Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/d4fd3VDwiRatmJ-CTSPnKlDqHQc.roa
File: d4fd3VDwiRatmJ-CTSPnKlDqHQc.roa (raw, json)
Hash identifier: YJtAUA0SzcdEvk7QneJqhx27++ZwNa1940pVRKJsq+Q=
Subject key identifier: 77:87:DD:DD:50:F0:89:16:AD:98:9F:82:4D:23:E7:2A:50:EA:1D:07
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0A6C
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/d4fd3VDwiRatmJ-CTSPnKlDqHQc.roa
Signing time: Thu 15 Sep 2022 02:49:21 +0000
ROA not before: Thu 15 Sep 2022 02:49:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 32787
IP address blocks: 27.105.82.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2668 (0xa6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Sep 15 02:49:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7787DDDD50F08916AD989F824D23E72A50EA1D07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8e:fc:8d:c0:10:7e:3d:00:85:df:fc:b5:25:
e9:56:50:4b:f2:c9:44:28:06:98:6d:2a:5b:b8:bc:
8b:3e:5d:7d:84:55:3a:3d:bd:85:b6:01:f7:fb:50:
cd:05:f3:8f:f2:77:f9:80:86:a1:79:4c:bd:aa:60:
6c:a6:6f:dd:c9:31:4f:3e:00:81:8a:e9:02:3e:fb:
1b:34:43:0c:9e:b3:1a:94:1a:d0:84:2e:d8:3e:ef:
44:da:10:df:3e:06:52:85:0b:df:33:dd:37:08:2f:
08:3e:e0:ac:45:3c:02:e6:a2:90:9f:6e:ad:a1:9e:
a4:a3:31:fb:ac:37:8d:6f:13:97:d8:4c:9d:39:97:
3d:1d:87:01:f9:f5:fe:b5:82:c3:bf:ab:11:49:f3:
0e:74:46:40:04:2f:23:a9:46:c9:91:d4:11:7e:bf:
2a:96:cb:f7:d3:7a:01:5d:a7:f3:2a:7e:12:ea:25:
ed:09:07:c0:85:58:9e:31:7b:0c:0a:71:6d:6e:32:
8f:1b:2b:2e:6a:f5:02:7d:ff:57:61:2c:db:98:ab:
bb:54:93:c9:41:2a:e9:15:44:5c:e0:74:a9:cb:25:
5c:28:ff:b8:74:10:7b:b2:ac:42:02:2a:0f:3f:43:
0a:2e:11:b4:b5:61:7e:e8:0f:46:a7:14:f5:81:0e:
e7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:87:DD:DD:50:F0:89:16:AD:98:9F:82:4D:23:E7:2A:50:EA:1D:07
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/d4fd3VDwiRatmJ-CTSPnKlDqHQc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.105.82.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a4:01:ad:69:0f:ad:9d:19:eb:42:10:ef:a2:dd:83:d2:87:
f3:28:de:e7:d7:66:e1:23:df:2d:bb:be:17:3a:4f:44:d2:ff:
72:52:18:ab:74:d1:56:96:7c:fd:1b:77:d5:94:d3:ed:8f:0f:
da:3b:da:2f:6b:72:0a:4a:c1:37:7d:1d:d2:c8:d6:b6:6a:03:
a5:0f:22:1c:1a:2e:58:0f:bf:3c:8c:86:3e:19:c8:d8:f9:fd:
51:cd:62:30:83:b1:6d:c0:26:dd:7b:52:c1:f3:0f:c2:18:c8:
43:75:9d:35:87:4a:91:df:05:6f:4e:ad:32:9c:df:e5:99:5c:
ad:63:4e:d6:41:95:8d:39:2e:7f:61:fb:43:fd:a9:a5:4c:ec:
c6:ce:ae:95:6d:00:4a:0c:ac:89:e7:ee:8c:de:e9:76:bd:de:
cf:8b:05:e1:bf:26:82:7b:9b:cc:75:0b:be:9e:89:7a:85:ba:
e6:49:fd:6a:ca:44:1f:b0:63:97:4b:c1:a3:8e:dc:71:e3:fd:
11:00:10:b2:01:0e:18:8a:e0:e0:13:96:5d:bb:47:33:33:39:
22:73:6c:d2:61:bd:11:4f:c7:3d:64:14:f9:11:9e:e4:1b:7d:
ff:80:cc:f9:86:51:a3:57:cd:a5:81:e5:0a:f1:73:61:9d:30:
dd:7c:d8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:48 2025 by rpki-client