Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/3c2Z3_GaDWrejCSLdzHB_0uTx9k.roa
File: 3c2Z3_GaDWrejCSLdzHB_0uTx9k.roa (raw, json)
Hash identifier: Fg+xGdntuBA1N5JFpKumwKUaFGHLGbmLkb3tCfhFT8g=
Subject key identifier: DD:CD:99:DF:F1:9A:0D:6A:DE:8C:24:8B:77:31:C1:FF:4B:93:C7:D9
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 095D
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/3c2Z3_GaDWrejCSLdzHB_0uTx9k.roa
Signing time: Sun 07 Feb 2021 13:08:53 +0000
ROA not before: Sun 07 Feb 2021 13:08:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 198949
IP address blocks: 223.27.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2397 (0x95d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 7 13:08:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DDCD99DFF19A0D6ADE8C248B7731C1FF4B93C7D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:2f:a9:34:d3:04:7b:86:38:5a:ba:a7:b9:
08:42:00:7c:8c:35:c0:4b:54:c0:34:c6:60:be:b6:
17:28:84:f6:f6:09:17:5d:09:d8:bd:f7:30:85:0e:
68:22:40:19:e6:00:61:b2:ff:33:3d:b6:f2:c4:d6:
e4:fd:49:a1:85:ab:a1:06:ed:40:fb:6e:fc:aa:d5:
9d:38:e4:d2:49:ae:c8:98:89:05:61:61:29:ba:f5:
45:57:c4:3e:43:cf:b6:fb:d1:67:1d:9a:33:e9:81:
41:6d:af:05:c9:56:45:04:a1:fa:5f:53:1f:b2:a7:
68:ad:8f:9c:5c:53:9a:ff:a1:9c:ad:49:83:a7:eb:
c0:88:a1:ac:7d:88:9e:f3:b5:a6:42:7d:a4:67:ce:
66:ba:43:2f:7c:a6:9c:31:c7:ab:0e:f8:3a:1a:ba:
7c:c2:b8:c1:0b:c9:f5:aa:3a:79:eb:e4:6e:f5:ba:
36:7e:9e:de:b4:d1:6c:0d:0f:67:33:a4:b8:ba:09:
c0:4c:3e:2b:6b:74:f9:36:56:b0:74:69:37:74:1c:
5a:f0:83:a8:40:2c:c2:a9:a8:c5:45:e3:bb:d6:bd:
79:00:25:be:c6:40:a2:f5:c5:f4:c6:b1:ec:a6:5c:
ec:bb:74:13:fd:26:c4:4b:c2:0a:4a:55:e2:a8:5e:
e6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CD:99:DF:F1:9A:0D:6A:DE:8C:24:8B:77:31:C1:FF:4B:93:C7:D9
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/3c2Z3_GaDWrejCSLdzHB_0uTx9k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.32.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d5:08:9b:9b:d7:35:f1:00:eb:4c:e3:81:d0:2a:af:b9:bb:
5a:95:f9:12:4e:e4:e0:1b:41:84:8d:c3:80:59:db:66:bd:38:
21:5a:a4:cd:a3:d2:03:82:b4:29:0e:5f:35:9a:f7:24:4e:0b:
7d:4b:6f:46:62:0c:5a:58:b0:3c:e8:fc:aa:d4:39:e5:23:8c:
77:68:63:89:b7:b0:32:24:84:73:3d:1c:6d:a2:c5:70:41:1c:
d4:a2:15:9c:bd:f4:0c:e3:d7:f9:81:2b:3c:cd:6c:01:0e:0a:
82:13:c6:d6:a8:11:87:bc:17:63:45:bf:b0:e6:5c:07:c6:4a:
ae:cb:49:d4:99:d1:39:3d:75:2d:c6:d3:f1:97:97:77:6a:82:
e7:52:4c:11:45:56:56:1a:ab:2a:70:87:3f:79:15:51:d3:12:
16:12:da:fe:44:38:3d:00:4c:89:30:d5:87:8f:3c:01:e5:7d:
7a:8c:14:bb:78:de:2c:18:52:8d:41:ef:6d:08:d9:90:8a:7f:
7f:79:3f:20:84:a8:30:f7:80:b5:c0:99:98:12:95:fc:29:9b:
55:d1:9a:f5:70:f4:45:da:d6:71:e3:9a:fe:e6:6d:81:81:76:
06:6f:fb:b4:b0:d8:30:08:4d:f2:b5:19:c7:ca:da:55:39:c9:
29:0d:83:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org