Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/aahQV-FRh2zEEAIb-ljBtqTvTB8.roa
File: aahQV-FRh2zEEAIb-ljBtqTvTB8.roa (raw, json)
Hash identifier: 3jW87/BaXYojAFxFcrzGm3hgk6fvpxZsme72GAVtBIg=
Subject key identifier: 69:A8:50:57:E1:51:87:6C:C4:10:02:1B:FA:58:C1:B6:A4:EF:4C:1F
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/aahQV-FRh2zEEAIb-ljBtqTvTB8.roa
Signing time: Thu 15 Sep 2022 02:48:40 +0000
ROA not before: Thu 15 Sep 2022 02:48:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 211.23.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=69A85057E151876CC410021BFA58C1B6A4EF4C1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:55:19:53:82:bc:e0:be:69:8a:a3:e4:54:
17:cd:af:ea:a6:d6:c5:48:6c:c2:f8:e6:e8:ee:aa:
2d:41:30:ba:a1:ec:f1:c1:fd:61:e6:e8:1c:e1:d7:
be:b7:8f:14:55:fb:a9:3f:b3:34:b9:01:f9:85:41:
8b:34:b2:d6:b4:24:03:20:e1:72:6f:14:6f:2d:fc:
fe:96:bf:4f:8a:43:2d:68:65:bf:03:51:a9:fe:b6:
27:2f:0c:53:a9:95:4e:cb:6e:f1:83:ca:6f:99:a9:
d3:b5:32:ca:27:06:dc:bc:c2:87:53:9b:22:e8:9d:
0f:b2:87:fc:48:7b:91:85:f7:ff:7e:62:4b:5d:63:
d0:c5:6d:44:87:59:d1:1d:a8:57:f3:b8:5b:e4:1f:
7a:f9:29:aa:0f:a9:e2:15:de:6a:19:c9:97:18:33:
38:da:7d:ea:1a:b8:8f:1d:d1:69:59:bd:89:85:35:
e8:a3:14:e8:fa:53:86:97:e7:1b:08:37:42:d8:e3:
43:e5:b8:59:5c:6f:c4:ef:2a:42:5b:1d:0b:69:3e:
9b:b5:8a:70:5c:c7:fd:a9:23:39:15:2c:6f:1b:8b:
b0:27:35:b1:e1:16:00:cc:a2:bb:5e:01:88:9d:57:
09:f7:55:3b:5c:1e:25:2e:b0:43:ba:09:ad:e2:28:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A8:50:57:E1:51:87:6C:C4:10:02:1B:FA:58:C1:B6:A4:EF:4C:1F
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/aahQV-FRh2zEEAIb-ljBtqTvTB8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.23.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b2:04:ef:17:ed:6a:fe:40:b1:6f:a8:5b:a2:33:70:b2:e1:02:
02:d5:13:0a:d6:06:1c:97:2a:a1:57:31:3f:0b:c3:d2:da:f1:
bb:44:fb:21:93:b0:29:05:2a:4e:14:d9:f3:c6:31:28:16:dc:
0c:b7:bd:28:84:b8:1b:3a:f7:6f:55:39:47:6d:c8:bb:d2:61:
c3:ab:d3:66:b7:58:ea:fd:ed:18:f1:cc:49:26:de:e8:41:77:
c9:1a:14:72:b2:87:fa:aa:7e:84:00:36:18:52:30:c4:66:41:
e5:e0:2d:d6:2a:5f:c4:8a:69:d7:cf:85:3b:81:89:80:b9:48:
27:fe:92:fb:72:fd:42:64:6d:81:09:34:b8:b2:6e:3e:ec:a9:
13:d9:b0:69:d6:10:94:f1:e8:78:9c:ba:82:c9:7f:87:a4:ce:
12:4d:12:71:7c:0a:44:cf:a5:8c:67:cd:b1:23:50:d3:1f:87:
79:26:bd:53:52:21:09:af:fb:62:80:5b:43:e7:e3:12:15:c9:
55:59:37:b2:c8:91:61:c8:b3:cb:19:b2:c2:df:40:22:b9:ae:
6b:3c:36:48:ea:8d:b4:fa:65:0f:62:db:3f:4e:9f:e3:10:6e:
20:ce:4b:02:09:b0:60:b3:57:5d:6e:e4:7d:6b:ba:fe:50:01:
40:16:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org