Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/tpyDI8wLX5nzzzb-ahEYKxOsH1Q.roa
File: tpyDI8wLX5nzzzb-ahEYKxOsH1Q.roa (raw, json)
Hash identifier: QUpP48qVLsjhmbc3j/uNc+VNduYL0QFw7F41bw/XXOk=
Subject key identifier: B6:9C:83:23:CC:0B:5F:99:F3:CF:36:FE:6A:11:18:2B:13:AC:1F:54
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C10
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tpyDI8wLX5nzzzb-ahEYKxOsH1Q.roa
Signing time: Wed 29 Sep 2021 02:50:49 +0000
ROA not before: Wed 29 Sep 2021 02:50:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 122.116.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3088 (0xc10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:49 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B69C8323CC0B5F99F3CF36FE6A11182B13AC1F54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:3d:fe:67:d1:3d:8f:1a:58:67:9a:30:c1:
71:c0:2c:2a:6f:2f:53:86:0b:30:36:ed:73:81:d3:
62:c8:fc:86:83:f7:91:ab:d2:85:ef:42:c2:57:56:
f2:da:1b:6c:ab:ad:d9:77:91:95:e2:a7:ff:09:9c:
d9:a9:fe:94:a3:10:4b:5f:db:76:d6:6f:cf:5f:fb:
b3:e1:0d:4d:2d:db:b0:ac:f0:fb:34:a8:3c:0c:74:
d2:3e:be:4b:c3:a1:fc:3c:d7:ca:f6:7a:57:29:16:
e8:74:47:c2:02:f2:a1:bf:9d:db:9a:9f:1b:fa:2d:
5b:e8:9e:93:59:50:c7:b6:10:8c:eb:12:5c:23:d7:
4c:46:9a:d0:6e:23:9a:cd:55:52:02:a9:3e:dc:2f:
31:40:b8:8c:7b:bd:e9:86:6f:5d:a1:02:d7:4c:15:
0b:d7:5e:cf:ea:ae:96:a3:50:e5:11:38:37:78:86:
2e:6c:7c:27:91:e5:98:79:5f:62:20:a0:06:a5:c4:
df:d0:98:c2:1a:ba:89:ae:8e:3e:52:1c:15:05:d2:
e4:e7:b5:81:be:84:00:e9:12:92:f8:08:a9:c5:cf:
29:a0:ea:c3:8e:87:60:51:78:d3:2d:5d:3c:58:b6:
e8:bf:67:d8:76:ce:93:4f:d5:ff:03:97:c7:1d:4e:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9C:83:23:CC:0B:5F:99:F3:CF:36:FE:6A:11:18:2B:13:AC:1F:54
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tpyDI8wLX5nzzzb-ahEYKxOsH1Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.116.0.0/15
Signature Algorithm: sha256WithRSAEncryption
06:60:93:6b:0e:5d:0d:54:75:65:5e:f0:6f:a1:55:93:8b:42:
b0:b1:5f:2e:3e:c2:ed:3c:86:17:18:cd:29:8b:51:fb:8c:18:
af:ea:33:98:bf:d1:a0:e7:2b:01:fe:06:fa:5c:da:31:b6:c8:
e3:c6:5c:91:4a:5c:c1:6b:76:42:d6:1f:e5:20:a1:33:bd:92:
1f:20:20:3b:96:8b:d4:f5:40:87:18:31:fc:5d:d6:a7:da:5c:
c8:21:0a:58:f8:ab:fb:f7:75:5e:7d:51:4c:96:3d:a7:f7:51:
cf:98:b7:4c:e5:1c:6e:95:9b:c5:08:81:88:be:1d:f2:ca:9a:
be:ec:db:23:4c:63:3b:b3:e4:39:b8:b0:65:2c:3d:f1:ad:aa:
ac:f3:44:e6:42:2e:0a:b0:a3:1f:1a:b8:54:a4:ec:83:04:b0:
9d:1c:da:b4:6f:12:cc:74:a9:e6:b7:22:3e:04:b8:fe:aa:f2:
03:27:e3:07:f1:f6:ba:b3:0d:ab:e1:d9:de:79:93:30:ac:46:
03:13:58:da:7a:98:18:02:d0:86:b6:c1:27:74:65:dc:09:32:
8a:db:07:91:b1:e8:90:ac:cb:81:21:d2:18:1d:05:43:34:f3:
b4:fb:08:53:03:05:8c:47:fa:ab:30:1c:7c:ab:b9:f1:96:ae:
fe:13:df:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org