Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/NoZ6i4HluTHulrZa2jXncQEfcU0.roa
File: NoZ6i4HluTHulrZa2jXncQEfcU0.roa (raw, json)
Hash identifier: /M+g7sbMTBMu0o3yXFw1ou7gogfvBnsjVHSnJir6jg4=
Subject key identifier: 36:86:7A:8B:81:E5:B9:31:EE:96:B6:5A:DA:35:E7:71:01:1F:71:4D
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C0C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/NoZ6i4HluTHulrZa2jXncQEfcU0.roa
Signing time: Wed 29 Sep 2021 02:50:48 +0000
ROA not before: Wed 29 Sep 2021 02:50:48 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 114.24.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3084 (0xc0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:48 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=36867A8B81E5B931EE96B65ADA35E771011F714D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a9:c5:cf:af:b1:c0:1a:d6:c5:6b:96:a8:4f:
59:77:a6:5b:a1:92:33:a2:fd:03:ce:4d:e5:3e:11:
ab:60:58:90:57:66:ac:73:93:1b:01:b0:6b:47:1f:
21:8d:83:5e:b5:17:4c:b1:f4:07:4b:3e:e4:95:1d:
96:f2:7d:16:fb:94:87:34:a8:18:eb:f5:61:74:df:
9b:db:fd:1f:50:fa:a3:1c:8f:de:ce:cb:d7:b0:ef:
b5:76:84:63:fa:6e:59:68:01:36:dd:7a:11:b0:b8:
b9:d0:ca:e3:78:0e:c1:d7:fd:51:44:87:39:2d:52:
dd:8e:0d:11:b0:a5:79:be:59:44:91:67:d6:5f:38:
3c:c5:f7:8c:d5:6f:6b:6a:ad:be:a6:3d:44:16:c1:
d1:b9:05:16:c6:78:f2:7b:bd:7e:f2:cd:f4:c4:4d:
d0:ed:43:23:e2:28:fd:4b:d6:18:bd:c8:04:4e:21:
54:ca:56:f5:94:95:21:9a:c9:a4:8c:60:b7:88:10:
b5:89:00:0f:56:1e:56:30:45:de:f2:14:6a:05:14:
01:fe:64:f3:31:a9:38:87:72:80:ef:48:cf:1b:9a:
3a:c3:39:23:2a:3e:a3:27:2a:8a:7a:a1:fe:e2:8e:
88:66:d6:63:e0:a5:b9:e0:ed:6d:35:8e:6f:f6:75:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:86:7A:8B:81:E5:B9:31:EE:96:B6:5A:DA:35:E7:71:01:1F:71:4D
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/NoZ6i4HluTHulrZa2jXncQEfcU0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.24.0.0/14
Signature Algorithm: sha256WithRSAEncryption
a0:30:0c:14:97:47:1e:e9:80:99:5e:82:08:17:85:ff:90:99:
14:bb:2e:16:5c:07:7b:ea:99:10:6e:61:6c:54:16:c6:38:b3:
1a:91:91:05:48:7c:27:3a:ea:2d:9a:1f:01:8b:1a:89:8b:d6:
55:22:bd:7a:8f:f6:93:3c:d9:53:b3:a5:a3:66:d9:a7:79:97:
f8:20:6b:6a:fc:d2:5d:96:99:91:1b:aa:26:93:1a:76:04:2f:
b3:8a:f7:e8:cd:5b:e5:13:35:58:6e:67:1c:8e:c3:14:3b:ca:
dc:a2:47:f5:34:5a:cf:2f:e8:94:6a:2b:f2:aa:f6:cb:9f:ae:
03:3b:f1:d6:91:48:54:c1:cc:aa:da:a7:2b:23:e4:a5:44:86:
82:3c:77:da:35:22:2d:34:da:31:1a:92:02:31:16:91:dd:52:
b8:c2:c8:50:41:55:3b:7c:9a:c8:9d:b9:3a:89:5f:c7:38:5d:
28:7a:d9:c3:04:f9:94:f5:87:2e:ad:de:30:bb:7f:1a:e6:53:
25:52:43:cd:56:50:d3:58:b7:55:ae:2b:b5:65:b3:39:c6:10:
e4:e0:a3:cb:1a:1a:9e:4b:1b:ce:af:82:a2:a0:51:48:67:b2:
d9:56:fb:3a:97:a5:7c:75:96:45:f0:ca:e1:12:30:64:0e:8f:
6a:59:a9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org