Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/YqmoBXziYAQtJoWjINThh1eHf_E.roa
File: YqmoBXziYAQtJoWjINThh1eHf_E.roa (raw, json)
Hash identifier: dAeHMjtYkts3fGJpP/IR1sKzmT7tEANWaopM2w5z+7Y=
Subject key identifier: 62:A9:A8:05:7C:E2:60:04:2D:26:85:A3:20:D4:E1:87:57:87:7F:F1
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 082D
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/YqmoBXziYAQtJoWjINThh1eHf_E.roa
Signing time: Tue 29 Sep 2020 09:58:26 +0000
ROA not before: Tue 29 Sep 2020 09:58:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17421
IP address blocks: 2001:b401::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2093 (0x82d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:26 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=62A9A8057CE260042D2685A320D4E18757877FF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:85:9d:b5:1d:a3:f7:83:03:a6:b6:82:cd:5b:
16:da:69:a2:22:fe:7f:b1:01:3b:bc:03:70:1a:a5:
04:82:c9:09:5e:b9:16:d4:ef:0a:27:bf:6e:7a:d6:
59:0e:44:f7:b0:af:48:e1:51:6e:00:0e:23:0d:74:
bf:23:65:70:db:03:7c:e6:d6:3b:fe:f8:a7:07:d1:
85:da:dd:6d:03:df:51:2b:98:77:fb:78:2f:8e:a9:
fd:00:2b:59:60:48:71:21:b3:82:0e:60:3d:6f:4f:
73:68:8a:51:04:9f:08:77:33:f8:11:78:84:38:ac:
e4:af:78:d2:f1:30:04:e0:7c:be:cb:71:9e:a8:13:
18:09:c3:4e:c1:ed:48:29:f0:8e:0e:b8:03:eb:05:
58:14:6e:f5:b6:07:b2:d5:d0:32:0c:a4:09:6d:25:
51:de:ea:a4:5b:6e:3a:a0:eb:12:7d:f3:54:91:c9:
26:95:40:dd:d9:b5:98:15:84:b1:30:1a:fb:f2:d6:
ef:f7:13:1a:c7:5b:f0:17:6c:f3:ba:bd:ec:c0:fe:
94:c5:eb:8e:a4:7d:e1:d6:cc:58:66:2c:7e:e6:46:
62:cc:94:1c:d9:ee:f7:e2:93:96:91:5d:6a:42:95:
39:30:54:e0:92:8a:5f:9c:4e:17:83:a3:4b:05:ab:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A9:A8:05:7C:E2:60:04:2D:26:85:A3:20:D4:E1:87:57:87:7F:F1
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/YqmoBXziYAQtJoWjINThh1eHf_E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b401::/32
Signature Algorithm: sha256WithRSAEncryption
5d:3d:5e:5d:73:44:c8:74:48:b2:e1:77:b0:64:28:91:1f:41:
9a:fc:85:dc:e1:97:cc:9f:1d:d0:03:8c:8c:7e:65:9b:cb:0d:
b4:a2:97:8d:e7:4c:5f:54:7f:a6:cf:09:93:57:7e:41:a6:d5:
11:cb:bc:64:d3:61:11:52:c3:93:62:0e:13:9f:a8:a4:3c:61:
3d:63:85:86:20:82:e5:39:36:2e:c5:f0:7f:1a:80:70:45:59:
76:e3:fa:21:8e:31:d2:46:d7:af:67:4d:49:63:0b:88:94:e2:
62:67:62:e3:20:83:4d:7a:78:ad:a3:3b:9c:7f:30:c9:bc:5b:
c9:cf:39:65:4b:ec:7b:d8:29:7c:dc:fa:dc:79:76:53:b9:d0:
08:f4:98:cd:2f:2e:0b:2d:3f:92:89:d6:9f:13:2a:5d:b2:99:
c4:ba:ea:7e:4e:90:5f:7d:6e:25:a4:2d:32:49:71:e0:4a:6d:
be:da:8b:a0:ef:93:50:e6:e9:86:7a:c8:d4:af:e2:ea:28:48:
19:d5:91:68:eb:48:fb:0e:11:1c:bf:80:75:40:e3:24:0e:a0:
1e:91:b7:aa:cd:a3:f4:3d:79:bb:d6:cd:f5:d7:80:98:21:2b:
80:5a:f4:5f:8e:4e:90:29:8e:8e:6a:1f:8f:b0:44:71:6c:2a:
86:90:af:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:56 2025 by rpki-client