Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/9p-URhY8jXFtW5TBgGZi-6cZoVs.roa
File: 9p-URhY8jXFtW5TBgGZi-6cZoVs.roa (raw, json)
Hash identifier: CdVEMlmF9Rt3upSJwFW0DqQC67e5RBN/+Nqvz9LnVjg=
Subject key identifier: F6:9F:94:46:16:3C:8D:71:6D:5B:94:C1:80:66:62:FB:A7:19:A1:5B
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 09A1
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/9p-URhY8jXFtW5TBgGZi-6cZoVs.roa
Signing time: Sun 07 Feb 2021 13:09:55 +0000
ROA not before: Sun 07 Feb 2021 13:09:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38843
IP address blocks: 223.27.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2465 (0x9a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 7 13:09:55 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F69F9446163C8D716D5B94C1806662FBA719A15B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:df:fe:05:57:b0:c6:12:c1:9c:69:da:0c:
64:9d:0e:7d:f5:09:83:81:87:59:b2:f5:82:ef:e7:
89:d1:24:21:99:23:05:bc:8a:78:24:89:6a:13:16:
02:30:42:16:34:ae:6c:7d:f2:4d:d9:bf:8e:b0:dd:
38:45:09:89:35:e5:34:50:43:d0:ce:de:15:5a:39:
c2:83:8f:51:f6:7f:79:98:8a:76:67:a8:08:2d:e4:
3b:29:0d:d0:3f:1c:eb:84:3e:71:3c:57:a1:d9:d3:
57:8f:1b:d0:ef:7c:e4:2f:8f:21:d4:49:99:b3:38:
9e:10:f7:ac:25:02:42:06:d7:7a:a0:14:0c:7b:f3:
4b:75:62:27:bf:33:93:17:99:71:d3:b3:d8:c9:a2:
90:7e:cc:f6:3e:28:3c:69:2a:28:18:d7:e7:aa:dc:
a0:5d:bb:5d:ee:a4:d8:7c:2f:77:51:37:d7:96:b0:
27:15:ce:1c:81:50:ff:0a:d6:45:aa:ad:5d:e1:ce:
60:f3:05:4b:d7:dc:ab:db:02:b9:93:e8:3a:0b:e6:
10:07:8f:39:17:4e:f2:08:b9:e3:bd:a1:d8:20:cf:
48:54:1c:aa:b7:de:33:f8:27:f7:91:07:6b:c1:ae:
83:37:45:4a:57:39:9a:51:fd:7d:40:9e:a5:98:82:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9F:94:46:16:3C:8D:71:6D:5B:94:C1:80:66:62:FB:A7:19:A1:5B
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/9p-URhY8jXFtW5TBgGZi-6cZoVs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.46.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:20:fb:11:94:6f:5f:50:31:a3:21:33:f4:fc:e1:f5:13:73:
a6:ae:7c:c7:75:1e:67:9a:70:18:ee:58:e9:bd:1c:86:b4:a8:
48:37:f9:60:3b:7f:c8:cf:49:68:e9:6e:dc:06:27:5c:69:30:
3e:38:53:7f:12:63:94:43:e6:46:51:04:f1:17:d1:75:44:d0:
d5:17:38:a8:09:cd:d2:08:1f:33:8d:f1:8b:12:95:3b:a0:db:
d1:c3:93:11:e5:a6:36:a4:d0:2f:5d:5d:c6:7a:86:cd:8d:cb:
ce:c5:eb:bd:11:f2:e5:f2:77:bb:00:f9:08:64:7f:c6:9d:3c:
e4:e1:76:4d:03:da:f4:61:9a:1a:93:98:cd:0e:30:54:2f:88:
ef:46:a5:b5:f7:2c:ec:8e:dd:13:c8:0f:2c:99:2d:52:1f:8f:
3c:f3:50:e2:05:c6:54:cd:c4:60:bd:c1:f8:0d:88:71:a6:c2:
40:61:b4:c1:08:20:08:5d:a8:54:7e:f7:a8:49:8f:42:50:b0:
64:73:ad:b3:b9:da:48:c9:8f:bc:af:b9:69:3d:8c:35:3b:b0:
87:4d:bc:0e:5f:a3:a5:9b:c9:2f:11:a6:59:3a:64:8b:9d:cc:
f6:e4:fc:d2:30:fa:35:de:13:67:3f:1e:a4:2c:eb:92:71:b2:
3d:d6:e9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:16 2023 by rpki-client on console-fra.rpki-client.org