Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/-1eK2OLzFXlhdbcsLgunj2TtnNI.roa
File: -1eK2OLzFXlhdbcsLgunj2TtnNI.roa (raw, json)
Hash identifier: NxtwjNInx9xJLTjr91oqaMy+oeU95wNKdsZsGKtIpfM=
Subject key identifier: FB:57:8A:D8:E2:F3:15:79:61:75:B7:2C:2E:0B:A7:8F:64:ED:9C:D2
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 098B
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/-1eK2OLzFXlhdbcsLgunj2TtnNI.roa
Signing time: Sun 07 Feb 2021 13:09:34 +0000
ROA not before: Sun 07 Feb 2021 13:09:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38843
IP address blocks: 124.150.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2443 (0x98b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 7 13:09:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FB578AD8E2F315796175B72C2E0BA78F64ED9CD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:13:fe:e0:e8:bc:a6:40:70:2a:3e:40:5e:
5c:c0:08:c2:18:c3:e4:14:bd:d1:00:c0:f4:1c:14:
82:2a:eb:c6:11:3c:11:ab:b5:5d:89:81:3b:8d:19:
cf:72:09:17:14:dc:b3:5a:65:93:db:7b:d0:6d:00:
9b:39:08:aa:7f:d2:da:c1:00:21:8e:9c:93:b0:9a:
66:d8:1b:4f:96:e5:e1:44:fd:27:4d:2e:38:87:64:
03:cf:bf:49:0d:03:c7:f8:a3:86:f5:04:c1:bc:ab:
55:dd:78:ad:d3:a5:28:0c:04:26:cc:1d:19:21:8b:
28:c8:7e:c2:d5:76:24:25:8d:7e:61:a7:bd:37:89:
b8:af:37:c0:18:ca:db:af:14:0c:14:c1:dd:c1:04:
16:b0:ad:a7:d1:8b:9e:2c:4c:b3:8b:fd:ee:e2:fb:
35:2d:8d:95:92:1e:3d:12:f1:1f:7c:e0:de:82:4c:
f7:f5:aa:25:ce:f6:7c:b4:3c:7f:c3:6f:51:5b:35:
9c:a2:8f:6f:83:60:12:ad:78:fc:0c:07:7b:b4:59:
2d:e6:96:e8:63:f1:d4:eb:f8:98:a1:47:2a:81:b1:
e3:75:67:2b:33:3c:88:60:5f:24:7d:2e:99:a3:94:
bd:0f:89:82:d2:75:0a:49:8e:5c:12:f6:58:8d:67:
fa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:57:8A:D8:E2:F3:15:79:61:75:B7:2C:2E:0B:A7:8F:64:ED:9C:D2
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/-1eK2OLzFXlhdbcsLgunj2TtnNI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.150.135.0/24
Signature Algorithm: sha256WithRSAEncryption
05:86:62:52:b8:1a:35:27:95:97:6a:6e:31:d8:8c:00:6f:11:
46:8b:bb:01:bc:37:1e:36:53:5e:6c:32:c8:e2:0e:a2:bb:b1:
b0:ba:c7:81:88:96:a5:f1:26:97:a9:79:56:9c:6b:aa:8b:36:
b3:3b:c2:9a:18:7b:7b:17:b3:0b:bb:f6:31:c5:36:01:1d:f4:
24:75:19:af:f2:17:ae:84:0e:f5:a1:5c:ba:db:d6:53:9f:60:
ab:ad:51:07:ca:5a:0c:41:2a:59:b5:96:e6:95:54:98:7f:12:
63:3f:61:27:61:fb:97:78:17:44:83:82:c9:8e:51:55:46:af:
a7:7c:4c:d3:14:46:c8:08:1c:b6:62:e3:bb:68:b5:68:67:fe:
b3:54:99:ad:4e:ac:4b:ef:c7:15:06:13:e4:05:c5:3f:51:07:
c1:d0:6d:cb:26:60:d6:d0:ed:51:b4:d8:7c:85:82:6a:dc:5a:
31:cd:c0:c1:e2:48:b5:26:c1:fd:e7:9c:da:be:ec:29:ec:a7:
71:5c:ad:ef:79:7d:6b:4f:e3:f2:d8:35:5c:58:37:a4:b0:8e:
f3:f9:8c:6d:f2:69:d8:32:19:7f:c6:1c:d1:50:bc:1c:85:68:
06:c6:8f:f2:7d:d1:2e:4f:1c:82:92:5c:98:21:bf:ee:32:06:
e7:3b:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org