Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/bH7thsLsNGvXGx2nJgYHSJlNY-U.roa
File: bH7thsLsNGvXGx2nJgYHSJlNY-U.roa (raw, json)
Hash identifier: CTZDy6YP19juC9luVhBd0gr70m3NN0b73suTZ7sWr58=
Subject key identifier: 6C:7E:ED:86:C2:EC:34:6B:D7:1B:1D:A7:26:06:07:48:99:4D:63:E5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bH7thsLsNGvXGx2nJgYHSJlNY-U.roa
Signing time: Thu 15 Sep 2022 02:48:38 +0000
ROA not before: Thu 15 Sep 2022 02:48:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 20940
IP address blocks: 2001:b032:104::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6C7EED86C2EC346BD71B1DA726060748994D63E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:d9:84:ed:dd:12:e1:09:36:43:eb:e9:11:
6c:64:bc:10:a2:21:f6:ab:71:3d:73:d4:0d:dd:ee:
18:47:fa:b9:f3:32:2d:75:2e:5c:9b:f7:54:62:e6:
85:45:7c:fe:89:ae:d7:b0:12:e2:93:b2:44:24:5c:
e5:d1:31:52:2b:38:e4:62:5d:18:b3:15:a1:42:5c:
2f:fe:18:89:84:5e:d4:cc:9a:4c:4b:99:1f:06:6f:
09:8f:da:88:20:72:12:80:e9:b3:9b:af:10:e4:3b:
e2:77:94:23:24:f2:14:e1:57:26:c2:d9:1e:4d:49:
4d:00:20:91:e0:27:ea:c6:f4:ef:2c:bc:f7:f2:9e:
0a:a9:c7:7b:cc:9b:be:ac:16:8a:9b:24:eb:7f:b7:
24:66:a7:03:74:60:71:2b:d1:aa:6b:d9:1f:13:b5:
f5:84:37:cd:fd:21:d1:15:aa:0c:e5:6a:85:bc:2a:
94:c4:4b:82:bb:cb:8b:a9:63:d8:b5:c8:66:8f:52:
0d:63:9a:5d:1f:52:f8:a3:b2:83:70:36:1a:58:cd:
c0:9a:81:f3:bd:27:47:fc:05:90:ce:63:a8:e8:77:
b0:9c:f3:bd:15:89:dc:f5:42:86:4b:4a:f0:1b:aa:
f1:f8:2d:39:00:f5:f2:6a:be:14:1b:63:43:a0:c4:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7E:ED:86:C2:EC:34:6B:D7:1B:1D:A7:26:06:07:48:99:4D:63:E5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bH7thsLsNGvXGx2nJgYHSJlNY-U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b032:104::/48
Signature Algorithm: sha256WithRSAEncryption
48:ab:bd:32:b1:de:4e:4b:5d:3a:e0:d4:f0:4d:aa:32:29:8d:
e6:ee:66:2a:a6:2f:ed:a1:f2:6a:a6:94:54:56:e9:ac:99:fe:
6f:c0:b6:a5:ce:34:5f:5b:19:ce:13:81:e2:18:0f:ea:e0:bf:
85:5a:21:01:98:92:6a:67:2f:5a:69:9f:bb:a6:3e:b7:db:e9:
a2:83:33:71:c3:cc:d5:9d:4d:ab:09:13:1a:a7:1c:82:5a:9c:
55:8f:54:6d:a4:73:f1:3a:94:d7:cf:ba:d9:c3:e0:51:af:73:
96:f4:24:54:44:fd:c1:3d:4f:3a:4e:d3:c9:39:fd:0e:c1:35:
f0:26:c2:ab:88:29:89:bb:65:4b:14:b0:32:bd:02:82:a8:e7:
eb:94:a6:eb:5c:12:14:1f:23:75:d3:f7:3e:6b:53:54:43:13:
3b:b5:d0:31:a7:97:b5:e8:1f:5a:31:9e:9e:e8:07:a3:75:60:
cb:8d:5d:45:63:cc:21:37:91:d8:9f:65:79:67:94:6e:35:82:
ad:1a:f5:18:6e:cb:26:78:f4:f1:8d:29:b6:e1:72:76:fd:7e:
34:c8:ed:9f:fd:be:02:96:db:6e:3a:07:7d:3a:d7:e4:3b:2b:
67:f8:97:26:e5:e7:09:71:cc:74:66:e4:6e:12:98:dc:b6:46:
c4:1a:f5:4d
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMjA5MTUw
MjQ4MzhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDZDN0VFRDg2QzJFQzM0
NkJENzFCMURBNzI2MDYwNzQ4OTk0RDYzRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYpdmE7d0S4Qk2Q+vpEWxkvBCiIfarcT1z1A3d7hhH+rnzMi11
Llyb91Ri5oVFfP6JrtewEuKTskQkXOXRMVIrOORiXRizFaFCXC/+GImEXtTMmkxL
mR8GbwmP2oggchKA6bObrxDkO+J3lCMk8hThVybC2R5NSU0AIJHgJ+rG9O8svPfy
ngqpx3vMm76sFoqbJOt/tyRmpwN0YHEr0apr2R8TtfWEN839IdEVqgzlaoW8KpTE
S4K7y4upY9i1yGaPUg1jml0fUvijsoNwNhpYzcCagfO9J0f8BZDOY6jod7Cc870V
idz1QoZLSvAbqvH4LTkA9fJqvhQbY0OgxC9HAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUbH7thsLsNGvXGx2nJgYHSJlNY+UwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9iSDd0aHNMc05HdlhHeDJuSmdZ
SFNKbE5ZLVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw
MgEEMA0GCSqGSIb3DQEBCwUAA4IBAQBIq70ysd5OS1064NTwTaoyKY3m7mYqpi/t
ofJqppRUVumsmf5vwLalzjRfWxnOE4HiGA/q4L+FWiEBmJJqZy9aaZ+7pj632+mi
gzNxw8zVnU2rCRMapxyCWpxVj1RtpHPxOpTXz7rZw+BRr3OW9CRURP3BPU86TtPJ
Of0OwTXwJsKriCmJu2VLFLAyvQKCqOfrlKbrXBIUHyN10/c+a1NUQxM7tdAxp5e1
6B9aMZ6e6AejdWDLjV1FY8whN5HYn2V5Z5RuNYKtGvUYbssmePTxjSm24XJ2/X40
yO2f/b4ClttuOgd9OtfkOytn+Jcm5ecJccx0ZuRuEpjctkbEGvVN
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org