Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_dlwifT6dDNMDKu9TbeKjSGxCMA.roa
File: _dlwifT6dDNMDKu9TbeKjSGxCMA.roa (raw, json)
Hash identifier: hXLNtEgqmJvFIM3ZB5sTPx9Smn1NkyqKqXZHH7jmtz4=
Subject key identifier: FD:D9:70:89:F4:FA:74:33:4C:0C:AB:BD:4D:B7:8A:8D:21:B1:08:C0
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_dlwifT6dDNMDKu9TbeKjSGxCMA.roa
Signing time: Thu 15 Sep 2022 02:48:13 +0000
ROA not before: Thu 15 Sep 2022 02:48:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 198949
IP address blocks: 203.75.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FDD97089F4FA74334C0CABBD4DB78A8D21B108C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:57:b9:0f:ca:50:0a:8f:5c:ca:a0:4c:3d:
d9:cc:87:83:bf:00:1d:c6:e8:a3:74:7b:6c:c5:18:
05:d6:84:89:b4:aa:ef:73:86:36:8f:dd:1d:fe:49:
f0:21:0e:1a:ad:8a:31:30:76:41:a6:a7:db:95:e3:
6b:0b:67:f2:75:ba:a6:1e:ed:c5:05:8c:ff:0a:e2:
85:18:e8:51:bf:af:8f:3b:85:90:7a:3f:a5:08:1d:
51:15:dc:66:54:e4:40:98:cf:80:3b:68:9f:fa:d7:
06:7f:df:d3:36:6a:a1:35:8b:7d:95:da:b7:9d:82:
36:f7:2d:e3:69:03:ff:df:f7:56:62:83:25:bc:ed:
a6:9a:1f:21:75:8a:0f:f5:97:64:fc:ad:e3:f3:34:
d3:71:41:5b:69:d7:e8:07:94:be:b7:6f:57:bc:43:
48:30:7c:46:65:61:a4:0b:34:c1:6c:22:09:5a:b3:
82:93:5b:0c:5d:e4:45:3b:c2:ae:1c:db:f8:cd:61:
5c:07:9c:c6:d4:1d:83:f1:c1:09:94:a2:d4:f6:21:
bd:3e:81:df:85:cc:26:99:76:7b:fb:f5:eb:07:f1:
b3:54:7c:6c:d6:fb:bc:c2:b5:f6:8a:2b:54:36:e4:
51:08:5f:16:67:4d:e1:ca:3d:2d:b2:af:ef:19:35:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D9:70:89:F4:FA:74:33:4C:0C:AB:BD:4D:B7:8A:8D:21:B1:08:C0
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_dlwifT6dDNMDKu9TbeKjSGxCMA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.75.255.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:be:75:7c:72:64:fe:74:79:04:87:93:db:c7:99:c3:af:43:
ba:95:c3:50:5d:d7:f0:c7:c1:41:2b:fe:5b:e6:b1:e5:cb:48:
50:15:20:43:9f:a6:b0:ef:e7:2c:f3:d2:55:3a:08:4e:8f:4e:
86:82:b4:05:fd:f1:cc:ca:b2:49:e3:df:5b:36:72:a4:f1:23:
60:2a:61:fa:a7:76:3d:ab:a7:9a:fc:3a:25:59:35:80:de:13:
13:32:e8:59:6b:3d:cd:f3:77:7c:0b:0d:b3:14:56:65:65:02:
b5:a2:f6:b6:58:9e:2b:3a:01:e1:b6:e6:11:4c:ae:e8:84:11:
0d:18:fd:a2:cb:03:cb:84:21:3d:b0:27:4c:6b:41:0a:ff:30:
91:0d:bc:23:ad:7e:0f:ca:26:1d:b2:3c:3f:90:26:ed:09:5e:
77:be:1b:ce:8b:1b:47:8d:73:03:23:fb:68:42:be:12:e7:ce:
69:87:3e:09:ae:d8:d7:9d:d7:0c:7a:21:af:14:58:95:2b:0a:
f6:8f:c1:50:d9:e0:08:75:fc:ed:76:03:b8:9b:e3:23:a5:14:
ba:32:ec:8f:76:3d:2f:80:3f:07:8c:2d:a0:60:7b:4f:9b:1f:
b1:bb:ec:1b:a0:1b:9f:bf:23:4d:d5:78:a4:ac:38:55:31:4d:
92:43:a5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org