Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/FfgnXXC35Klf_fD-yLGlFUySPJY.roa
File: FfgnXXC35Klf_fD-yLGlFUySPJY.roa (raw, json)
Hash identifier: Sboi5X4MesB9J9VkSDAQWM46cYUo6jYa58W5kAQNo5I=
Subject key identifier: 15:F8:27:5D:70:B7:E4:A9:5F:FD:F0:FE:C8:B1:A5:15:4C:92:3C:96
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FfgnXXC35Klf_fD-yLGlFUySPJY.roa
Signing time: Thu 15 Sep 2022 02:48:02 +0000
ROA not before: Thu 15 Sep 2022 02:48:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17421
IP address blocks: 2001:b400::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=15F8275D70B7E4A95FFDF0FEC8B1A5154C923C96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:01:42:db:cf:32:09:8a:29:74:ed:36:d6:
a4:c1:d8:c9:03:67:e1:8b:3a:03:8a:1f:d3:83:6e:
28:3e:b2:c4:84:f5:9a:10:4f:0f:da:04:66:b6:bd:
c9:e3:ec:43:82:3f:5d:0f:af:e7:65:cb:e7:12:f1:
66:f6:05:7c:6a:16:16:c6:b0:04:9a:d5:65:14:09:
c1:ec:93:18:49:21:21:9a:76:19:14:15:a9:06:4e:
3c:fa:b7:75:a9:dc:e9:ad:24:be:67:37:60:e3:64:
b9:3e:cb:e6:84:bf:25:23:d1:ef:1a:9e:42:60:be:
cc:d6:52:8d:e7:1a:d7:20:3e:01:18:e2:16:30:8b:
8a:1a:65:cd:d1:1b:84:df:3b:03:83:07:85:e9:5c:
49:56:cb:fd:6c:cb:83:2f:be:98:54:76:b5:c8:a2:
75:f0:cf:61:6c:f1:e5:3a:9a:d4:8a:26:be:87:fd:
53:0e:81:3a:dc:d1:1a:05:08:43:b7:ea:ee:78:bc:
03:89:ed:90:e5:82:09:40:81:d6:94:ae:8a:bb:bc:
0e:ff:72:fb:ff:d6:f6:53:a7:35:43:00:06:84:d2:
1e:4e:f4:10:28:f2:62:c3:22:c8:3d:fa:50:0e:c4:
89:b7:9a:ad:b0:89:6a:e5:67:04:b3:e7:3c:7a:1b:
94:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F8:27:5D:70:B7:E4:A9:5F:FD:F0:FE:C8:B1:A5:15:4C:92:3C:96
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FfgnXXC35Klf_fD-yLGlFUySPJY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b400::/32
Signature Algorithm: sha256WithRSAEncryption
b2:c2:62:0c:61:00:c5:5c:8d:52:3b:3d:fc:e1:f9:40:d6:da:
19:70:0f:32:80:6f:08:7b:fa:b9:00:1d:af:a3:ec:04:89:03:
57:2b:75:22:7c:5c:5f:42:7e:64:52:ea:6d:3c:49:6a:7b:24:
9d:2c:8d:79:69:ac:88:8d:64:ef:10:1b:ec:b4:be:d7:01:a4:
4b:c7:0b:20:82:9c:5f:eb:27:45:91:e2:98:49:2a:56:cd:73:
f8:11:ed:e5:52:9e:86:44:8c:a9:57:d1:cb:18:bc:20:ca:6f:
2e:e2:cd:ad:36:dd:97:6a:70:86:91:31:d7:0c:9d:79:8f:2d:
ec:6b:bd:72:82:20:c4:38:72:e8:26:51:38:07:33:c5:18:35:
1c:aa:00:aa:dc:3a:df:da:2c:8b:87:86:d2:e8:e1:48:18:04:
dc:92:58:7f:11:0b:13:72:cc:8c:da:0f:56:fa:65:87:1b:05:
bb:6d:b8:3c:16:0b:37:83:44:d3:d2:fa:be:be:f8:19:0b:c0:
ae:f9:2a:0a:a9:ef:ab:50:db:90:e8:f4:89:cd:66:d1:0d:65:
05:1b:5b:a6:74:d8:a7:48:82:76:b7:ab:8d:29:57:56:9f:a3:
c2:89:01:95:8b:37:7b:55:26:64:94:d9:f1:d0:bc:5c:b4:c6:
54:dd:91:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org