Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/iuqUq5p7Fk7GkLGScXO1UKfZUoA.roa
File: iuqUq5p7Fk7GkLGScXO1UKfZUoA.roa (raw, json)
Hash identifier: rzImA2CNV2/nvPJfDfrkHzaqX14eF20z0U+E643Rr1s=
Subject key identifier: 8A:EA:94:AB:9A:7B:16:4E:C6:90:B1:92:71:73:B5:50:A7:D9:52:80
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 097A
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/iuqUq5p7Fk7GkLGScXO1UKfZUoA.roa
Signing time: Wed 29 Sep 2021 02:51:53 +0000
ROA not before: Wed 29 Sep 2021 02:51:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18182
IP address blocks: 39.1.0.0/16 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2426 (0x97a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Sep 29 02:51:53 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8AEA94AB9A7B164EC690B1927173B550A7D95280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:41:85:c1:30:3b:b2:64:e7:43:22:d6:15:
89:b8:a0:0e:3d:a2:f2:f5:a8:af:60:fc:77:1d:c8:
8c:d1:ee:3e:21:45:03:cf:f4:82:40:da:14:3c:f5:
b1:32:87:24:d2:ee:7b:bd:51:44:86:66:65:3f:14:
4e:e0:ef:dd:24:34:79:d2:45:a6:75:81:3c:bb:da:
b8:9c:58:22:51:2b:14:47:92:cb:65:69:a2:59:01:
4c:0d:c2:9b:30:0b:22:90:e0:08:47:37:d9:e3:a0:
e7:22:5c:d4:7f:22:09:26:b4:d1:c2:b5:41:5e:e1:
b1:ad:53:22:98:01:26:8b:9c:8b:32:83:42:ec:bd:
a7:a5:14:c5:d2:2e:cf:32:62:32:d6:5d:fc:87:d2:
dc:32:34:12:4b:51:8e:ac:dc:57:8e:91:d0:f9:90:
a5:1b:96:9b:c7:55:ed:37:b2:0d:3a:6a:9c:8f:44:
a3:11:1f:a6:5b:61:bb:d1:66:94:51:8b:05:e8:59:
71:50:fd:7e:f3:03:e8:f3:1c:56:c2:1d:7c:20:69:
13:97:10:c8:30:c6:e2:4c:dc:68:fa:cf:5d:30:1e:
bb:1a:d9:17:af:23:f5:d1:fc:27:34:ee:6f:a6:b4:
e1:4e:b0:27:6d:38:d4:60:6a:7c:4b:e0:68:2f:a0:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EA:94:AB:9A:7B:16:4E:C6:90:B1:92:71:73:B5:50:A7:D9:52:80
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/iuqUq5p7Fk7GkLGScXO1UKfZUoA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
39.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:ca:0a:b3:e8:24:f0:7c:35:05:19:92:11:42:2a:c5:5e:db:
d4:c1:92:39:c7:e7:12:86:13:58:ac:aa:65:4c:2f:39:e5:18:
1b:12:ba:4e:66:15:0a:83:74:54:c9:0b:fc:d1:10:0f:34:83:
86:45:8b:b7:92:bd:2a:87:37:55:78:33:f5:02:f8:d2:d4:16:
e9:c8:f4:d9:f8:67:03:27:6b:96:ed:c0:ad:1c:67:39:75:c3:
f3:d4:73:ff:f4:7d:2e:96:05:9c:22:f9:93:7e:6a:c2:8e:83:
98:7e:61:e9:c0:46:d9:3b:66:3c:9b:bc:14:36:8f:27:5f:f0:
67:84:20:85:e4:19:28:22:12:fe:af:0a:72:e8:76:36:4f:ba:
95:70:1a:22:81:77:b5:e4:43:f8:8f:97:5d:8d:d8:20:91:ae:
28:d2:9d:4b:c3:9b:60:5b:39:90:c2:a5:f3:cf:03:90:bf:2e:
2d:1d:13:d0:96:83:e4:70:d3:89:0c:c3:88:76:24:36:d9:5b:
6e:62:ff:25:e1:6f:f5:60:22:1d:32:c7:e4:35:2d:09:0b:e2:
e8:b7:e1:8a:d4:3a:f1:d3:6a:7d:d5:8e:55:ad:f6:f5:57:f9:
1f:09:c5:d3:c2:8b:a9:9c:b5:a2:67:26:97:4b:0d:a9:80:2e:
be:96:74:1f
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICCXowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC
NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yMTA5Mjkw
MjUxNTNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDhBRUE5NEFCOUE3QjE2
NEVDNjkwQjE5MjcxNzNCNTUwQTdEOTUyODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmjEGFwTA7smTnQyLWFYm4oA49ovL1qK9g/HcdyIzR7j4hRQPP
9IJA2hQ89bEyhyTS7nu9UUSGZmU/FE7g790kNHnSRaZ1gTy72ricWCJRKxRHkstl
aaJZAUwNwpswCyKQ4AhHN9njoOciXNR/IgkmtNHCtUFe4bGtUyKYASaLnIsyg0Ls
vaelFMXSLs8yYjLWXfyH0twyNBJLUY6s3FeOkdD5kKUblpvHVe03sg06apyPRKMR
H6ZbYbvRZpRRiwXoWXFQ/X7zA+jzHFbCHXwgaROXEMgwxuJM3Gj6z10wHrsa2Rev
I/XR/Cc07m+mtOFOsCdtONRganxL4GgvoKFtAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUiuqUq5p7Fk7GkLGScXO1UKfZUoAwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5
B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv
ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9pdXFVcTVwN0ZrN0drTEdTY1hP
MVVLZlpVb0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAJwEw
DQYJKoZIhvcNAQELBQADggEBADXKCrPoJPB8NQUZkhFCKsVe29TBkjnH5xKGE1is
qmVMLznlGBsSuk5mFQqDdFTJC/zREA80g4ZFi7eSvSqHN1V4M/UC+NLUFunI9Nn4
ZwMna5btwK0cZzl1w/PUc//0fS6WBZwi+ZN+asKOg5h+YenARtk7ZjybvBQ2jydf
8GeEIIXkGSgiEv6vCnLodjZPupVwGiKBd7XkQ/iPl12N2CCRrijSnUvDm2BbOZDC
pfPPA5C/Li0dE9CWg+Rw04kMw4h2JDbZW25i/yXhb/VgIh0yx+Q1LQkL4ui34YrU
OvHTan3VjlWt9vVX+R8JxdPCi6mctaJnJpdLDamALr6WdB8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:08 2025 by rpki-client