Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/0kLGHrO3JgvXFEHsA4nviB-BZ0c.roa
File: 0kLGHrO3JgvXFEHsA4nviB-BZ0c.roa (raw, json)
Hash identifier: ijlCXaeZeR2iDf8VRsS1sHlQpB64yhLWUCNHL7PArh8=
Subject key identifier: D2:42:C6:1E:B3:B7:26:0B:D7:14:41:EC:03:89:EF:88:1F:81:67:47
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 097B
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/0kLGHrO3JgvXFEHsA4nviB-BZ0c.roa
Signing time: Sun 07 Feb 2021 13:09:20 +0000
ROA not before: Sun 07 Feb 2021 13:09:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 198949
IP address blocks: 223.27.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2427 (0x97b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 7 13:09:20 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D242C61EB3B7260BD71441EC0389EF881F816747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e2:f7:25:25:8f:9b:00:96:aa:7a:8e:a3:ae:
bc:ef:fd:d8:c3:45:97:1b:25:fb:13:de:db:cc:4e:
da:67:6e:7c:fe:84:04:93:0a:df:b6:db:94:c6:96:
4b:a0:25:b1:92:6d:3d:49:ab:ea:c3:73:4b:60:72:
20:8a:8c:aa:00:a2:cf:13:f8:91:ed:55:0c:f4:63:
4b:9c:f1:55:f6:a4:26:83:87:5b:2b:fb:c1:68:e5:
d9:d3:eb:a0:71:61:13:80:a3:69:dd:3b:8d:4a:f8:
95:3b:2e:d0:a3:80:15:5d:f2:9f:19:0f:ee:de:f2:
f3:f4:78:f6:54:fd:f9:7d:c4:0e:4f:83:80:6e:33:
7e:80:f4:b9:bb:06:4c:44:e2:5f:c3:43:06:ea:91:
9b:ac:4f:dd:c3:37:f5:07:91:96:fe:e0:13:ac:ad:
c8:c2:5e:2a:18:de:12:1d:12:3c:8f:49:95:a6:14:
38:2e:72:36:e9:97:c1:0c:43:09:cb:57:b8:5f:03:
c2:bc:85:ab:50:67:98:b3:74:14:6e:c3:74:73:4f:
a5:ba:41:a7:22:23:e9:09:89:f4:3b:38:9f:0c:31:
92:20:b0:81:53:96:97:d9:b9:84:ed:2d:fa:6a:57:
18:d5:e5:5d:8b:30:b5:12:44:60:63:04:02:b5:75:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:42:C6:1E:B3:B7:26:0B:D7:14:41:EC:03:89:EF:88:1F:81:67:47
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/0kLGHrO3JgvXFEHsA4nviB-BZ0c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:9d:4d:fa:1f:57:b0:12:2e:85:95:87:69:ae:ce:dd:67:00:
d5:25:cb:51:1d:32:4d:8c:61:e6:53:e5:11:5b:c3:e6:8d:18:
c6:ac:8c:73:8e:3e:93:39:8d:e7:0e:a6:e7:75:28:3d:98:62:
e4:82:b3:cc:79:e4:fe:4c:c4:f4:92:7a:ba:d9:90:e2:f2:fb:
70:83:9c:16:a8:11:a9:9a:f5:99:3b:f5:49:e6:4a:78:2f:c8:
e7:1c:29:ba:84:73:65:85:33:fb:d7:2e:ac:10:82:52:5c:48:
4e:6e:34:a6:c5:af:cb:94:e4:b2:e3:44:71:c9:b7:2b:71:c7:
6e:17:65:90:94:9f:7b:e5:31:b2:9e:de:6f:c0:71:b7:04:a9:
85:4a:19:2f:63:ec:21:96:18:4d:f9:c4:fe:bf:bc:ae:83:0f:
7c:c5:65:f4:bd:30:2f:7d:e8:4d:44:9f:da:fc:21:aa:ce:f4:
04:32:6a:f8:dc:10:f7:2e:52:ca:c7:6f:82:ff:51:98:c7:44:
a1:0c:3c:2c:eb:ad:9d:72:c0:5d:9b:6d:9a:d0:cd:35:f8:2a:
a9:46:cc:8b:5a:d7:a6:6e:32:3b:3a:8c:ec:d3:80:da:e8:34:
d5:17:27:bd:00:3e:f1:5e:00:56:46:c8:50:48:33:07:bd:4f:
d5:fd:5a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org