Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/1UHpwT-nl8vXU_2pR0K4pDZS2no.roa
File: 1UHpwT-nl8vXU_2pR0K4pDZS2no.roa (raw, json)
Hash identifier: Wo5Lna5laKm6DWDB55nhvrPD0L5V+vlnPUt1DGaWHj8=
Subject key identifier: D5:41:E9:C1:3F:A7:97:CB:D7:53:FD:A9:47:42:B8:A4:36:52:DA:7A
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 095F
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/1UHpwT-nl8vXU_2pR0K4pDZS2no.roa
Signing time: Sun 07 Feb 2021 13:08:55 +0000
ROA not before: Sun 07 Feb 2021 13:08:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 198949
IP address blocks: 223.27.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2399 (0x95f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 7 13:08:55 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D541E9C13FA797CBD753FDA94742B8A43652DA7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:9f:89:75:86:2b:13:dc:a3:80:74:fc:d4:
73:7e:43:37:f2:e9:fc:d1:01:6e:c8:4c:3e:7f:00:
85:fa:87:17:4f:4c:bc:40:c6:63:93:ce:3f:21:c6:
da:31:f2:d7:69:ec:b0:1a:90:10:78:4f:da:6d:be:
bc:54:9e:d8:e1:2c:da:65:e5:fd:08:7a:2d:76:46:
7e:e0:3a:ba:03:1c:10:cb:bf:9b:fa:b0:5c:0a:47:
7c:b5:f0:11:42:d5:7d:fa:63:0a:3d:94:10:00:95:
51:2c:48:e8:1e:fb:cf:4f:74:cc:ce:3d:b7:31:35:
30:65:c8:68:c6:b8:bd:18:ad:1f:90:bf:6e:77:83:
ae:30:a2:37:2d:a3:20:6e:22:5c:b8:68:09:26:c1:
4b:2f:87:b9:dd:5c:f3:29:5a:db:3a:d5:9b:6d:94:
95:74:50:d4:c1:4f:4c:47:ce:38:4d:e5:3c:cd:c6:
83:e6:23:d2:cb:b8:6c:df:ad:37:ad:54:d7:88:2e:
55:65:d9:96:61:f6:23:0c:8d:91:29:26:5d:63:fb:
7d:45:89:20:3f:17:66:15:d4:27:4d:35:13:f6:55:
80:1c:78:cd:f8:8a:0d:e5:04:c6:ce:21:da:30:76:
02:a3:b4:9e:d0:6f:2c:fb:25:d0:30:05:f6:da:06:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:41:E9:C1:3F:A7:97:CB:D7:53:FD:A9:47:42:B8:A4:36:52:DA:7A
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/1UHpwT-nl8vXU_2pR0K4pDZS2no.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.33.0/24
Signature Algorithm: sha256WithRSAEncryption
37:51:84:02:ea:20:d4:e0:f3:69:88:c4:41:73:14:32:8d:c5:
64:c9:f2:4e:5d:86:71:53:3a:58:3d:57:71:f7:db:27:69:f5:
2a:e3:2a:45:f5:a2:91:39:a0:b9:35:1e:a7:86:cc:35:a4:87:
bf:a6:6b:01:98:10:e0:9e:65:1a:5a:25:ee:ea:1a:36:64:b7:
ef:45:60:76:4c:77:33:f2:60:f7:f2:39:0f:68:cd:e9:a3:33:
28:cf:69:d4:41:58:ae:da:fd:7d:f8:cc:06:65:23:36:8a:14:
08:06:da:81:31:f7:e2:55:de:62:27:6e:ef:e7:0e:fa:f4:5f:
a7:06:ef:2e:e5:7e:ec:db:77:b2:31:cd:cb:ea:50:27:d3:f7:
3f:e2:d4:09:3d:e2:f8:33:05:b4:ff:e0:a9:6f:21:66:c4:69:
8d:c2:93:db:6e:8b:b5:4c:3c:7d:27:f7:28:84:f5:cf:e1:cc:
c0:b4:45:56:10:16:44:f2:5d:6e:82:f4:2a:07:65:e0:dc:ae:
52:16:23:fa:8b:3b:96:53:05:02:35:ff:26:2c:8d:cb:8e:ba:
40:cd:c3:91:43:b6:fb:8e:1d:03:37:46:c9:cf:02:57:b0:f4:
50:fc:84:2c:84:47:66:14:29:7b:29:b6:26:32:92:39:22:2a:
9a:4e:b6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:03 2023 by rpki-client on console-ams.rpki-client.org