Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/BR7cweaaktuPJhZm2NdyFmvtahY.roa
File: BR7cweaaktuPJhZm2NdyFmvtahY.roa (raw, json)
Hash identifier: Ma6s7Md2TiifQZxZDPvg5QvtWGClqZnEg0fnCejxpYs=
Subject key identifier: 05:1E:DC:C1:E6:9A:92:DB:8F:26:16:66:D8:D7:72:16:6B:ED:6A:16
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0949
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/BR7cweaaktuPJhZm2NdyFmvtahY.roa
Signing time: Sun 07 Feb 2021 11:53:45 +0000
ROA not before: Sun 07 Feb 2021 11:53:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38843
IP address blocks: 103.20.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2377 (0x949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 7 11:53:45 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=051EDCC1E69A92DB8F261666D8D772166BED6A16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:d1:45:3f:98:b7:e3:ee:10:a7:bd:6c:64:
3a:93:f9:48:89:11:a9:a7:65:e8:ef:ec:c9:79:25:
c6:41:d2:4c:95:1b:c3:03:d0:93:b4:70:ad:03:9f:
20:df:32:65:ca:aa:3f:38:91:c2:67:85:27:f2:41:
af:e6:18:02:ae:14:a4:64:4e:99:fe:f1:77:d1:87:
0f:1c:32:34:2a:d3:c3:66:5d:6a:47:6a:1f:36:0a:
06:d6:77:96:c1:ba:33:d7:2d:5a:45:6a:20:28:0b:
a2:7d:99:74:5c:39:74:e8:91:15:dc:21:b5:7d:36:
72:48:7c:b3:1c:dc:eb:f8:cd:84:03:66:da:cc:a1:
7f:d3:97:44:f5:b0:46:f7:03:47:4a:f9:e9:0d:33:
26:f6:34:6c:52:f7:3b:ac:b5:2c:52:49:6d:e1:1d:
0f:20:18:43:22:0c:97:73:47:6c:37:41:56:e0:bc:
a0:09:d8:85:0f:7c:dc:1f:df:90:91:33:ee:fe:69:
64:c5:0c:9f:3f:1f:f1:3a:ef:c7:cf:b6:3b:c4:b8:
dd:a8:96:3c:ed:48:f6:33:44:7b:ac:c4:a1:0c:fc:
76:40:02:8d:b4:fd:a5:64:11:f8:a7:3d:7c:85:12:
e7:29:ef:78:2f:3a:e9:94:6d:5f:3e:a0:3b:17:06:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1E:DC:C1:E6:9A:92:DB:8F:26:16:66:D8:D7:72:16:6B:ED:6A:16
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/BR7cweaaktuPJhZm2NdyFmvtahY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.40.0/22
Signature Algorithm: sha256WithRSAEncryption
45:42:7d:53:0c:57:52:45:5f:17:a7:b0:b7:bd:c2:92:ae:c8:
93:f0:d9:d2:0f:24:be:b4:e5:9f:61:ff:44:0d:a7:c2:1a:36:
53:35:71:1a:d3:cd:94:e3:f1:14:96:a5:68:33:63:40:77:b1:
e6:57:91:f6:c5:5d:b4:dc:25:23:e3:bf:6c:31:44:01:0f:2b:
d2:43:96:36:7d:56:94:2a:e2:69:e5:1e:e2:ce:a4:93:84:4a:
63:a1:80:a5:50:93:1a:6c:0c:da:a8:ba:ea:06:da:2c:34:18:
0e:bc:13:9b:6c:4b:e5:d6:c1:03:ca:c0:f6:1c:33:fb:50:f3:
52:d1:f3:2f:0e:f3:f9:75:12:53:54:1d:13:80:11:e3:38:08:
61:49:a8:f7:25:c0:62:60:24:67:32:e8:c1:ba:9c:c4:fe:17:
c9:ee:91:38:83:e2:44:1a:92:bc:58:1d:c0:fa:5a:da:56:85:
9f:e7:8c:a4:64:d4:ab:32:97:88:e4:ce:bd:a8:e4:f8:70:27:
37:0c:2f:2e:39:6f:d6:1e:81:fc:45:5b:6c:5c:52:34:7d:7b:
3d:e6:9e:30:22:0d:05:0b:4d:d3:48:94:73:9a:e5:25:af:c7:
e0:a2:e2:7f:6e:9b:41:2a:65:cc:7c:e9:80:11:4f:26:15:91:
ca:ca:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:45 2025 by rpki-client