Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/BOXqIcL8y82aTZSkazCQ6BVGDIY.roa
File: BOXqIcL8y82aTZSkazCQ6BVGDIY.roa (raw, json)
Hash identifier: RyziWuLKSc0773IJkspuTTnXwzpXV0UNFzk5qZkBwcI=
Subject key identifier: 04:E5:EA:21:C2:FC:CB:CD:9A:4D:94:A4:6B:30:90:E8:15:46:0C:86
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 08A6
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/BOXqIcL8y82aTZSkazCQ6BVGDIY.roa
Signing time: Fri 11 Dec 2020 08:56:06 +0000
ROA not before: Fri 11 Dec 2020 08:56:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 198949
IP address blocks: 223.27.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2214 (0x8a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Dec 11 08:56:06 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=04E5EA21C2FCCBCD9A4D94A46B3090E815460C86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:40:a3:8f:72:ee:ba:45:2d:5b:d2:42:3d:
ae:72:55:c0:f4:b8:d9:58:94:ba:e2:f4:21:f6:7c:
0d:e8:79:c9:f6:aa:c4:2e:a5:1b:38:86:cd:2d:1e:
cf:37:20:62:7e:ee:4f:4a:80:ea:4e:fc:9a:51:99:
17:59:02:36:77:df:10:3a:25:4e:77:39:96:05:eb:
ac:8b:9a:fd:0d:9e:1d:d2:58:02:16:03:22:23:99:
6e:38:1c:78:fd:d1:ae:a8:32:5a:1b:60:cf:e4:db:
39:c2:b4:ec:07:b9:33:a8:a0:31:08:63:32:3d:75:
49:7e:93:c0:fc:3f:f4:72:22:05:92:c2:c9:45:e5:
02:0a:e2:a2:5f:76:62:92:2e:93:72:a5:0b:27:94:
72:40:dc:a8:04:53:1d:af:9d:4f:b3:79:51:7e:57:
7a:48:3e:d2:b1:2e:b5:c8:2a:6b:24:23:25:9a:be:
aa:3d:a1:05:9e:63:a0:6d:d0:5a:30:cd:fb:03:02:
48:74:47:4c:a2:19:c2:07:33:0e:03:af:e9:43:8d:
fb:d4:5f:00:db:1b:66:65:47:8c:22:17:32:79:63:
13:97:6e:f9:d2:58:7e:94:e0:72:ee:7e:88:b3:3d:
2c:6c:e8:16:58:67:78:89:76:0c:1c:50:f6:f6:47:
b9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E5:EA:21:C2:FC:CB:CD:9A:4D:94:A4:6B:30:90:E8:15:46:0C:86
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/BOXqIcL8y82aTZSkazCQ6BVGDIY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.36.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5e:9d:91:7d:83:f8:18:2e:38:2f:88:96:8e:7f:c4:7a:e3:
34:b3:dd:1b:f0:87:fe:35:29:c2:73:58:65:67:1f:a5:c9:e4:
f7:46:d3:1b:23:e7:14:75:d9:b2:a7:2e:05:79:42:3e:dc:da:
05:1e:02:c2:03:b7:4a:70:38:f3:ea:d2:96:a5:4a:1a:d3:d8:
7e:92:c8:45:18:de:1d:a4:78:0d:8c:ad:a1:0d:44:fa:26:cc:
f9:1b:08:5b:b1:32:26:c1:9b:61:91:3b:53:3f:ff:12:8c:60:
06:9e:5b:7e:e5:11:06:d8:aa:88:f7:e4:f2:37:b4:ee:0d:3a:
41:bb:66:c6:15:2d:21:4f:1a:86:3a:a5:a4:5b:1e:0c:05:90:
ac:4c:27:84:ff:ed:ed:b6:33:b1:dd:af:99:c1:f0:87:7f:0d:
c0:d1:f8:df:e4:14:74:1f:60:21:f9:3f:49:69:50:83:e4:d6:
7f:88:e8:e6:ac:94:c4:20:46:c6:b6:2f:6d:98:b8:d0:11:22:
d3:ea:47:e2:cd:2e:9b:b7:27:d3:e1:11:f9:d4:fe:4e:ee:c6:
a7:84:b3:fd:88:65:33:91:7d:03:13:a2:1f:33:1a:8b:a0:5b:
5e:8a:da:2e:fb:85:90:5d:19:74:fc:3b:1c:19:17:53:75:7b:
6b:1d:c0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org