Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/6MbWR43AnUt4mBfWhUXmkPwcGbM.roa
File: 6MbWR43AnUt4mBfWhUXmkPwcGbM.roa (raw, json)
Hash identifier: /79nLGUfuiGsVPuHdOi9DmqMKXsg+Nu528EaBEGPhDY=
Subject key identifier: E8:C6:D6:47:8D:C0:9D:4B:78:98:17:D6:85:45:E6:90:FC:1C:19:B3
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0A68
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/6MbWR43AnUt4mBfWhUXmkPwcGbM.roa
Signing time: Wed 29 Sep 2021 02:42:45 +0000
ROA not before: Wed 29 Sep 2021 02:42:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38843
IP address blocks: 223.27.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2664 (0xa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Sep 29 02:42:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E8C6D6478DC09D4B789817D68545E690FC1C19B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d1:63:b2:b7:d6:8e:08:d8:34:b9:14:12:dd:
46:12:fc:5e:45:8e:9d:c5:99:97:03:c6:c6:c7:35:
30:c6:05:2a:87:b4:74:21:b7:c3:db:19:c5:5a:c9:
d8:72:8d:84:66:9d:9f:b5:b8:11:9b:0a:32:25:c6:
43:84:db:87:ee:59:76:cf:ca:d4:a0:38:a4:35:6a:
84:58:52:f4:ae:bb:00:34:2d:e1:51:67:74:ff:9b:
34:22:2a:f2:13:58:f8:a1:96:19:66:f2:c1:66:ff:
7a:53:19:8e:2e:93:2a:e4:ea:01:6f:e9:85:33:af:
ca:7e:e9:ff:96:2f:17:53:29:1f:f2:97:53:8b:a2:
14:60:3a:c0:10:60:92:d4:88:fc:c5:63:ac:e7:15:
7f:63:36:11:e2:f6:0c:62:ed:9d:8b:c6:6b:24:2b:
64:69:b1:78:cf:e1:c7:53:70:9f:da:43:f9:fe:a5:
d7:23:64:ab:7e:02:e0:52:d6:ae:02:59:8c:37:27:
0d:84:ee:2a:42:a0:b2:c7:71:41:42:db:95:95:2f:
f1:9d:8e:89:3f:71:78:26:ee:79:e6:20:1e:c7:63:
ec:6c:a4:8f:29:58:c5:57:e4:50:23:3f:8b:b5:b8:
e8:44:7e:15:b4:a0:1a:35:a4:db:b3:6a:a4:28:7e:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C6:D6:47:8D:C0:9D:4B:78:98:17:D6:85:45:E6:90:FC:1C:19:B3
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/6MbWR43AnUt4mBfWhUXmkPwcGbM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:8e:50:ec:7b:46:5d:58:9c:83:5e:9b:b8:fb:ea:af:f3:a8:
eb:ad:39:e7:ed:5a:ef:ab:22:c0:19:5d:8f:01:71:89:70:bb:
12:7f:a0:e0:73:8b:13:61:ff:51:ba:9c:63:87:9b:38:0d:2a:
c7:95:7f:90:21:8f:d9:4b:9a:26:c4:b9:3c:2f:21:c8:65:c3:
1a:b3:71:1f:aa:f2:c4:ff:6e:e8:ea:93:e8:9a:0d:25:69:91:
28:42:a4:d4:42:c5:bf:b2:d4:08:57:81:97:93:ab:80:f2:ff:
e9:9d:e3:1d:7d:93:4c:11:e9:7b:1a:63:44:0b:c6:45:b9:c9:
3f:8a:4a:1e:b2:45:ce:87:4e:46:f0:19:ac:b0:e8:75:b2:82:
ee:dd:42:58:4f:93:42:cd:04:87:8e:ea:5e:64:07:55:70:59:
60:f0:2f:c8:96:45:ea:ed:ca:c0:db:24:ae:a4:65:58:bc:18:
af:d9:37:45:e9:8a:95:f1:cd:f1:27:5d:98:13:09:d7:ae:e2:
f0:dd:0e:10:c0:bb:b2:d5:ec:db:6e:b8:7d:33:56:85:07:30:
c5:8c:f1:89:b0:fd:8c:60:46:d7:d0:fe:30:de:9d:ea:a0:55:
d5:74:fc:de:35:d3:4e:af:20:f2:8f:f2:e0:96:d9:18:78:46:
44:a8:ec:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:38 2025 by rpki-client