Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/bT3fwvNnVA_XKTwq82uyFkvFkfw.roa
File: bT3fwvNnVA_XKTwq82uyFkvFkfw.roa (raw, json)
Hash identifier: soJr1JaxmhmmNspiFwMvBhRDowjuhlCHHcqyJ3HK60I=
Subject key identifier: 6D:3D:DF:C2:F3:67:54:0F:D7:29:3C:2A:F3:6B:B2:16:4B:C5:91:FC
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bT3fwvNnVA_XKTwq82uyFkvFkfw.roa
Signing time: Thu 15 Sep 2022 02:48:23 +0000
ROA not before: Thu 15 Sep 2022 02:48:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 210.241.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6D3DDFC2F367540FD7293C2AF36BB2164BC591FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7c:2e:57:73:12:6f:36:8e:7a:b4:c6:a8:5f:
a9:13:96:61:a4:e0:04:cb:c9:ed:3b:b0:c6:ff:5f:
b5:00:5a:17:2d:b7:4e:1c:69:77:d4:a0:84:03:24:
ec:02:81:cc:cc:98:1a:4f:1a:67:ef:a7:f1:4e:ae:
42:e9:2b:a5:6c:74:d1:ff:d5:0d:24:c8:be:f9:d3:
4c:e6:a6:a6:52:1a:12:b3:0c:5a:63:07:ed:93:45:
32:33:59:94:c2:ab:48:76:83:c5:78:0c:89:2a:08:
04:e5:33:df:fe:74:ef:74:15:79:f7:71:e8:91:10:
dd:43:9b:dd:61:d6:85:0e:5c:f3:a2:8c:16:6f:12:
c6:14:09:19:22:ac:62:70:eb:96:f0:18:3d:63:aa:
f4:b6:3a:3c:52:4d:2a:51:ea:72:a4:34:b9:e4:a1:
16:f6:23:21:2a:73:7a:a5:71:8b:a3:49:c8:85:20:
35:49:37:bc:5e:02:1c:fc:95:66:49:5f:42:49:15:
2f:b4:3a:a4:72:4e:be:fa:0b:46:4c:71:61:a2:20:
77:63:94:2e:bd:79:ce:e3:81:0a:18:da:4a:c1:0f:
71:e9:7c:1b:4f:30:ce:8f:7f:b6:b5:dd:02:29:06:
c4:73:cc:68:d4:4b:fe:ae:17:49:aa:28:e7:b5:62:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3D:DF:C2:F3:67:54:0F:D7:29:3C:2A:F3:6B:B2:16:4B:C5:91:FC
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bT3fwvNnVA_XKTwq82uyFkvFkfw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.241.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:ed:ed:dc:1e:07:d1:98:1d:c0:eb:57:0d:99:91:23:ef:de:
17:0e:bd:4a:bd:5e:69:c3:2d:48:21:8b:6c:5a:22:ca:1a:22:
4c:1d:87:92:38:80:6b:57:66:37:9a:5b:8b:23:24:ce:96:bf:
01:cc:3c:4a:c2:ed:d1:f3:06:7f:6f:18:ae:7b:11:1c:64:c9:
1b:64:16:24:02:79:dc:d2:f9:2e:cb:2a:d6:c3:36:23:9c:97:
77:8b:d1:05:e5:35:83:52:a1:cd:fc:c2:dd:0c:c2:ff:88:2f:
7a:2c:4f:7f:f1:27:c0:16:b5:7d:d1:14:9f:2a:de:4b:aa:a2:
02:c9:42:16:81:4b:48:a8:f5:d7:dc:49:87:1e:af:c3:c5:9f:
db:f2:a3:d2:e0:4f:69:71:d8:ed:7d:4c:28:55:68:02:77:f2:
9a:66:ad:1d:3c:fc:11:89:22:09:f8:d4:b9:5e:eb:f3:06:b4:
b5:78:58:85:d2:a4:fd:c9:d6:43:93:11:ff:6d:f1:1a:34:e6:
21:be:dd:ac:fb:88:a5:99:db:c3:06:57:3b:88:ed:71:16:d9:
9f:d7:cf:09:67:b5:72:d9:bc:ca:11:6f:4f:b4:2c:f8:0b:9c:
0c:e2:c4:43:3f:29:a8:68:83:c7:87:cd:03:e7:67:2f:24:63:
09:55:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org