Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ccrxsZ2o-NMu4ocwfOsRpothp8s.roa
File: ccrxsZ2o-NMu4ocwfOsRpothp8s.roa (raw, json)
Hash identifier: wAn1g19awoM9Y734oTwYTo+WxfYpM5GNSpVMJgmISx8=
Subject key identifier: 71:CA:F1:B1:9D:A8:F8:D3:2E:E2:87:30:7C:EB:11:A6:8B:61:A7:CB
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ccrxsZ2o-NMu4ocwfOsRpothp8s.roa
Signing time: Thu 15 Sep 2022 02:48:31 +0000
ROA not before: Thu 15 Sep 2022 02:48:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17421
IP address blocks: 116.59.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=71CAF1B19DA8F8D32EE287307CEB11A68B61A7CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2d:ae:c3:73:fa:03:f3:22:dd:11:c9:22:e5:
45:f6:72:02:74:7b:03:20:8f:73:d2:d8:3c:4f:b2:
65:73:9d:38:93:ca:3a:e1:23:41:ef:54:dc:a6:7a:
29:ba:db:7f:85:0a:54:a4:0c:2a:5e:f5:32:19:d6:
2e:83:85:db:d0:73:e4:22:22:55:7c:f3:f1:3a:e8:
67:76:95:3a:a0:e3:18:1c:b1:8c:14:50:cf:31:99:
c3:f5:9d:ea:47:28:cf:99:54:ad:af:5b:69:f3:cf:
c3:fb:2e:b0:0f:c8:13:44:56:52:67:05:4e:67:12:
ce:c0:19:9d:95:b5:85:b6:3c:2c:b5:f6:f2:45:8e:
c8:ec:0f:67:25:1f:29:47:73:80:58:f8:3e:2d:0f:
67:2c:76:4f:50:e7:67:7d:ca:f7:2b:4a:79:5f:a0:
63:9d:5e:29:6d:3d:b4:5b:fe:e9:3b:6b:64:e2:98:
5a:38:b5:0b:0d:72:53:dd:c2:1b:56:b5:b0:12:a8:
85:fa:10:3f:56:11:84:48:87:47:e5:3b:1c:89:7b:
cf:33:d4:c5:f8:1d:75:25:ca:6c:8f:16:78:fd:f5:
3c:6d:2a:4a:68:11:36:2d:c4:e8:f6:35:77:db:7d:
f9:28:be:bc:41:f1:7c:16:38:80:f1:6b:55:32:6e:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CA:F1:B1:9D:A8:F8:D3:2E:E2:87:30:7C:EB:11:A6:8B:61:A7:CB
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ccrxsZ2o-NMu4ocwfOsRpothp8s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
116.59.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:e7:ab:42:bb:85:75:0f:2c:a3:90:9a:74:2e:3e:a7:0c:fc:
f3:72:2d:2f:d4:22:ef:8c:ff:8e:98:74:d5:61:fd:9d:26:99:
29:b7:6f:71:63:78:50:8c:5b:16:90:b3:2a:31:0f:12:a5:d6:
43:4c:55:a5:be:91:35:66:9b:d3:b9:b6:75:39:a5:0e:5c:69:
c9:f9:f2:e2:ea:1b:46:08:65:18:eb:53:50:00:af:21:07:31:
c9:87:d2:c3:ff:f8:f5:30:8a:9d:69:83:bc:de:c5:e7:c6:f4:
3a:04:3e:a9:85:b8:53:21:8c:ed:f4:53:75:77:55:3b:46:a9:
e6:41:70:83:38:07:be:b2:02:c3:3a:a8:0c:a3:14:59:4d:30:
1f:11:3c:c8:c3:be:d9:33:01:6d:97:de:5b:19:6a:c7:ea:af:
f1:e0:6b:e4:37:d6:ad:d3:8a:50:f6:b5:7e:17:22:8b:ae:2b:
b9:29:a2:a9:a5:26:a8:74:17:e5:d3:5d:31:b3:36:3f:6e:81:
3a:cd:c7:39:89:9e:89:c0:70:28:76:e9:36:5b:4d:9d:51:d7:
5b:c8:b9:1e:08:b4:d6:c9:3b:c7:f2:bc:4b:1b:7a:d3:2b:98:
be:39:78:6d:ba:67:e7:ae:d3:96:0d:8c:31:5f:c9:fc:72:3b:
d5:67:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org