Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/LWcu7ZRjkqhfaRJBR8Y7mOZXwXM.roa
File: LWcu7ZRjkqhfaRJBR8Y7mOZXwXM.roa (raw, json)
Hash identifier: Fg3LDdKDyBumJ0WlcoaTEGUjUeKdZy5lBhRHmOcZOGs=
Subject key identifier: 2D:67:2E:ED:94:63:92:A8:5F:69:12:41:47:C6:3B:98:E6:57:C1:73
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FCE
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LWcu7ZRjkqhfaRJBR8Y7mOZXwXM.roa
Signing time: Fri 01 Sep 2023 08:57:31 +0000
ROA not before: Fri 01 Sep 2023 08:57:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 125.232.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4046 (0xfce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2D672EED946392A85F69124147C63B98E657C173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:cc:39:ab:2f:e9:88:2b:bb:a3:3c:05:dc:
c4:3a:03:ef:e4:4b:9f:7e:0f:ee:7d:16:89:e1:61:
10:e2:a6:22:dd:99:0a:23:3a:5d:d8:59:27:6b:7d:
22:37:bc:4d:a6:fb:28:81:e9:6e:15:e0:38:66:07:
99:03:71:88:88:ef:15:e1:e5:54:9e:43:89:4a:26:
22:fc:aa:75:58:df:0a:76:3f:19:a4:a7:11:69:a4:
a0:44:38:96:ea:c7:cc:9d:3c:ba:85:22:27:c2:57:
54:4f:5c:5a:10:03:f0:8c:55:56:90:45:89:9f:cd:
09:b8:4b:66:3b:50:a3:0b:14:49:91:c1:9e:0e:93:
0c:5f:96:bc:33:ab:58:5b:53:00:24:6f:a8:21:66:
56:5c:98:82:09:33:58:29:00:15:92:94:7c:35:26:
17:f5:95:ae:46:19:f4:99:45:87:eb:4d:f5:b9:c1:
76:fa:9e:19:30:ac:6a:26:a4:a2:5e:df:a0:1d:ae:
a6:22:10:8a:76:10:45:a5:c4:4a:e5:80:e6:a2:68:
35:c7:82:e9:ca:c1:6b:b3:22:c3:1b:74:a9:79:e0:
b8:fc:bd:6b:03:ce:6c:53:5c:61:6d:56:f9:5a:ab:
51:ee:4f:51:3d:da:cb:0a:15:73:ba:d1:3a:fc:81:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:67:2E:ED:94:63:92:A8:5F:69:12:41:47:C6:3B:98:E6:57:C1:73
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LWcu7ZRjkqhfaRJBR8Y7mOZXwXM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.232.0.0/15
Signature Algorithm: sha256WithRSAEncryption
10:06:ff:b3:8f:5e:24:52:2c:40:eb:bd:88:6b:45:5b:a6:6a:
83:bc:12:a5:fe:82:a4:bf:1c:c5:cd:0d:8a:d4:57:85:59:9d:
5a:de:bc:49:a1:be:5c:7b:d0:84:1c:f0:ad:de:a6:c9:97:63:
dd:95:c2:7f:72:15:87:6b:ba:54:25:75:8c:f8:8f:32:e4:37:
e6:c5:a7:5d:7b:5b:16:76:4e:b5:3f:1d:88:86:2d:5d:21:2c:
b7:9b:2a:75:df:62:60:20:a8:8a:b8:54:67:0f:cb:ca:35:7b:
f9:63:1c:07:16:03:da:0d:7f:fa:de:eb:0b:4b:32:5e:1e:94:
e0:bc:04:13:de:5c:c8:1c:a8:d3:82:4c:e4:06:83:ac:bd:77:
d7:ea:ab:57:c0:eb:9c:36:35:18:53:c1:ac:37:72:2e:ca:5e:
80:ad:5a:12:18:c2:38:63:5e:9b:a7:de:a3:d4:97:64:dc:88:
16:4b:34:78:08:e0:49:ea:e3:ab:d2:36:1f:dc:6a:fc:68:a7:
2f:83:35:36:e1:ff:e1:6d:e3:b2:9b:2c:25:d6:9c:e4:ce:c1:
b9:0e:4d:4e:33:81:04:f6:be:81:de:e4:af:0f:6f:4b:2a:83:
63:92:51:9e:e3:50:eb:83:da:ce:29:c1:39:13:4f:60:ff:26:
95:a8:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:09:58 2025 by rpki-client