Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/02w7q-7hLCFTB6REP0JJy5q-rI8.roa
File: 02w7q-7hLCFTB6REP0JJy5q-rI8.roa (raw, json)
Hash identifier: zdqvhQAdRLCJ66bK+ynQ/+pJNFTBuoug2Qqd0uhc6AQ=
Subject key identifier: D3:6C:3B:AB:EE:E1:2C:21:53:07:A4:44:3F:42:49:CB:9A:BE:AC:8F
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 08CE
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/02w7q-7hLCFTB6REP0JJy5q-rI8.roa
Signing time: Sun 07 Feb 2021 11:55:26 +0000
ROA not before: Sun 07 Feb 2021 11:55:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18182
IP address blocks: 27.105.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2254 (0x8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Feb 7 11:55:26 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D36C3BABEEE12C215307A4443F4249CB9ABEAC8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:a5:f9:65:f9:80:ed:93:cf:71:56:4b:2e:
be:35:d3:1e:8c:5e:7f:23:ca:57:15:5c:03:e7:ad:
b2:21:12:86:c2:33:22:a7:24:29:cf:e0:90:47:95:
3d:15:57:e2:c2:20:7d:f0:5d:a7:bb:18:d2:93:97:
08:b0:f1:6a:4f:c4:ae:2b:0f:20:f1:08:2b:88:ec:
b4:b3:f5:8e:97:bd:82:07:18:21:57:5c:79:b1:97:
5d:db:5f:f3:88:e2:02:15:69:8b:50:b4:f9:98:83:
85:a3:c7:a2:a6:75:8f:25:be:d2:5e:97:f8:7c:b3:
53:35:30:4e:12:14:82:95:07:2f:e8:17:88:ec:17:
b3:e6:78:ba:91:04:de:7a:3d:52:98:db:d2:f3:3e:
11:9d:0d:a8:de:37:52:83:77:77:a2:ec:35:dc:71:
21:6b:eb:9a:80:33:d6:a4:9c:13:db:34:94:ff:cb:
6f:5d:9c:db:e7:b8:f4:e0:a7:89:2b:32:fa:d3:18:
7e:28:b8:a0:1c:92:e3:0d:f0:dc:56:57:a7:ac:14:
c5:d6:06:d5:79:13:02:8d:30:69:0b:0f:25:a2:72:
11:6d:41:ce:b0:84:e6:79:be:38:79:8f:91:d7:f0:
19:c8:53:7b:95:41:65:eb:ac:7f:3d:ed:d2:f3:9f:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6C:3B:AB:EE:E1:2C:21:53:07:A4:44:3F:42:49:CB:9A:BE:AC:8F
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/02w7q-7hLCFTB6REP0JJy5q-rI8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.105.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:02:f6:57:6e:d4:7e:88:4b:fd:89:ae:6a:36:1c:9e:03:22:
02:9a:bb:35:4c:3c:b3:ae:17:cf:20:10:f4:ab:65:cd:10:ce:
7b:71:30:1f:fb:6c:50:eb:dd:72:be:54:83:09:37:ec:26:3a:
2e:4f:4e:d1:5d:72:98:4a:91:d0:5c:23:69:53:ad:ab:34:62:
a0:aa:e3:1e:b3:a7:7d:3b:e5:dc:73:30:24:5b:44:1c:d4:d6:
98:35:72:93:f3:3a:c8:d5:3c:6b:64:46:90:84:74:73:80:f6:
cb:f0:3f:d1:8b:04:13:d6:8b:52:1b:e3:0c:05:5b:da:1e:10:
7c:b9:f3:d3:7d:25:65:ed:2c:9c:0e:92:bf:13:c8:70:e1:92:
bd:c5:79:08:da:62:ff:fb:11:ad:13:68:79:7d:5d:f9:b6:3a:
d1:d7:c4:cd:a1:a5:5c:97:3e:9e:b6:9e:d8:6d:44:c7:c7:d9:
4e:62:d4:53:40:10:9b:05:63:70:29:d8:1a:53:57:56:7d:d8:
84:83:9c:39:38:1d:14:5b:2c:9b:68:02:0c:19:e7:81:a7:d1:
6c:3e:53:77:77:f2:0e:a7:ae:71:8a:60:4f:b5:3e:0a:a8:79:
dd:c0:e5:b9:d3:5f:42:1d:95:20:f0:87:c2:73:96:92:46:88:
30:03:79:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org