Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/dkEmzk5VZIMqCSynA45Z9LeP_gg.roa
File: dkEmzk5VZIMqCSynA45Z9LeP_gg.roa (raw, json)
Hash identifier: 5e4amUG+wUQmd9kGitacSnmisXMtgmGBgmI+QHjmhBE=
Subject key identifier: 76:41:26:CE:4E:55:64:83:2A:09:2C:A7:03:8E:59:F4:B7:8F:FE:08
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FD0
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/dkEmzk5VZIMqCSynA45Z9LeP_gg.roa
Signing time: Fri 01 Sep 2023 08:57:31 +0000
ROA not before: Fri 01 Sep 2023 08:57:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 220.128.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4048 (0xfd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=764126CE4E5564832A092CA7038E59F4B78FFE08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:6f:9c:a1:c7:8c:29:83:0b:48:bf:11:36:
68:67:24:28:74:e3:78:a5:f9:7f:b9:ed:ed:05:77:
70:0b:7a:eb:06:92:45:fe:dd:16:4a:f4:4f:4c:ac:
12:dd:aa:dd:75:7d:57:c8:15:21:9e:64:27:36:90:
bc:4b:52:f9:60:83:ba:12:77:da:c6:7e:54:ab:e6:
f4:f0:76:55:75:4a:0a:c0:2c:45:a9:35:73:cb:f4:
01:79:ac:f3:22:ee:0a:2a:8b:10:02:cf:94:32:14:
97:46:2a:70:b1:a4:e9:86:25:da:75:fc:05:4c:0c:
34:38:78:69:7f:cb:a1:25:df:78:70:5c:60:54:f2:
a6:ef:6f:f3:1a:da:20:ee:b3:f8:df:28:83:35:e9:
59:84:be:af:ef:3a:f6:60:b2:15:9e:1e:42:9e:b1:
78:a4:70:6c:17:18:7b:26:7c:0f:e4:a2:50:ab:e5:
31:9d:bf:68:b1:56:00:1a:3f:d3:48:6a:e9:a2:7f:
51:6c:64:8e:bf:c6:d0:73:63:f0:81:6f:63:ef:de:
da:56:6a:8d:a2:91:ed:70:ef:6e:89:66:38:b4:45:
43:c4:b0:9b:c7:13:ba:2c:ed:c8:7b:b6:1d:b3:bd:
0a:e7:39:a4:1e:a8:8e:1f:8e:0d:b4:8a:ec:a9:9e:
36:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:41:26:CE:4E:55:64:83:2A:09:2C:A7:03:8E:59:F4:B7:8F:FE:08
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/dkEmzk5VZIMqCSynA45Z9LeP_gg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:fd:b4:a4:bc:7c:89:2e:9c:db:26:8c:b3:46:25:3a:5e:15:
2e:65:c8:42:1c:15:f2:a7:64:62:dd:e5:de:0d:a3:59:fe:56:
66:4e:45:35:d3:d0:5e:3d:ce:11:e3:72:ad:03:0e:3d:98:8b:
0f:9a:3d:b5:87:2d:12:83:06:48:30:8f:e8:d6:c7:aa:b6:ac:
56:ac:c7:1c:94:d1:f2:81:2e:d6:b1:37:5d:ed:cd:74:bd:e9:
ed:4b:24:33:89:a2:fe:f8:1a:1e:0c:e5:f9:e9:88:7d:79:05:
7f:d7:53:31:ce:9e:1b:65:1e:9e:d5:c3:6f:24:6b:0d:72:4a:
f4:d8:8c:50:06:7c:13:ef:8f:c2:ad:6a:60:62:1f:65:06:23:
0e:aa:b5:68:a9:3f:7e:6c:e0:cd:ec:e9:94:44:20:4b:cd:c0:
c8:51:19:7d:f5:f5:db:13:62:16:02:69:9b:13:57:e5:c7:03:
09:cc:5e:b7:ee:d9:33:87:53:96:91:b9:8a:96:11:76:fc:2d:
de:77:c3:ab:05:98:0d:7b:1f:94:9d:12:0f:5f:e3:dc:c5:12:
12:68:42:c1:85:73:79:fe:78:c3:a7:60:4b:a9:63:60:0e:b6:
45:fc:fc:6f:c9:41:9c:bc:13:2a:aa:ae:cc:e5:21:00:c8:84:
35:2a:5b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:38 2025 by rpki-client