Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/j1nTDkJOaOIphbNl-4tsHtF0ufI.roa
File: j1nTDkJOaOIphbNl-4tsHtF0ufI.roa (raw, json)
Hash identifier: thAsJgtk+u7Mm0+FZIigMIDkuPjMO6jAFI8dSNgBNCo=
Subject key identifier: 8F:59:D3:0E:42:4E:68:E2:29:85:B3:65:FB:8B:6C:1E:D1:74:B9:F2
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0978
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/j1nTDkJOaOIphbNl-4tsHtF0ufI.roa
Signing time: Wed 29 Sep 2021 02:51:52 +0000
ROA not before: Wed 29 Sep 2021 02:51:52 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18182
IP address blocks: 61.64.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2424 (0x978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Sep 29 02:51:52 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8F59D30E424E68E22985B365FB8B6C1ED174B9F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:6c:e8:19:9b:82:fe:67:7b:70:74:a5:38:
c0:03:98:57:f4:ed:77:31:8b:88:9c:09:fd:39:4c:
16:19:e0:aa:0f:d9:55:89:5c:60:6f:da:c1:29:75:
38:ba:af:05:cc:49:a5:35:ac:2a:29:27:0a:85:21:
5b:1d:51:dc:bb:95:17:5d:1e:9d:f4:a1:4e:b4:3c:
67:e7:3e:f0:36:ac:88:84:da:7b:7a:ef:a0:28:f8:
f5:54:09:30:31:b8:83:7e:15:40:9d:0d:26:9f:27:
c0:5e:00:ca:f3:d5:7d:12:f3:1a:1c:e4:ca:51:a4:
12:60:e7:f1:fe:3e:65:26:c7:bb:2d:ff:ae:ba:9b:
0a:32:01:78:b9:17:1c:86:a9:b2:2a:17:b9:c2:ac:
e0:60:0d:e7:9e:58:61:99:ee:bc:de:cd:77:7a:cd:
b9:a6:3e:e2:f1:c1:0a:bf:41:97:a3:ee:e7:21:06:
6c:bd:cb:b4:6c:2b:30:ce:a4:33:e9:69:2a:7b:64:
80:b3:4a:19:a4:20:94:f5:4b:a1:e3:ae:a6:bc:64:
9b:56:a9:02:61:1d:01:28:70:0a:bd:94:1a:b7:b4:
08:41:e7:fb:91:48:c3:6d:66:f6:88:4b:a6:e0:74:
15:31:3e:b2:18:b1:d1:43:20:75:2b:1e:f8:95:cf:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:59:D3:0E:42:4E:68:E2:29:85:B3:65:FB:8B:6C:1E:D1:74:B9:F2
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/j1nTDkJOaOIphbNl-4tsHtF0ufI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a7:37:ee:ce:69:c0:ed:3d:c3:71:80:f7:a3:8a:0b:84:67:8b:
34:ff:49:f1:08:cc:da:2e:f9:bb:2b:24:d5:a8:01:cf:89:60:
47:85:7a:db:0b:af:d8:3a:41:97:d4:c2:7c:02:9d:20:24:88:
f9:8c:d3:6f:34:56:0e:fb:46:78:c3:27:2d:b9:37:12:3a:12:
2b:34:44:8e:19:c8:7a:37:93:88:28:8f:bf:46:17:19:37:db:
1b:ef:fe:18:7e:20:7c:2c:6c:f2:7e:1b:80:77:41:6e:ae:b6:
29:38:0d:7f:18:7b:8d:08:fc:ee:b4:a2:54:6b:5c:b2:8d:e4:
55:c7:a0:cf:29:ae:45:97:03:49:9c:4b:8d:1a:85:a0:9b:25:
72:c3:82:fc:48:8d:fe:ec:56:d3:03:f9:d2:63:9f:3e:01:bb:
52:92:7c:e7:00:d2:93:b6:3e:2d:f8:2d:a3:d5:bd:d8:ef:d3:
f1:ca:69:f1:73:5f:79:9b:0c:a8:e9:4e:cd:02:fa:4b:d1:17:
fa:b1:ce:41:e5:01:3f:b3:f9:d3:fc:08:68:b6:9d:71:e0:58:
67:48:44:4c:a1:59:df:51:29:ed:61:10:f2:07:56:63:8f:c9:
94:04:92:c1:f4:1f:e0:57:00:d2:e8:89:a3:1e:86:f1:87:13:
7f:ea:b7:ed
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC
NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yMTA5Mjkw
MjUxNTJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDhGNTlEMzBFNDI0RTY4
RTIyOTg1QjM2NUZCOEI2QzFFRDE3NEI5RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCobmzoGZuC/md7cHSlOMADmFf07Xcxi4icCf05TBYZ4KoP2VWJ
XGBv2sEpdTi6rwXMSaU1rCopJwqFIVsdUdy7lRddHp30oU60PGfnPvA2rIiE2nt6
76Ao+PVUCTAxuIN+FUCdDSafJ8BeAMrz1X0S8xoc5MpRpBJg5/H+PmUmx7st/666
mwoyAXi5FxyGqbIqF7nCrOBgDeeeWGGZ7rzezXd6zbmmPuLxwQq/QZej7uchBmy9
y7RsKzDOpDPpaSp7ZICzShmkIJT1S6Hjrqa8ZJtWqQJhHQEocAq9lBq3tAhB5/uR
SMNtZvaIS6bgdBUxPrIYsdFDIHUrHviVz+lxAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUj1nTDkJOaOIphbNl+4tsHtF0ufIwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5
B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv
ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9qMW5URGtKT2FPSXBoYk5sLTR0
c0h0RjB1Zkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHPUCA
MA0GCSqGSIb3DQEBCwUAA4IBAQCnN+7OacDtPcNxgPejiguEZ4s0/0nxCMzaLvm7
KyTVqAHPiWBHhXrbC6/YOkGX1MJ8Ap0gJIj5jNNvNFYO+0Z4wyctuTcSOhIrNESO
Gch6N5OIKI+/RhcZN9sb7/4YfiB8LGzyfhuAd0FurrYpOA1/GHuNCPzutKJUa1yy
jeRVx6DPKa5FlwNJnEuNGoWgmyVyw4L8SI3+7FbTA/nSY58+AbtSknznANKTtj4t
+C2j1b3Y79Pxymnxc195mwyo6U7NAvpL0Rf6sc5B5QE/s/nT/Ahotp1x4FhnSERM
oVnfUSntYRDyB1Zjj8mUBJLB9B/gVwDS6ImjHobxhxN/6rft
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org