Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/FTJfJ0QSFn3byFNupq7S1CNPC8s.roa
File: FTJfJ0QSFn3byFNupq7S1CNPC8s.roa (raw, json)
Hash identifier: X7EdtyTSz9kwqomaQG97Ll2HxzrXwbBYF2PbtKSRCgg=
Subject key identifier: 15:32:5F:27:44:12:16:7D:DB:C8:53:6E:A6:AE:D2:D4:23:4F:0B:CB
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0BAC
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/FTJfJ0QSFn3byFNupq7S1CNPC8s.roa
Signing time: Tue 28 Nov 2023 06:06:44 +0000
ROA not before: Tue 28 Nov 2023 06:06:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 39.1.16.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2988 (0xbac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Nov 28 06:06:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=15325F274412167DDBC8536EA6AED2D4234F0BCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:ee:a0:c5:64:f4:ce:d8:11:31:81:b1:0a:
88:b0:ac:bc:ab:e0:35:6a:b2:20:01:6e:10:ef:e5:
51:f2:a3:53:1b:5e:4f:7a:e4:97:02:f6:4e:ff:a1:
40:95:52:fd:99:af:69:32:7e:c8:53:c4:d0:1e:41:
9d:be:f2:e7:38:dd:12:5a:b6:82:5a:ac:4d:db:06:
12:e3:f2:b6:e7:46:0a:11:d2:60:97:af:b4:42:85:
82:72:97:1e:5f:c8:f5:c2:7f:a7:41:cc:81:e2:20:
d8:06:00:be:7a:ef:1b:8b:15:84:2e:23:8b:6c:60:
70:9d:b0:7a:64:64:54:75:89:dd:4a:a4:1b:2f:d2:
f8:e2:7a:3f:ab:10:c1:28:0d:d3:b6:c8:77:af:03:
bf:c3:bd:62:22:d9:3b:85:7a:50:ec:ab:3c:12:1f:
38:e3:cd:83:da:3b:2b:9f:03:81:20:af:40:33:d7:
43:0b:17:98:79:2c:8f:17:7a:ed:5a:e4:a0:99:0e:
13:e5:0f:28:79:a9:26:94:b8:bc:22:e7:fa:58:5e:
6d:9e:0e:5b:81:ff:bc:10:e1:e0:10:7f:af:df:6c:
ea:bd:d2:ad:db:fd:66:73:ee:bf:20:c4:87:3d:35:
f8:fb:b2:5c:85:99:ae:dc:3c:d3:5b:b3:1d:37:3b:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:32:5F:27:44:12:16:7D:DB:C8:53:6E:A6:AE:D2:D4:23:4F:0B:CB
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/FTJfJ0QSFn3byFNupq7S1CNPC8s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
39.1.16.0/20
Signature Algorithm: sha256WithRSAEncryption
96:da:b9:85:c0:4a:32:6e:75:ca:80:53:65:ef:46:75:8f:e5:
4f:e5:db:ea:ef:8a:e5:a9:e2:13:cc:3b:9c:e7:f3:f9:28:45:
d6:89:8a:8f:ab:8d:ba:ee:dd:48:cc:37:6c:46:a2:7d:08:ba:
d8:a0:36:7b:43:dc:a1:28:96:93:5b:cc:7c:e3:67:1d:18:eb:
db:6a:68:69:94:47:a9:a8:e2:16:40:99:49:da:66:7d:57:09:
0f:7e:8f:4f:6a:37:34:c5:e8:e3:a2:a3:ab:88:e7:0d:41:a4:
18:a9:e3:65:b4:c0:0a:f8:9a:f2:79:21:aa:e7:20:37:10:d0:
8c:d9:02:ed:9c:7b:17:d0:1d:7c:93:3d:54:77:03:04:86:f1:
94:95:0d:39:a2:78:47:1b:37:2f:ba:4e:c0:aa:71:b3:b9:0c:
7e:77:87:9e:c6:31:99:51:7f:7d:b7:0b:93:44:0b:f3:7e:1b:
ce:7f:ae:b2:55:d3:01:0d:72:00:82:34:e4:2e:56:8e:78:27:
c3:eb:af:68:84:bb:a2:2e:28:68:be:17:34:43:78:c7:d6:62:
c5:75:aa:1e:76:79:6c:06:aa:15:03:4a:90:4a:b5:d7:70:12:
14:be:be:ad:60:c6:f0:28:78:d8:29:19:55:26:5e:4b:a6:28:
1e:51:40:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:17 2025 by rpki-client