Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/cqFqgXPxZolOEnGfsg-gZJRAeyo.roa
File: cqFqgXPxZolOEnGfsg-gZJRAeyo.roa (raw, json)
Hash identifier: SvpL20b2ch6nn7ZPRibAyR/xtqEY1cCawTQfeUcpX/Q=
Subject key identifier: 72:A1:6A:81:73:F1:66:89:4E:12:71:9F:B2:0F:A0:64:94:40:7B:2A
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0782
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/cqFqgXPxZolOEnGfsg-gZJRAeyo.roa
Signing time: Tue 29 Sep 2020 09:59:21 +0000
ROA not before: Tue 29 Sep 2020 09:59:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18182
IP address blocks: 61.62.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Sep 29 09:59:21 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=72A16A8173F166894E12719FB20FA06494407B2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:fd:fc:b1:25:c8:69:5f:8d:ac:c0:80:76:
8a:fb:0e:14:01:9a:a7:5e:91:6e:02:1e:10:4b:79:
7d:be:99:21:7f:0b:62:d6:8c:43:e8:85:55:b9:04:
87:21:9c:be:99:49:d4:92:e1:21:e0:7a:57:5b:38:
d3:28:60:ac:c2:88:81:41:7f:16:9a:a9:74:0a:d4:
56:e8:27:b0:6d:74:8e:51:8a:56:ae:c2:9c:4c:a5:
c0:b8:92:42:d5:bc:d6:0a:cf:c3:ee:f7:12:9d:6e:
fc:5a:c9:ca:5b:b8:24:4a:4e:30:17:94:50:a9:6b:
e7:22:ee:4d:ac:ab:40:78:2b:88:be:ac:1e:f3:1d:
3c:74:e2:c0:cd:45:22:a1:14:b1:a8:5e:53:66:f2:
7c:14:c2:36:6f:a6:11:42:07:3a:0f:4f:84:87:10:
13:6e:64:0a:d0:c4:1e:3a:75:11:e6:a5:2b:a5:c6:
de:26:1d:d0:be:22:54:42:ed:6e:07:e8:34:1a:0f:
d3:74:3c:ce:05:3d:d7:43:50:0b:7e:20:74:5b:11:
47:46:99:c4:ba:80:d1:57:76:87:95:d0:16:98:a3:
fb:e5:14:89:0d:80:b9:d5:ad:e4:c7:ca:28:e6:4d:
65:4e:2b:1e:4d:16:1f:64:ba:66:b9:56:43:1b:56:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A1:6A:81:73:F1:66:89:4E:12:71:9F:B2:0F:A0:64:94:40:7B:2A
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/cqFqgXPxZolOEnGfsg-gZJRAeyo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.62.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:4f:a5:ab:74:4f:78:c8:5d:9f:fe:c1:da:24:f3:12:df:bf:
98:37:e6:98:ee:d9:e3:91:f5:41:18:20:73:14:11:33:92:5e:
c1:12:17:f5:51:63:99:1d:fa:23:4a:6c:fe:0b:e0:92:d0:af:
02:fd:11:3c:3b:a5:ae:62:4d:b8:77:35:8e:c8:67:27:55:de:
3f:38:0c:30:67:2e:d1:e8:79:03:4f:b9:16:46:7d:48:13:f5:
03:06:05:23:e2:a8:6f:0c:94:e9:f2:91:67:03:8d:3b:91:98:
d2:e6:5f:7a:4f:3f:f1:ce:37:7c:01:0b:39:d8:98:ea:ee:ee:
2a:55:45:70:c7:85:8c:3c:4c:ee:2b:fa:8b:a5:64:94:c1:f4:
82:2a:c2:06:9e:3d:c0:26:8b:09:06:8e:3d:79:f6:b4:53:a0:
9c:0b:99:ca:67:8a:f3:db:5c:aa:2c:47:0c:f5:32:33:64:69:
44:08:f0:68:16:7c:67:3e:97:f4:d5:61:b0:cd:c6:79:31:90:
fc:10:d2:bf:42:e7:14:9e:e3:b2:7d:41:28:20:db:46:be:f3:
12:aa:2c:2b:c8:61:94:f7:cc:94:ca:a4:25:6c:ea:80:af:1e:
0f:8d:8a:9c:f7:9e:e6:09:fe:bd:18:9f:26:f5:c5:c5:50:21:
1f:d8:90:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:16 2025 by rpki-client