Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/AE4iBv_mS4gbjyFEanYB25fbZ9w.roa
File: AE4iBv_mS4gbjyFEanYB25fbZ9w.roa (raw, json)
Hash identifier: BkcViTC+csoNY47kW6dOYpzXZ0YAFhAXevnNiuPeHxM=
Subject key identifier: 00:4E:22:06:FF:E6:4B:88:1B:8F:21:44:6A:76:01:DB:97:DB:67:DC
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 077B
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/AE4iBv_mS4gbjyFEanYB25fbZ9w.roa
Signing time: Tue 29 Sep 2020 09:59:19 +0000
ROA not before: Tue 29 Sep 2020 09:59:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 45474
IP address blocks: 27.105.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1915 (0x77b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Sep 29 09:59:19 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=004E2206FFE64B881B8F21446A7601DB97DB67DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:c6:c7:05:50:5b:28:18:be:a9:dc:1b:17:
44:c9:4c:1d:17:b0:c9:9f:af:6c:26:b3:03:02:8a:
76:53:0f:df:8f:c3:93:5a:53:3b:09:d4:b7:9e:46:
2b:d8:64:58:96:aa:7d:20:4a:83:9b:71:b6:45:63:
81:9d:3b:b7:1f:ae:0e:56:14:94:a4:d7:67:77:ac:
aa:ea:92:0e:6f:dc:44:f3:f4:00:51:a9:e3:f1:5f:
79:5c:cc:2c:3c:ac:45:6e:1a:f5:7e:17:08:96:7f:
19:5a:5c:7a:0d:05:e7:db:18:3d:48:31:40:c9:db:
f7:de:71:29:da:a3:55:82:12:33:0f:13:a6:2f:e1:
62:c3:4d:d5:43:af:bd:ac:63:72:37:f5:70:67:34:
32:b4:a0:e7:72:16:18:21:db:08:04:72:62:17:05:
91:8e:3c:66:b2:bb:bd:3c:ee:aa:9f:35:b0:4a:3d:
ba:4c:49:90:ac:b7:ae:b1:af:2a:2a:d9:1d:c1:e3:
58:8c:15:f3:f8:ba:7d:c8:dc:08:6a:ec:ad:32:40:
77:12:dc:13:4c:61:40:b9:c8:9c:48:91:3b:3e:ab:
cd:7a:9f:01:a0:d2:d8:e9:4e:ba:c5:7e:c1:6c:7b:
4e:0b:9e:5d:90:fb:cc:aa:b1:34:70:c1:62:d9:1b:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4E:22:06:FF:E6:4B:88:1B:8F:21:44:6A:76:01:DB:97:DB:67:DC
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/AE4iBv_mS4gbjyFEanYB25fbZ9w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.105.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f0:2e:c6:21:99:a5:53:62:6a:9a:95:fe:b7:a0:0c:bb:d5:
67:b0:2d:0a:cd:b2:56:50:60:5b:3b:75:48:bc:1f:f2:28:95:
8a:69:b0:20:b2:f6:6a:85:0d:78:10:d4:48:01:8b:52:6b:e3:
4e:c6:88:d6:88:ca:5c:26:3b:09:22:2c:c1:f2:63:89:fe:d1:
98:97:31:b3:77:dc:bf:d3:c1:43:b3:b2:82:38:21:3b:d2:7e:
74:c8:53:a8:ae:47:f6:61:9e:ef:5b:ab:14:98:50:3d:fd:d7:
b9:e6:fa:e0:02:6c:d0:5f:90:79:16:65:00:70:91:83:9f:fc:
85:36:ba:12:c9:9e:db:05:dd:6a:fe:c6:ed:05:80:ca:28:2f:
7a:8f:59:cb:94:59:ba:8e:c7:1c:d8:1e:22:3e:74:6a:fb:c8:
15:b6:ea:c1:d2:7f:ef:66:d1:67:e6:64:13:08:4d:c4:26:8a:
e3:69:67:79:6f:d8:2a:8b:24:77:25:77:b8:a9:81:19:99:db:
70:0e:db:bf:a3:21:2b:c0:d9:07:1e:db:f0:5c:7b:18:f9:b3:
82:ef:c6:b6:38:d0:fa:d1:b9:af:0d:63:49:19:d8:e4:ff:ea:
cd:b5:eb:f2:16:d0:8b:ad:6a:28:9e:c4:17:05:1f:db:f1:36:
55:d4:22:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org