Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Bh3ltEP4O3Fa61Kj0ORXycy-xBA.roa
File: Bh3ltEP4O3Fa61Kj0ORXycy-xBA.roa (raw, json)
Hash identifier: H+5SO/uhsS1NuEAO34KYhnh8cdIfp1OKRUtxusnIlgU=
Subject key identifier: 06:1D:E5:B4:43:F8:3B:71:5A:EB:52:A3:D0:E4:57:C9:CC:BE:C4:10
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F58
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Bh3ltEP4O3Fa61Kj0ORXycy-xBA.roa
Signing time: Fri 01 Sep 2023 08:56:58 +0000
ROA not before: Fri 01 Sep 2023 08:56:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 210.59.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3928 (0xf58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=061DE5B443F83B715AEB52A3D0E457C9CCBEC410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:f9:20:31:7b:f0:2f:72:8f:c3:6e:52:17:
74:64:5a:30:4e:59:54:48:de:0b:dd:f6:da:b4:e0:
04:a3:34:d4:52:fb:fd:1c:cb:6d:eb:75:89:a1:d7:
00:75:b8:f6:9b:49:1e:d1:22:ed:b4:e9:88:ab:26:
1d:f1:df:9e:0e:b3:2d:f1:b4:74:bc:fb:3b:d1:b9:
a5:f4:f7:74:6e:82:0e:5e:69:76:31:59:9b:14:c2:
5f:b3:5c:c1:10:85:8d:1a:7c:64:d5:1d:a9:a4:c7:
68:f8:e9:ae:69:e8:3d:1c:f3:13:4e:99:a1:bf:79:
90:7e:83:f9:67:6f:12:78:db:c7:f4:1b:1d:fd:8c:
31:41:ff:1d:50:89:75:8d:e0:a0:89:36:e4:05:b9:
cd:b7:50:88:8b:52:90:53:18:33:9c:84:6e:2b:cd:
64:57:1c:fe:20:24:be:46:08:52:c7:7c:5b:3d:07:
fc:d1:77:fc:11:b7:b9:65:a1:fc:50:11:ea:c3:cf:
2e:16:41:e0:f8:25:45:91:fe:a7:c6:f7:94:42:3b:
85:0c:85:34:3f:f9:34:63:ce:78:99:32:53:55:e2:
d1:97:a7:8a:56:6b:98:94:e3:31:ee:ac:29:11:fc:
51:db:cb:e5:12:cf:a7:1b:10:d9:b0:a9:a4:2a:d0:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1D:E5:B4:43:F8:3B:71:5A:EB:52:A3:D0:E4:57:C9:CC:BE:C4:10
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Bh3ltEP4O3Fa61Kj0ORXycy-xBA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.59.128.0/17
Signature Algorithm: sha256WithRSAEncryption
24:3d:42:58:4c:f9:fc:6f:6e:bd:45:79:9f:e4:f7:5b:5b:10:
8c:56:df:ce:f2:91:b5:e9:86:82:d7:30:2a:7c:6d:05:73:74:
1d:a8:0a:12:7d:50:81:30:6e:06:b7:bc:eb:f0:6d:19:51:55:
f3:0c:8a:89:5e:5d:e7:d1:4d:5d:14:84:24:32:09:a6:c9:13:
53:46:5d:89:21:b4:2b:27:51:46:f0:bb:37:6d:63:3d:18:e1:
9a:33:30:62:2d:49:29:6c:c9:ec:49:72:0d:45:85:43:cb:8d:
5c:ce:93:e2:1b:86:4d:a8:4c:c4:7c:87:ca:08:e7:04:35:d3:
a7:91:7b:c1:2f:04:52:a7:ec:cb:b9:5e:29:f2:9b:5c:40:9e:
d4:86:52:d3:97:68:2c:24:16:09:80:cd:63:6c:39:5e:6d:79:
a6:8e:0b:e7:c5:9a:15:51:a5:d3:6a:b6:88:67:c3:df:f0:08:
58:95:ad:2c:98:84:07:8f:9b:08:b2:97:2b:45:c3:99:dd:6f:
d9:cf:83:22:57:5b:f9:d3:60:26:77:06:50:5b:a8:2e:16:d9:
b0:7d:47:d3:c0:fc:57:f1:e9:a7:b6:2c:b6:82:4b:05:1a:cf:
80:1d:2c:5f:39:c5:07:a1:7a:4b:7a:e5:15:cc:fc:3e:12:6f:
5a:7d:23:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:30 2025 by rpki-client