Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/dJPWMD6TfZ8I_p3fq-4h7hXSFK8.roa
File: dJPWMD6TfZ8I_p3fq-4h7hXSFK8.roa (raw, json)
Hash identifier: zFE7uiUrDkC5iz7tO9YdigNqzL4nou3QAGlaK6T31Ls=
Subject key identifier: 74:93:D6:30:3E:93:7D:9F:08:FE:9D:DF:AB:EE:21:EE:15:D2:14:AF
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/dJPWMD6TfZ8I_p3fq-4h7hXSFK8.roa
Signing time: Thu 15 Sep 2022 02:48:41 +0000
ROA not before: Thu 15 Sep 2022 02:48:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 210.242.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7493D6303E937D9F08FE9DDFABEE21EE15D214AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:61:49:b4:f5:de:9a:0a:48:51:3d:0d:6b:
b2:77:c4:3a:d9:45:1f:e8:60:7a:42:7a:4d:63:12:
8a:a0:21:b2:74:9f:80:3a:64:23:a2:50:0b:91:9a:
30:d4:f7:7a:6b:7c:9e:3c:20:49:ba:37:75:25:88:
d4:d0:93:15:ec:99:f0:66:11:18:eb:43:23:ac:d7:
57:59:49:c5:1b:e3:c1:0e:78:65:8b:09:0c:c3:ec:
3d:66:ef:e2:16:13:a2:77:ce:34:31:f8:be:75:a7:
94:c8:0f:23:0c:52:fe:67:ad:b5:cd:6d:34:17:40:
c1:f5:fc:7d:5f:de:b6:92:fa:59:aa:77:c1:4c:77:
d0:27:e9:95:94:ca:e0:60:ac:af:d9:59:06:92:41:
c4:99:b9:b0:53:54:10:60:f3:8f:de:bd:fe:7a:82:
19:80:ee:55:e8:b3:36:e3:cd:1d:d6:74:44:6d:8c:
48:40:2c:12:3d:e2:d7:71:2b:86:c1:73:be:ab:9a:
12:87:d0:12:89:fb:f8:2a:10:18:d7:10:7d:6a:0f:
3e:1b:74:3a:8e:92:c5:3c:0b:d8:c4:d5:31:dd:36:
f4:59:ac:07:31:c2:ab:2a:d1:6e:e6:a8:ab:a6:cd:
73:cd:7f:31:81:13:1c:1d:26:58:38:e0:41:eb:51:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:93:D6:30:3E:93:7D:9F:08:FE:9D:DF:AB:EE:21:EE:15:D2:14:AF
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/dJPWMD6TfZ8I_p3fq-4h7hXSFK8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:1e:5a:ec:85:df:36:dc:0b:99:f7:8a:d5:9c:d4:53:66:8b:
5a:65:91:16:db:f3:6d:d2:65:8e:c2:3f:ea:6f:d4:db:3b:96:
b7:4f:8e:6f:3b:9c:28:64:ff:ca:ac:e7:c4:bd:b1:b3:84:67:
60:46:37:61:00:ff:43:f2:cc:f1:d3:c3:6d:44:7f:c4:77:5e:
4b:b2:ac:d5:d7:9b:ee:17:4a:11:65:b7:fb:e8:eb:49:aa:8a:
86:43:04:a4:ae:83:01:4a:ed:4d:8c:10:76:f9:cc:2a:ec:d8:
07:07:e3:15:a3:c0:e7:60:34:26:26:0d:c1:19:f3:29:4c:ac:
38:63:15:5d:37:d3:2f:fd:40:f4:f3:49:5d:46:3c:27:d2:7a:
1b:21:2c:ab:9e:d2:c4:c6:c3:b4:c1:c1:38:ec:0f:a8:f0:15:
98:5f:96:ee:ac:da:45:74:c9:85:73:0d:61:a9:e5:51:0c:48:
93:64:31:32:1a:12:ea:db:d8:57:16:1a:29:fc:8f:56:5f:30:
3e:fc:f2:a7:26:98:44:33:49:2b:7b:e8:1d:9e:a7:49:83:96:
4b:23:9e:28:e3:5c:cf:8f:23:81:22:59:11:18:01:8f:d2:0f:
dd:be:01:9d:30:13:cb:67:b2:d0:ed:9e:e1:4b:14:0c:08:0c:
0f:f2:61:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org