a:33:f6:32:d4:d7:ff:49:bf:3b:fc:00:30:97:58:9e:c1:96:
9d:73:9d:14
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMjA5MTUw
MjQ4NDFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDAzMjlCOENGNjg2QTk0
Q0M0RDNBN0I3Q0YyMjYwN0JCRjJDMTA2RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCx6Z1/u6lVvrbAPGNoiGEgveboZBDrQ3PUlrgtTiIELassi/ux
hIhxElUCq2V5Dpvt7uv3etpKIVG8lJbdJytsVuXo/Qht/7/6ijFyRelkYCYH9lzS
T9rCETXLJabnM9Kdzvh651VVsBxoLqml1c4jEmNd3iNM/H9ppy3JyzCsngcsQ103
SqdIVgWelI2wP/EBmoH4uP0SIUAnZQ2M5w8lGFvihmbVU+cGg0YcZAMNMM4cazyF
0ynZZvpETgZBgCvdaruZn3NjQroaDzNVTj4BrUxEHOMI+QUt29vaGSLeKPvvMtN2
k1OCUg33hlp3MSTgXHRrYiUtpwsv3pzFyuPdAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUAym4z2hqlMxNOnt88iYHu/LBBukwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9BeW00ejJocWxNeE5PbnQ4OGlZ
SHVfTEJCdWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEb/Aw
DQYJKoZIhvcNAQELBQADggEBAIu1gquVfXcyXUUvjyJmSXphlhgLGupyPLS445Ez
ylEn8Gsg23HxPo+4+O8wVyhmKBc7kwRlC6IpVnYL1oAa4tS5QwU7Epg8MP2XbyQO
oyCeiNJfK3U/sESFCKSkarLZUZFNI259+ZEwvRVbippqAkPRMXXgt87Q4wwAtqC/
H9GCdgFPq33ahGFnwddjCnSqfIPW2w4ir/0LU34euRmckfL0+kVhYRotlwuoZyOI
RSkjCbzfMm1GH6JUBfSBGFWVcMmG/wCfp9lnXn4Gpt/Cxc4Za3ayfgycv7Rd4lBh
FPcLWMrx4+V+jWcYUUoz9jLU1/9Jvzv8ADCXWJ7Blp1znRQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org