Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/94a0CLFLINyI5at0XjrCW-WjVBA.roa
File: 94a0CLFLINyI5at0XjrCW-WjVBA.roa (raw, json)
Hash identifier: T+qeX+FLbkGGDjEIuBGYkKqwdkf369X7qUXJuk8jVRI=
Subject key identifier: F7:86:B4:08:B1:4B:20:DC:88:E5:AB:74:5E:3A:C2:5B:E5:A3:54:10
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 08BC
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/94a0CLFLINyI5at0XjrCW-WjVBA.roa
Signing time: Fri 11 Dec 2020 08:58:28 +0000
ROA not before: Fri 11 Dec 2020 08:58:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 198949
IP address blocks: 223.27.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2236 (0x8bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Dec 11 08:58:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F786B408B14B20DC88E5AB745E3AC25BE5A35410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:32:c2:b8:f5:e7:2c:d5:85:24:c0:aa:3f:
81:32:9c:df:f1:e7:e2:0d:8e:29:18:9f:0c:91:1d:
92:7f:1c:2a:a3:92:da:b5:de:4e:93:52:cc:57:9b:
f6:1b:f2:23:33:6c:f3:e0:68:5f:d0:5d:74:c6:46:
f4:cf:eb:62:f8:73:c5:2a:8a:f4:de:8d:97:49:7f:
c5:a6:0b:7f:bd:98:d6:c7:98:0d:b8:f8:2b:8f:1f:
00:7e:40:05:c0:77:2f:94:af:86:ba:8a:68:73:c8:
66:ab:64:62:53:52:08:d7:ec:2a:ef:73:53:a5:6b:
60:44:d9:be:90:45:af:ea:0f:12:8e:21:f2:76:10:
e1:63:c6:1a:99:83:cc:64:e7:f2:bb:09:d9:ab:6c:
cb:c1:af:42:07:31:10:a7:a3:bb:3e:d1:79:75:e1:
29:77:02:e5:8e:e7:bc:54:bb:3f:33:b0:49:cb:14:
50:ea:cd:26:d6:43:f7:f7:05:78:fc:02:83:86:bb:
23:85:6e:89:55:a3:60:3e:bd:4f:8d:15:aa:1e:9b:
7b:95:1b:e3:25:2d:50:6e:00:0f:db:10:8a:e1:31:
38:e0:c2:36:a0:2f:6e:bf:e5:55:69:d1:d5:b8:90:
a9:a4:36:ec:b9:5f:2e:a1:8f:6f:57:7c:be:e9:37:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:86:B4:08:B1:4B:20:DC:88:E5:AB:74:5E:3A:C2:5B:E5:A3:54:10
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/94a0CLFLINyI5at0XjrCW-WjVBA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.60.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e2:ae:a7:73:68:00:61:50:75:02:69:df:06:33:cb:14:49:
d7:ee:7b:0c:76:97:90:3a:36:04:f3:42:bc:08:04:c7:3f:f4:
d6:ec:fe:d6:7a:c3:0c:45:12:a5:d5:a3:4f:fe:61:a5:24:7d:
ac:aa:ad:a1:46:82:25:a4:5d:8d:d5:c6:ff:7a:ae:e3:17:e9:
fb:41:dc:d1:a0:10:9d:c6:1c:76:46:53:a4:29:ac:59:88:ce:
69:d5:64:a8:27:6c:a2:bb:3a:ce:73:a3:79:4f:ca:6e:96:40:
75:8a:f7:de:13:75:5a:6b:9a:36:68:ae:3c:5b:8f:ea:0d:19:
88:7c:59:57:7b:6f:34:9b:37:02:00:40:fb:80:88:a6:48:b0:
6d:78:a8:9b:80:80:af:46:d1:71:bf:a2:7e:9a:71:94:f7:11:
04:04:8d:cd:5b:bc:1b:68:60:88:ea:8f:88:22:36:cc:67:6b:
6b:6e:0c:ec:f3:bf:30:cc:ec:55:5f:76:73:51:33:1a:aa:d1:
70:bb:16:31:2d:06:c2:98:00:83:f9:c9:af:87:f7:d9:74:33:
a6:37:e4:9f:75:b8:e3:76:0a:e1:d9:46:3a:81:73:23:fa:b4:
ca:39:3e:77:52:bf:07:f5:51:4a:7f:f1:21:31:32:6e:32:27:
53:38:9b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org