Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/DdMnpYAt4xkun37XtGOGILwlrgY.roa
File: DdMnpYAt4xkun37XtGOGILwlrgY.roa (raw, json)
Hash identifier: EP85TI2qf6b7RRIxLiR5YS7cTrMxx7e48gN91xcXSqA=
Subject key identifier: 0D:D3:27:A5:80:2D:E3:19:2E:9F:7E:D7:B4:63:86:20:BC:25:AE:06
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0B26
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DdMnpYAt4xkun37XtGOGILwlrgY.roa
Signing time: Sun 07 Feb 2021 12:40:59 +0000
ROA not before: Sun 07 Feb 2021 12:40:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 114.30.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2854 (0xb26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 12:40:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0DD327A5802DE3192E9F7ED7B4638620BC25AE06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3f:1b:47:10:1c:dc:79:96:d4:c5:39:36:74:
25:f4:7b:eb:79:ea:be:85:c1:99:16:6c:fc:ec:70:
02:59:28:b6:ef:7d:de:ef:ba:04:ff:b8:b3:83:ae:
85:56:94:79:6a:68:53:8f:e9:f0:a3:a7:01:70:c5:
22:e8:58:b3:2a:ab:c9:dd:90:7d:2b:a6:b5:1e:06:
92:f8:ae:bf:a6:3c:68:88:ec:bc:1f:09:35:bf:fb:
9a:37:55:90:e5:38:ab:82:1d:53:35:84:b8:cc:eb:
0d:f4:2b:a2:63:be:b9:e3:9b:a8:7e:48:46:94:b3:
f8:b3:ea:b7:70:7c:b5:11:88:b2:79:65:92:b1:b8:
55:7c:8b:21:eb:b5:f8:0c:5b:2f:7c:5a:4d:2c:ac:
df:00:76:24:6a:0c:6e:a8:46:a2:1e:21:dc:11:81:
1a:b6:da:fe:70:df:9c:49:0f:d3:7c:30:3b:86:d9:
1a:4b:4c:40:5f:18:e6:a6:05:0a:b0:cc:6e:6f:f4:
1f:e3:5a:79:66:75:85:86:31:e2:3e:21:b1:dc:6c:
80:30:99:38:67:49:e8:bd:a8:41:7c:a9:1e:c3:2d:
66:f4:fc:a3:00:cb:1b:7c:5a:0d:9c:6d:11:a5:59:
65:00:16:c2:b2:15:07:3d:5d:d1:b0:a8:98:6a:2a:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D3:27:A5:80:2D:E3:19:2E:9F:7E:D7:B4:63:86:20:BC:25:AE:06
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DdMnpYAt4xkun37XtGOGILwlrgY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.30.44.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bf:b4:55:b2:12:66:3c:88:ef:a5:a5:77:d1:d2:8c:4f:16:
6b:15:62:d8:52:fb:5a:c0:71:95:20:3b:ed:3a:1f:59:1b:6c:
47:dd:b8:ae:19:64:fc:58:c4:13:9c:de:7c:23:c8:b3:89:c1:
24:33:af:9d:c5:12:b7:04:43:90:fa:d8:47:c4:db:e6:59:c2:
2e:d1:ec:68:19:ac:08:f0:4b:59:2a:f3:d9:33:ef:af:1f:21:
79:dc:78:74:54:1e:20:12:c4:e6:42:75:2c:bb:e3:75:74:ee:
2d:fc:60:22:c3:46:0e:59:ff:fa:0a:71:90:38:8b:7e:e4:e5:
ea:96:f9:26:2f:7b:f9:76:5d:fb:38:84:0b:14:4b:7d:d2:5b:
5e:0d:27:fa:8d:c7:74:24:8e:eb:09:92:f1:62:8e:6c:b9:60:
45:f0:f8:08:37:8c:43:29:4c:7e:98:83:c2:0b:b3:34:82:aa:
1b:22:9d:0f:53:47:63:00:8d:01:96:f4:8c:5a:ec:20:55:34:
aa:22:44:45:38:1b:8b:ff:bf:9a:0f:f7:9c:a9:db:56:05:27:
df:21:59:09:56:b3:c4:36:3c:09:de:06:0e:dd:6a:1f:cd:b1:
5b:fd:c3:e1:59:4b:fd:9b:fe:a1:07:92:6e:fc:ec:6a:bd:22:
18:5b:a7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org