Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/tnrRYkiNASaghceEvuEC6_rSXBU.roa
File: tnrRYkiNASaghceEvuEC6_rSXBU.roa (raw, json)
Hash identifier: r7ACsU5iI7lnn0XjnZlbUmkjPJaNZCLcpIsOKk6emy0=
Subject key identifier: B6:7A:D1:62:48:8D:01:26:A0:85:C7:84:BE:E1:02:EB:FA:D2:5C:15
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tnrRYkiNASaghceEvuEC6_rSXBU.roa
Signing time: Thu 15 Sep 2022 02:48:29 +0000
ROA not before: Thu 15 Sep 2022 02:48:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9680
IP address blocks: 2001:b000:591::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B67AD162488D0126A085C784BEE102EBFAD25C15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:31:5e:bd:73:ea:58:f2:16:13:41:81:aa:
a6:c0:14:2d:90:6f:16:3a:0e:fe:8e:24:e4:38:f6:
63:da:ab:69:be:51:77:09:6d:ab:7d:3f:a0:41:23:
63:4e:ac:59:b1:cf:45:fb:1a:1d:e3:8a:b4:fd:21:
84:7c:28:ce:5f:80:3c:94:1a:54:65:35:48:83:2b:
46:a8:2e:70:d2:92:fd:21:7f:20:55:90:e8:ba:95:
a2:a1:56:7d:a7:d9:51:99:88:6f:b6:80:37:44:42:
fa:a8:86:7f:fc:42:3a:e4:6b:81:50:59:3d:29:c8:
97:11:26:5d:0a:c9:db:8f:f8:95:17:88:c9:f9:87:
8e:ee:d9:72:cd:1d:cf:46:2a:6c:2a:67:77:56:a0:
70:cb:4f:78:d4:99:66:90:3a:1a:8b:aa:3d:9f:6a:
65:a3:df:78:0e:ec:29:b8:3e:37:3e:19:72:c3:cc:
48:b3:35:a4:4c:f1:39:61:9d:8d:2a:97:7e:84:89:
24:3f:7b:c5:ba:ab:61:7a:01:15:31:c2:d5:39:4c:
71:9c:65:f1:b3:8c:36:3e:29:66:0e:00:83:ea:a0:
40:64:89:74:d5:fd:46:ec:2a:84:8d:18:37:e5:52:
b7:0b:c8:1e:b6:db:03:5c:b2:51:6e:26:d3:83:d9:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7A:D1:62:48:8D:01:26:A0:85:C7:84:BE:E1:02:EB:FA:D2:5C:15
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tnrRYkiNASaghceEvuEC6_rSXBU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b000:591::/48
Signature Algorithm: sha256WithRSAEncryption
46:e1:11:ca:63:e4:af:5f:37:0e:b3:3e:37:7f:ab:63:1a:ed:
46:7f:1d:e5:cd:7f:16:88:c3:a1:7f:b2:39:83:51:fb:66:69:
ea:8b:6e:90:61:93:dd:fc:0c:b0:c2:71:c1:34:2f:5b:90:97:
9e:26:50:b5:6f:bd:99:36:bd:91:5a:75:a7:7c:d9:75:6f:8e:
25:0e:91:da:de:c8:84:6b:7f:f5:d0:90:19:3a:99:72:6d:2c:
8b:d3:d8:29:17:ed:69:67:bd:6d:09:94:e7:18:49:10:b0:7e:
11:cc:6e:cb:30:38:b0:56:de:0e:cd:0e:6b:20:89:94:93:42:
5d:33:3c:fc:f2:e7:72:8a:5c:8c:2c:c6:8a:8a:2c:e5:54:79:
83:0e:b1:f2:d5:18:46:56:8a:94:70:07:a3:75:48:56:df:0f:
98:de:cc:8d:a1:8d:b2:ed:09:ae:1e:bb:4b:bb:e7:5a:ad:cd:
5a:84:77:e2:18:cb:c4:b1:0e:3b:02:bb:4b:5d:7f:b6:5d:54:
18:7e:08:29:2f:1f:a1:19:d8:06:88:13:4d:29:d9:9b:ab:2c:
f4:fa:16:40:f3:4d:3f:b6:83:35:17:24:89:2d:08:4c:f6:13:
99:49:7a:8a:d4:19:9a:ce:03:44:fd:92:06:c5:23:f2:c7:73:
53:36:df:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org