Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/TTPdHWyxD2zuQf3r0ZeReYH4Yn4.roa
File: TTPdHWyxD2zuQf3r0ZeReYH4Yn4.roa (raw, json)
Hash identifier: /vumVR7OATigLRvIAuWmGy+bPC+YZsoea1IU+0d14aw=
Subject key identifier: 4D:33:DD:1D:6C:B1:0F:6C:EE:41:FD:EB:D1:97:91:79:81:F8:62:7E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TTPdHWyxD2zuQf3r0ZeReYH4Yn4.roa
Signing time: Thu 15 Sep 2022 02:48:42 +0000
ROA not before: Thu 15 Sep 2022 02:48:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17421
IP address blocks: 221.120.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4D33DD1D6CB10F6CEE41FDEBD197917981F8627E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:4d:27:9f:f0:84:73:e9:36:51:4b:2c:03:f4:
8a:8a:00:e6:39:ae:66:e6:91:73:c5:36:0d:56:6a:
d8:e4:1d:0a:42:8a:8d:10:33:6f:88:c0:87:ce:f5:
f5:cb:15:42:96:41:02:04:f2:a5:31:34:60:45:f3:
18:ee:7a:15:c6:8e:65:0b:f4:b3:2e:3c:fc:00:6d:
52:2c:0d:f9:91:50:ae:a8:36:12:f1:0a:13:e6:40:
92:8f:80:09:c0:0f:1d:33:e1:0a:03:9f:d2:8f:38:
e2:a4:01:c9:12:e1:ce:f3:8a:11:cc:8b:88:8a:a6:
4c:de:36:c1:ec:15:c5:21:d4:9c:f5:4c:2d:09:ab:
f6:e9:67:9b:fd:35:85:ef:ab:6b:6e:46:c2:a3:39:
80:1b:11:7e:1e:0e:21:92:a9:12:dc:73:ed:e9:1f:
a3:bd:dc:57:d9:af:a7:7e:57:16:17:01:d0:25:88:
33:02:17:8c:ca:7c:27:10:0c:0c:5b:ba:6b:e2:9b:
73:40:b4:6d:99:63:cb:f6:d3:4d:81:9c:2e:b3:6b:
93:25:37:1c:f8:7b:13:cc:23:c8:64:9f:67:f4:38:
f2:ef:45:25:96:e6:84:b7:31:f2:32:46:ce:93:61:
e5:fa:b8:9d:77:47:7c:84:01:d4:e0:12:8c:27:b4:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:33:DD:1D:6C:B1:0F:6C:EE:41:FD:EB:D1:97:91:79:81:F8:62:7E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TTPdHWyxD2zuQf3r0ZeReYH4Yn4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
221.120.0.0/18
Signature Algorithm: sha256WithRSAEncryption
b9:cc:c9:26:0b:f8:b4:77:5c:bd:7d:d5:08:6c:47:cf:64:2a:
78:fe:85:8d:38:dc:67:f5:07:69:0c:79:d6:a0:33:d4:5e:63:
33:10:7c:3b:55:3f:79:71:ea:98:4c:08:02:24:49:f8:9f:9f:
b5:c9:52:c5:89:6d:98:50:6b:3e:92:6b:3d:40:e9:56:28:69:
e1:a6:74:7d:08:9b:d7:e9:d1:02:34:17:ae:39:9a:f7:ae:75:
5f:85:58:9d:4f:e0:eb:55:95:9f:ae:e3:30:67:39:50:c2:14:
66:ce:24:97:5d:ba:57:be:82:a8:5d:bb:cc:00:45:8a:df:8d:
7c:07:b7:38:eb:cb:04:ef:9b:44:bf:5c:12:35:2d:7c:38:ac:
b3:d7:79:30:4d:58:fd:4c:a2:60:c6:14:5c:6c:52:3c:8f:34:
55:30:bf:51:6c:ae:df:82:ea:81:74:77:5b:76:4c:e8:6a:57:
07:d8:eb:68:cc:07:6b:8f:0c:e5:c0:55:1b:b5:3f:03:e0:6b:
99:2b:96:e7:5c:8f:78:a7:34:52:80:f7:7e:f6:30:18:be:e5:
ac:f1:47:a0:9f:ff:0c:10:00:7b:09:73:44:91:1a:56:24:80:
78:2f:2e:01:bf:96:d2:89:27:2c:4f:99:aa:bd:cd:97:8a:97:
81:0c:7d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org