Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/mEFaQRihl5UkuAJFG2A6UO6qz3c.roa
File: mEFaQRihl5UkuAJFG2A6UO6qz3c.roa (raw, json)
Hash identifier: m05SGBvXAjNpBoSS1Rsj1r8rPNhS1/wqtvlIr7ZahUU=
Subject key identifier: 98:41:5A:41:18:A1:97:95:24:B8:02:45:1B:60:3A:50:EE:AA:CF:77
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0AC7
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mEFaQRihl5UkuAJFG2A6UO6qz3c.roa
Signing time: Sun 07 Feb 2021 11:39:05 +0000
ROA not before: Sun 07 Feb 2021 11:39:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 59.112.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2759 (0xac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 11:39:05 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=98415A4118A1979524B802451B603A50EEAACF77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:f4:4b:51:57:e0:75:2c:c2:46:8f:b3:b7:
1d:90:0b:ed:43:22:b4:51:0a:a9:ba:a7:95:2a:a4:
5d:df:6d:30:f8:a8:69:40:fa:fd:ff:4b:72:55:87:
b1:67:7b:b0:cf:28:9a:ed:f0:22:b9:60:40:6f:dd:
d1:c1:d9:d1:97:03:29:66:19:9b:8f:86:f6:df:8d:
a7:d5:46:63:a6:9a:a5:c4:f1:cf:d5:c2:57:5d:7e:
3f:c6:51:81:80:9a:05:04:f4:a1:c0:07:49:f4:6a:
99:6c:f6:fc:ca:79:75:ee:73:90:a4:a5:55:f3:f3:
d7:3b:c1:99:5f:bc:80:11:f9:f9:c3:c7:58:89:ac:
d8:c4:2d:14:d6:84:83:cd:a6:55:f0:11:99:fc:65:
c3:b4:66:7f:8f:6e:9d:30:ce:d4:95:07:fa:25:b8:
40:aa:04:f3:d7:ad:01:69:8b:54:4d:5a:2a:03:9a:
50:38:3c:95:90:78:59:14:b3:18:2c:66:6a:4f:32:
b6:70:5a:f6:15:4f:00:65:7a:14:87:a7:52:4b:c8:
33:84:a2:ff:fc:53:51:34:8e:0b:e2:92:1d:21:29:
a7:c0:0e:29:41:d4:0f:72:b8:75:7c:86:9f:97:ec:
82:9b:69:33:91:b6:db:6e:aa:aa:9e:5f:16:16:5a:
66:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:41:5A:41:18:A1:97:95:24:B8:02:45:1B:60:3A:50:EE:AA:CF:77
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mEFaQRihl5UkuAJFG2A6UO6qz3c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.112.0.0/13
Signature Algorithm: sha256WithRSAEncryption
05:44:b0:58:0b:8d:19:55:f8:32:40:98:16:62:9d:e6:a5:4e:
99:13:3a:40:8f:f7:19:0d:72:1e:fe:f8:c5:bf:5d:37:6b:fd:
3b:a8:83:8d:28:ab:74:7e:1f:cf:f1:da:6f:e5:9b:ab:5e:9e:
9e:ef:0e:da:b8:8f:91:24:1f:82:84:85:1d:63:36:07:23:02:
99:ee:cc:05:7e:2f:e3:e3:89:14:18:40:c0:2f:b7:74:75:e4:
1a:c2:54:52:ae:84:8b:b9:c9:56:fb:3c:11:cb:93:5c:ad:c7:
3e:5c:46:fb:a9:ce:5b:b0:d1:9b:7b:46:5a:69:48:bc:6c:6e:
c7:32:dc:eb:d4:06:32:1d:9a:5e:fc:89:1f:f2:ed:f5:7f:d1:
ac:64:1d:38:29:57:43:83:f2:b0:cc:cf:39:d9:85:17:e6:99:
7f:ec:41:a2:90:91:6f:95:05:6e:fd:75:45:f5:83:49:98:8d:
cd:5c:54:69:a3:42:b1:0f:16:21:ac:59:e2:72:14:80:68:8a:
18:8a:f3:63:fa:4c:a1:ca:33:01:fc:2b:91:9f:5e:3a:4a:04:
f7:0a:cc:cf:ad:7a:e0:3c:6e:3a:c5:11:f7:e1:ef:c2:bd:f9:
23:54:da:92:b0:79:4c:4e:1a:bd:10:b4:92:a3:e0:e2:cb:21:
58:81:aa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org