Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/PHBhVoSSk87EfzjEfMsolWI46sg.roa
File: PHBhVoSSk87EfzjEfMsolWI46sg.roa (raw, json)
Hash identifier: 0lLtguFhR/xmFFd2YF2HoLMGG6YPEGUzQEuJLHWvcwY=
Subject key identifier: 3C:70:61:56:84:92:93:CE:C4:7F:38:C4:7C:CB:28:95:62:38:EA:C8
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0AC3
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/PHBhVoSSk87EfzjEfMsolWI46sg.roa
Signing time: Sun 07 Feb 2021 11:39:01 +0000
ROA not before: Sun 07 Feb 2021 11:39:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 36.224.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2755 (0xac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:39:01 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3C706156849293CEC47F38C47CCB28956238EAC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:d7:16:04:1b:6b:1a:55:cc:98:ac:b0:71:
5f:a0:1f:fb:d7:ab:94:7c:95:27:29:f3:9d:c3:a4:
89:30:17:c9:ab:de:0a:59:a5:59:98:3d:f0:3c:78:
45:e2:e7:74:2d:3b:e3:fc:29:e0:22:e6:e5:91:74:
bb:83:77:05:1d:b7:37:5d:d5:aa:fc:c0:a2:9a:8d:
ae:7b:ab:b3:3e:1a:18:b6:e5:66:d9:72:b3:f1:a6:
b7:1b:3f:5e:94:f8:98:b4:09:14:01:30:16:09:b5:
18:f7:06:74:b8:fc:0c:18:e5:21:a7:2b:23:42:63:
1b:6e:89:7b:2b:a9:ab:4a:e9:ca:f7:cd:26:73:9f:
e4:1b:04:87:61:16:a4:12:2e:62:23:ca:fa:a8:ce:
da:a7:fb:7b:32:29:ee:6a:ff:54:55:28:54:8c:ba:
f8:d1:c1:81:aa:9a:18:2e:00:e3:a9:02:01:df:c0:
9d:83:ec:77:2c:e7:55:12:cf:75:9d:71:b8:20:2a:
15:7a:e6:c0:c3:83:6c:21:b7:a3:c7:41:f6:e0:71:
c7:a1:85:30:61:f4:cf:ec:54:8c:b4:ee:19:89:ae:
8c:31:bc:a1:2b:bb:88:ee:f8:9e:5d:d9:83:da:38:
63:28:17:e8:35:a8:a0:ef:e0:9f:d2:12:ea:0c:56:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:70:61:56:84:92:93:CE:C4:7F:38:C4:7C:CB:28:95:62:38:EA:C8
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/PHBhVoSSk87EfzjEfMsolWI46sg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.224.0.0/12
Signature Algorithm: sha256WithRSAEncryption
12:65:48:51:fb:54:50:b5:f6:3e:e9:8c:9b:6b:db:fc:30:2c:
ca:8c:fe:e7:ac:0f:fc:42:57:69:84:f0:9d:74:f6:b5:60:e1:
7a:e0:ce:f5:59:fa:01:96:17:56:03:8d:02:1f:3a:f8:04:9c:
0d:18:74:4f:94:22:27:d4:e0:fb:d6:04:59:40:2d:c7:57:f5:
c6:7d:bd:a4:96:4c:98:ce:ad:a1:5e:af:d3:64:9e:ed:5b:a7:
26:63:15:3b:d3:4f:9a:88:ec:ff:ed:78:44:c3:e5:f4:e0:2e:
14:f9:d7:ac:cf:8e:ac:4b:63:ee:0b:c9:8f:ad:5c:3f:8f:a0:
68:78:aa:f9:77:94:a2:27:98:89:07:30:e7:3c:5c:31:c0:8a:
11:28:9d:03:c1:ff:59:7e:2c:3a:28:39:86:cd:a4:4b:fb:05:
4a:40:ef:9d:5f:39:44:e5:d6:71:39:9a:11:f0:87:1b:de:c5:
21:6a:b6:7d:af:e7:30:52:56:1a:d2:e5:21:09:c8:6c:fa:c6:
d7:1e:ec:a3:bd:a7:42:6c:90:79:e1:54:52:12:a1:4b:7f:f9:
40:e8:65:c4:e4:58:bc:3b:d1:aa:b1:48:56:c2:45:9a:d3:18:
c0:75:67:03:af:51:aa:c4:78:ff:5f:43:fe:ec:99:56:dd:20:
10:6b:d0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org