Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/uJb9iotMzqvziqpcWUzZ01Vit_s.roa
File: uJb9iotMzqvziqpcWUzZ01Vit_s.roa (raw, json)
Hash identifier: g5r5uIFVDMv7dvYWycONdJd0buf/VoqDjvATKECDqzE=
Subject key identifier: B8:96:FD:8A:8B:4C:CE:AB:F3:8A:AA:5C:59:4C:D9:D3:55:62:B7:FB
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 077C
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/uJb9iotMzqvziqpcWUzZ01Vit_s.roa
Signing time: Tue 29 Sep 2020 09:59:19 +0000
ROA not before: Tue 29 Sep 2020 09:59:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 32787
IP address blocks: 27.105.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1916 (0x77c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Sep 29 09:59:19 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B896FD8A8B4CCEABF38AAA5C594CD9D35562B7FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:a2:bb:2e:37:8b:42:92:36:68:39:aa:76:
17:3f:8d:ee:bf:c3:3a:ea:eb:ca:b8:da:11:c8:be:
04:b8:c8:dd:49:31:a6:3d:6a:93:5f:39:e3:75:e8:
95:9f:e1:d1:32:2f:9e:b9:3e:0e:7b:06:7f:01:bb:
0c:bb:79:96:a2:ea:30:a4:36:dc:6b:0b:bd:3f:e0:
af:af:8b:55:74:ac:c6:00:91:73:70:4a:90:cd:d4:
36:23:29:ea:2a:32:46:e5:dc:c8:07:de:ce:9e:27:
6c:6d:bb:78:b0:01:7a:b7:34:10:f2:8c:c7:0a:96:
5f:7a:4b:09:25:0d:78:c5:b3:f2:a4:83:09:16:89:
7c:50:7e:cd:04:2e:f9:dd:1f:6a:6c:7e:4f:ab:09:
05:39:de:52:9b:f3:49:63:fa:18:f9:2f:f7:bb:d2:
81:96:ae:e0:8e:52:b4:23:f1:7d:9b:c3:1c:cf:29:
52:91:a4:88:be:e9:f3:34:c8:5e:78:15:2a:d1:ea:
8d:5a:fa:e7:e4:82:a7:de:3c:cc:a1:11:27:9a:59:
c3:a9:36:dc:05:e8:02:3c:49:52:89:12:67:84:e8:
3c:46:1c:da:fa:ee:51:59:c1:58:57:bf:a7:51:6a:
f2:7b:80:54:d8:94:34:b4:a0:b4:fd:9e:e6:3b:34:
a1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:96:FD:8A:8B:4C:CE:AB:F3:8A:AA:5C:59:4C:D9:D3:55:62:B7:FB
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/uJb9iotMzqvziqpcWUzZ01Vit_s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.105.82.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:31:d3:ac:ba:62:16:e9:fb:51:c5:b3:2f:79:e5:90:83:a8:
36:30:d4:ba:a1:fd:8f:26:bb:19:37:c5:6d:cc:b4:e0:92:60:
ec:5c:51:1e:37:06:8a:9e:e6:21:e3:cc:93:f9:82:c6:4d:d8:
0d:8b:9d:8b:86:ee:1e:1a:40:92:61:91:f3:70:95:76:72:45:
e0:64:68:75:ee:50:04:27:8b:2d:a1:13:59:32:82:2d:30:14:
19:4e:5f:82:c8:bf:cd:ec:f4:24:74:17:f1:35:cd:0d:51:16:
3b:75:a5:f4:55:82:56:e6:30:26:a0:4e:a7:2d:12:c7:65:a9:
f0:af:38:4c:3d:70:40:51:8b:c6:db:32:b4:2c:ac:b9:e5:11:
9d:c9:6c:77:1f:fe:37:8d:0c:fd:de:6a:b8:35:31:86:15:7e:
83:b7:10:2b:17:e0:42:94:41:84:12:32:00:ab:54:c8:de:2c:
84:91:10:9d:ca:3d:a8:ff:67:69:c4:0b:6a:1a:a4:31:68:9b:
84:28:03:98:2e:a3:f4:1a:61:e1:fa:61:a0:a1:6f:7e:50:f9:
b2:bd:76:d8:01:00:05:d0:47:10:0a:e2:93:8f:5a:9a:a1:05:
ed:4d:df:c4:9e:c3:bd:07:f8:c4:3f:a8:e7:19:9b:d1:d4:e6:
9b:ef:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org