Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ftTO41saFd4K_JmZdOvfOdJAwvE.roa
File: ftTO41saFd4K_JmZdOvfOdJAwvE.roa (raw, json)
Hash identifier: OQ4keJXskfO71fP5wdRrBKLjFxh3pNy8Y2PXlPwWcNo=
Subject key identifier: 7E:D4:CE:E3:5B:1A:15:DE:0A:FC:99:99:74:EB:DF:39:D2:40:C2:F1
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C60
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ftTO41saFd4K_JmZdOvfOdJAwvE.roa
Signing time: Wed 29 Sep 2021 02:51:12 +0000
ROA not before: Wed 29 Sep 2021 02:51:12 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17421
IP address blocks: 111.70.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3168 (0xc60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:12 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7ED4CEE35B1A15DE0AFC999974EBDF39D240C2F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:43:db:cf:7e:1a:02:0a:88:ae:5f:87:ee:
17:4a:80:ab:d7:44:f1:c0:4e:5f:1f:fe:f0:fc:ef:
c4:4c:8b:27:ee:5d:c8:b2:4e:29:f2:b2:45:44:a2:
4a:ba:85:57:4b:38:29:17:c3:52:1f:47:85:eb:ee:
83:2e:b2:b5:8a:ab:7e:47:ec:59:df:fe:8c:17:5c:
d6:16:7a:9c:9b:ce:cc:88:70:f0:a7:d3:ee:a5:fb:
be:16:5c:c9:e4:4d:1a:cd:cc:8b:96:46:f4:d8:ba:
d3:dc:e9:a0:0b:bf:68:3a:25:d2:08:de:41:10:e5:
0e:59:b6:34:0b:00:90:54:fc:1d:bb:3c:48:2e:c6:
0f:3c:9c:96:04:dc:a8:49:ee:7a:96:81:85:46:6b:
30:51:77:1f:e9:b1:73:61:4a:e9:25:24:e7:e4:95:
80:0e:27:af:23:10:2c:d4:54:77:3e:19:36:f2:76:
11:ac:32:2f:19:c4:77:9c:15:3b:51:11:7d:3e:fd:
24:b0:b1:e6:a4:ed:7f:2b:fb:cd:b1:29:3c:75:97:
82:90:8f:42:4f:58:1d:20:72:32:1d:22:72:59:b9:
30:1f:f9:b3:46:d4:99:c0:5f:21:6d:73:6c:87:36:
61:63:c2:21:43:a8:af:91:42:18:ac:b3:ec:47:6a:
19:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D4:CE:E3:5B:1A:15:DE:0A:FC:99:99:74:EB:DF:39:D2:40:C2:F1
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ftTO41saFd4K_JmZdOvfOdJAwvE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.70.0.0/15
Signature Algorithm: sha256WithRSAEncryption
98:0c:02:a7:55:2a:4d:82:62:e6:c8:6c:5f:7a:66:0b:fe:36:
e7:3c:e8:76:a7:42:6d:6a:3a:e5:60:e8:95:dc:32:8f:0c:3e:
c4:80:37:42:8b:11:38:c0:0c:91:34:89:b5:51:4d:89:d2:70:
18:e9:b0:1c:6c:88:45:c8:95:d7:50:46:e4:70:e1:25:0b:cd:
91:ea:b1:cb:35:a7:a0:22:69:b3:74:03:c1:71:91:55:3d:c4:
79:16:7e:43:2b:8b:43:9e:11:e5:05:4c:dd:15:67:fd:60:f6:
49:d2:b7:6e:d9:54:d1:e1:36:b4:3d:1b:7b:b4:41:91:61:e2:
4d:f5:58:45:96:6b:40:07:fc:f1:7a:82:3d:85:f0:8d:c8:e6:
d9:3b:20:45:35:4f:f2:03:80:52:25:cd:be:50:a0:4c:b5:e4:
4a:f8:b7:20:1b:3f:6b:41:ea:97:6b:7f:27:f5:e5:7e:5e:16:
cc:ca:1a:69:85:70:96:ff:5c:fc:bd:95:47:97:4e:b9:85:e3:
55:d3:2b:8c:3c:30:e6:6e:52:b7:cc:c4:82:a5:47:9f:9f:61:
da:6d:2c:96:dc:6d:ae:e7:3c:06:a4:b8:64:e4:28:ec:b1:38:
66:42:e4:de:60:53:0a:2f:6a:c9:ac:d5:1e:bd:7a:8e:32:2e:
9b:cd:f2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org