Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/1dSUbND3UJ4lBeHY14R_FEuDZ0Y.roa
File: 1dSUbND3UJ4lBeHY14R_FEuDZ0Y.roa (raw, json)
Hash identifier: dSLgOHw9VUSreSDqz7my558cq+tf3XQR+S5Gyi806pk=
Subject key identifier: D5:D4:94:6C:D0:F7:50:9E:25:05:E1:D8:D7:84:7F:14:4B:83:67:46
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0BA9
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/1dSUbND3UJ4lBeHY14R_FEuDZ0Y.roa
Signing time: Thu 15 Sep 2022 02:42:29 +0000
ROA not before: Thu 15 Sep 2022 02:42:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38843
IP address blocks: 124.150.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2985 (0xba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Sep 15 02:42:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D5D4946CD0F7509E2505E1D8D7847F144B836746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:48:39:8f:7c:4a:01:85:e5:03:83:2a:e3:c6:
8a:a5:a5:c1:6a:92:47:94:3f:72:32:40:46:a9:a2:
fc:6f:54:34:ef:5e:cc:b1:be:da:db:31:f3:db:22:
57:c0:5b:0e:4f:cf:7d:51:f4:4b:04:5d:6c:bc:df:
fc:b3:b0:bd:a5:1e:51:35:cd:6b:13:e7:9e:01:03:
65:a6:42:97:1f:30:06:ff:3e:04:f1:35:8f:de:f8:
5a:5a:b1:cf:8f:b2:7a:bc:9c:98:9e:75:22:2c:14:
d4:33:49:53:6d:e3:1c:cd:6b:32:58:ad:c2:1d:ae:
11:82:2c:0b:cf:80:18:7c:76:f1:3d:1a:88:01:26:
fb:a6:49:c2:18:25:25:11:c2:88:59:67:cf:ef:25:
2a:77:5a:47:0d:be:3d:d3:9c:f9:65:15:ad:bd:67:
56:a0:c0:1a:dd:3a:a8:dc:58:7f:f9:5a:81:6b:d6:
c6:f3:7f:a9:7c:dd:62:df:50:67:e0:3e:e2:3d:f5:
a0:62:6d:de:f9:b2:31:b0:28:49:cf:f8:1b:93:b7:
ad:00:3c:a6:f8:bd:21:12:4f:a0:5c:73:77:be:ba:
fe:ee:74:e6:67:48:24:a3:17:f0:3b:64:2e:3c:30:
bc:97:57:30:05:0e:f4:4c:5c:de:d3:56:47:57:3d:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D4:94:6C:D0:F7:50:9E:25:05:E1:D8:D7:84:7F:14:4B:83:67:46
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/1dSUbND3UJ4lBeHY14R_FEuDZ0Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.150.130.0/24
Signature Algorithm: sha256WithRSAEncryption
17:db:4e:a1:95:0c:bc:6b:cf:41:39:7e:0e:74:ec:13:58:6e:
36:a5:83:c0:59:e8:12:83:91:dc:32:56:a8:4c:26:6f:4f:95:
8b:91:e0:df:cd:e0:75:2e:e0:be:76:b5:53:d6:0f:a7:7e:06:
78:5e:cb:56:e9:a6:51:ba:6a:bc:9e:18:a3:14:5a:40:60:e8:
46:b1:cf:3b:5d:e9:d3:62:b2:d7:7d:ea:c7:da:46:cd:ca:22:
51:f7:b5:2b:87:24:32:84:42:cb:39:8e:f0:59:eb:87:82:7c:
2a:0b:ff:6d:e8:d1:51:1f:1a:96:e6:69:96:b0:7b:33:60:81:
7b:6a:16:14:33:f2:53:b1:50:77:cf:06:dd:2c:5f:c7:c3:bb:
7c:30:ab:ef:6e:ab:cb:56:47:27:4d:19:89:f2:41:85:81:65:
6d:2a:87:9e:84:45:54:db:29:11:8f:8b:88:88:ec:71:7f:f6:
78:97:f9:67:e3:d3:7d:7e:f5:1a:81:57:44:c6:b6:84:e2:b0:
74:38:a8:20:6c:1c:7d:56:c6:da:a3:90:5a:88:8d:9a:20:0f:
b9:ee:ae:c1:f0:84:62:22:94:14:5b:d3:e9:13:45:ab:5c:7f:
c9:26:05:ee:05:0a:2a:bf:22:e1:93:b9:54:92:b0:cd:07:fb:
dc:37:58:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org