Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/RXUybmC4V-ZsFAeHvsvHVMHrhAU.roa
File: RXUybmC4V-ZsFAeHvsvHVMHrhAU.roa (raw, json)
Hash identifier: aEXxDxDV+7Lo4j+ulujfId7w4rA/9QJb7v851F8szcs=
Subject key identifier: 45:75:32:6E:60:B8:57:E6:6C:14:07:87:BE:CB:C7:54:C1:EB:84:05
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 084C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RXUybmC4V-ZsFAeHvsvHVMHrhAU.roa
Signing time: Tue 29 Sep 2020 09:58:35 +0000
ROA not before: Tue 29 Sep 2020 09:58:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 60.248.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124 (0x84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:35 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4575326E60B857E66C140787BECBC754C1EB8405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e6:f2:c8:3a:ce:0b:fb:3f:c2:df:df:20:a6:
6e:36:23:5c:c1:bc:6c:bb:9e:4a:de:ed:1c:d5:29:
ea:86:c4:98:7f:91:f6:09:8d:10:bb:5f:59:2e:ce:
fe:9b:4e:e0:4f:4f:bd:51:2b:d7:9e:b3:4c:0c:d1:
c0:62:75:2c:6a:a2:6d:c8:1e:c4:5c:f1:5b:da:26:
5a:fb:7e:d8:97:63:8e:c1:b8:7d:ea:91:7e:bc:bb:
3f:c2:c6:67:a9:fe:90:40:2a:26:21:92:24:ee:8a:
39:95:63:65:90:cb:fb:84:98:08:11:31:b8:d3:71:
e3:c6:a3:ea:95:03:3b:ed:8f:39:65:bf:53:6a:c0:
bb:a1:7d:a2:57:2a:24:7b:8c:7b:28:57:aa:8c:ce:
e0:8c:53:39:c7:7f:a3:ee:ab:1d:d0:6e:46:2a:83:
eb:3f:73:bd:14:23:75:5a:02:6c:6b:96:37:3b:39:
a2:3e:6b:d9:72:a1:a8:f2:61:f0:79:85:a9:db:0e:
37:b8:af:31:a8:f3:4b:cb:ed:36:90:95:21:d2:1b:
81:ea:a9:38:31:f7:3c:e8:75:a4:7b:22:39:f4:f3:
bf:21:ef:c5:ca:7e:55:c8:d7:e1:98:9d:08:b4:31:
1c:3a:83:e5:48:14:28:85:8e:00:42:20:70:7d:3d:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:75:32:6E:60:B8:57:E6:6C:14:07:87:BE:CB:C7:54:C1:EB:84:05
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RXUybmC4V-ZsFAeHvsvHVMHrhAU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.248.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:4a:5b:4c:ce:6a:49:a5:9f:4e:e9:c2:6d:bd:da:a0:d1:9b:
ce:49:64:dc:10:b2:95:5a:d7:68:d4:7e:4e:f8:2c:d6:b7:32:
9e:40:91:0c:9c:a3:5c:08:49:ad:96:4d:91:ce:54:07:73:a2:
bf:d6:28:40:50:e6:45:88:0a:0f:8f:23:cd:1c:c1:39:a1:e1:
2b:be:07:ab:26:00:2b:a0:3f:59:73:d8:5a:32:57:90:d3:ef:
ca:48:3a:ec:56:29:35:1f:e2:a3:08:3e:da:c9:88:bb:c7:7a:
95:3f:08:97:ef:b3:71:bf:f6:65:e0:6b:06:7a:30:e4:75:13:
51:3e:3d:e5:2c:be:ae:16:a4:92:7b:db:85:77:f0:c7:14:c7:
8f:2d:27:42:54:56:f9:92:c3:4f:15:b5:c0:1f:96:f6:fd:ef:
ef:30:53:de:3e:5e:ae:56:30:b8:c7:77:c3:3d:24:b6:f0:0d:
cb:7f:d5:e9:63:5d:e9:b7:9d:1b:d5:1f:f0:83:9d:6a:5d:bf:
96:81:f7:df:25:09:64:9c:34:d9:2c:7b:27:7c:d4:37:39:f5:
c8:02:f9:1d:ca:8a:8b:59:34:67:20:22:da:ee:27:ea:3f:ff:
db:6a:8d:f2:3a:99:4a:d9:ea:e4:22:24:0f:a6:53:1c:53:09:
66:cd:7f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org