Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/8yOGlB8oFfe3pjWrV9r9lRCLboc.roa
File: 8yOGlB8oFfe3pjWrV9r9lRCLboc.roa (raw, json)
Hash identifier: 4mPX2gd6MeNqj0072z6aqvT2lUkk7x0s5tnOx9dSRaE=
Subject key identifier: F3:23:86:94:1F:28:15:F7:B7:A6:35:AB:57:DA:FD:95:10:8B:6E:87
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0A6C
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/8yOGlB8oFfe3pjWrV9r9lRCLboc.roa
Signing time: Thu 15 Sep 2022 02:49:22 +0000
ROA not before: Thu 15 Sep 2022 02:49:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18182
IP address blocks: 39.1.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2668 (0xa6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Sep 15 02:49:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F32386941F2815F7B7A635AB57DAFD95108B6E87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:79:63:9b:b3:a4:eb:55:f0:2a:20:4b:db:
1f:48:3c:46:3d:f6:bc:3b:66:df:73:56:c7:fc:a8:
8b:ae:c8:66:f1:75:af:f8:83:0a:ed:ee:18:47:1f:
e2:8e:f9:4b:a3:18:e0:64:c5:34:d4:38:99:1b:70:
12:79:85:38:4d:96:0a:ec:87:9c:ad:fb:a2:b0:b3:
ca:b6:f7:ff:5c:a4:4a:d8:7f:b9:43:e1:15:29:66:
84:57:50:22:7b:19:4e:80:8d:a6:11:1a:10:24:e8:
22:35:10:19:da:30:f6:f8:63:cb:6d:f0:6b:eb:fa:
9c:6a:6e:e4:67:ed:db:2e:a0:79:a2:60:98:13:e4:
69:7d:aa:83:21:92:68:cf:ba:dd:8a:97:b9:2d:b9:
6a:0d:1a:95:a2:a6:75:c2:df:57:c3:96:a6:2a:f4:
9b:76:65:68:f7:56:fa:13:e6:63:ee:11:1a:0e:c3:
c4:a8:a9:cd:d5:94:ab:5a:51:54:3b:8f:2e:42:a1:
e8:b2:4a:a2:82:6c:df:c9:5c:7e:67:dc:82:6e:54:
40:ef:16:d4:1e:83:0e:d0:55:25:ef:67:0b:f5:33:
e0:5c:02:f9:12:23:71:29:2a:5d:e1:da:76:c1:2f:
c9:a0:bd:5c:4b:8a:0a:ea:a5:6c:f1:95:ed:28:56:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:23:86:94:1F:28:15:F7:B7:A6:35:AB:57:DA:FD:95:10:8B:6E:87
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/8yOGlB8oFfe3pjWrV9r9lRCLboc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
39.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:93:7a:31:e7:de:80:db:bf:09:8b:39:9d:64:cb:11:51:85:
41:be:41:4d:6e:42:2c:75:3a:62:a4:51:8b:3b:8b:7d:43:8f:
82:79:60:68:1f:12:74:fb:2e:0b:ea:8a:75:d7:d9:2d:b3:3b:
4b:29:01:e8:e8:9a:eb:b2:05:27:71:5d:af:0a:eb:15:35:8d:
60:33:df:4d:91:cb:a0:a9:1c:ac:bc:ac:7e:d6:d8:ea:0b:5d:
6f:4e:06:6c:c3:24:f7:96:4b:6b:24:1e:6e:99:ee:55:fe:bb:
31:3c:52:3e:ec:91:61:6a:25:47:66:d4:18:bb:5b:d5:6f:16:
f6:2e:83:69:72:38:69:e6:8f:a1:40:fb:14:c2:9d:14:ae:88:
a7:77:ce:0f:f3:5e:3e:67:af:8a:06:72:20:d0:38:ab:74:6a:
3e:3d:81:49:8e:0b:b3:b6:b0:c2:49:20:65:76:4b:a5:94:68:
f4:61:08:e7:02:40:e5:99:9a:a6:c6:ac:e7:d3:4c:82:67:49:
3a:a5:39:13:da:2a:be:d8:f1:12:c4:54:a0:25:62:b5:35:78:
04:f3:b0:25:fd:67:9b:b8:66:65:fc:c3:6c:6e:80:f8:a1:84:
74:4b:0a:78:8f:36:c1:2d:67:57:8e:de:3f:13:73:b0:0f:7c:
bd:e4:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org