Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/bcCrmFJwY1xJM5DlTp2iHPL3hYo.roa
File: bcCrmFJwY1xJM5DlTp2iHPL3hYo.roa (raw, json)
Hash identifier: 6JKA8OgNyKowQzplwkZqjTW45MqgeENTKayHPRx2rH8=
Subject key identifier: 6D:C0:AB:98:52:70:63:5C:49:33:90:E5:4E:9D:A2:1C:F2:F7:85:8A
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0A6C
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/bcCrmFJwY1xJM5DlTp2iHPL3hYo.roa
Signing time: Thu 15 Sep 2022 02:49:21 +0000
ROA not before: Thu 15 Sep 2022 02:49:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18182
IP address blocks: 61.62.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2668 (0xa6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Sep 15 02:49:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6DC0AB985270635C493390E54E9DA21CF2F7858A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:f9:9e:61:85:3c:cb:67:a0:ef:ca:19:52:
81:bb:3d:09:2e:e6:24:87:3b:34:90:c3:b0:0d:c9:
7d:15:ab:17:5c:c1:33:43:39:04:53:a8:d7:dc:1a:
5a:4f:d6:7f:49:21:cd:0c:1a:20:79:67:13:9c:c2:
ac:30:af:e0:1e:18:18:43:10:81:e9:ed:de:8e:e1:
b2:de:ea:3d:fb:18:de:5e:17:72:1d:af:05:c3:80:
87:6d:d9:35:dd:c2:f2:f7:b9:eb:da:88:d4:c8:7e:
b1:7f:9f:83:90:c4:fb:e4:45:85:af:cf:de:82:f1:
01:a6:0a:90:74:cb:6c:e5:ae:c4:fb:98:b2:50:4f:
56:e8:eb:92:b8:14:9d:f6:de:81:d7:64:33:f9:9f:
4f:18:ca:94:55:94:68:6e:7b:8d:30:1b:30:da:05:
f8:3a:23:40:de:6c:aa:bb:2f:62:da:d3:05:74:9b:
cb:67:cd:21:32:6c:52:6d:4e:54:06:d5:5e:d6:92:
c6:9f:4c:cd:07:49:34:6b:da:e4:1f:9a:b3:54:f4:
84:e3:ab:67:89:24:a2:66:9b:08:26:61:86:2c:f7:
c1:3f:80:81:9d:ae:53:35:c8:cb:6a:e2:b8:de:66:
0f:5c:65:d1:cf:2c:e8:c8:fc:f7:39:bc:de:e4:df:
d5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C0:AB:98:52:70:63:5C:49:33:90:E5:4E:9D:A2:1C:F2:F7:85:8A
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/bcCrmFJwY1xJM5DlTp2iHPL3hYo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.62.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:a9:02:96:67:21:bd:fc:68:eb:08:90:95:56:57:8e:66:76:
54:b3:28:90:54:47:5e:33:ae:bb:9a:56:d6:33:f2:5d:c8:91:
62:df:d8:c9:5a:4f:a5:0f:30:48:63:65:07:ad:59:1d:ec:f4:
4d:f2:fe:54:9d:ef:fb:00:b5:35:59:3d:ba:29:3d:29:b6:85:
e3:de:58:19:c9:20:f6:0f:41:79:56:cc:dd:e2:c1:4d:0a:c7:
4a:c6:18:fb:0b:58:59:1d:d2:1e:b8:2b:1b:b9:0b:37:06:d1:
4e:82:fc:7f:5c:e2:d8:40:ff:5d:2f:68:0f:8a:9f:9f:36:fd:
cf:b6:d8:ee:48:88:12:f8:08:26:96:50:9d:a5:4d:df:35:99:
7a:4d:63:70:16:67:0d:aa:ff:bb:34:b3:f3:47:5c:e6:a0:66:
69:9f:61:5a:96:8e:33:fc:5f:b2:58:72:b3:8d:a9:7e:34:3e:
5e:f2:94:dd:75:0c:18:12:dc:ca:4f:6d:1f:7d:8d:5f:cc:b4:
87:8d:0d:0b:17:ba:df:18:93:0c:0a:a3:46:16:d0:05:33:38:
7d:ea:9a:75:14:97:f3:b9:59:15:22:af:d4:db:ae:e4:e0:f5:
ac:ba:6e:26:0b:d6:e7:5b:60:f2:61:8a:2d:23:d6:f1:70:d3:
c3:50:94:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org