Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/C2XdLhtl5KZqpwKGzYp6EPhIARU.roa
File: C2XdLhtl5KZqpwKGzYp6EPhIARU.roa (raw, json)
Hash identifier: BO38FvvEgrLac4IuPefX7ZMs6Yoe/SikGp6l3avPzRA=
Subject key identifier: 0B:65:DD:2E:1B:65:E4:A6:6A:A7:02:86:CD:8A:7A:10:F8:48:01:15
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0AB9
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/C2XdLhtl5KZqpwKGzYp6EPhIARU.roa
Signing time: Wed 06 Oct 2021 07:21:43 +0000
ROA not before: Wed 06 Oct 2021 07:21:43 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 13335
IP address blocks: 223.27.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2745 (0xab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Oct 6 07:21:43 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0B65DD2E1B65E4A66AA70286CD8A7A10F8480115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:b0:c6:f6:26:c2:cd:e9:b7:a9:49:c6:b8:
0c:b9:b9:a2:78:2c:3d:7f:dd:6f:be:61:8d:2f:d2:
62:2e:24:d3:5d:6b:84:2e:98:d1:31:74:d6:7e:1e:
2d:18:25:c2:cb:37:6a:7e:28:ef:1d:0e:ff:4d:81:
9d:b9:27:47:d2:ea:9a:7e:80:e7:2b:e5:69:c5:f6:
36:82:1a:37:53:b8:12:d0:ad:77:a6:e5:0c:80:99:
ff:46:d2:17:2d:77:39:b9:fd:73:f2:c3:ed:8c:50:
de:6b:ec:69:a2:2c:a0:7d:09:d1:69:82:64:17:aa:
66:bf:0b:3e:9a:45:45:53:4d:78:02:13:0a:19:cf:
ad:f3:88:c7:2e:a2:d0:62:09:ac:ad:d2:22:cb:8c:
ff:47:67:a4:c8:48:f0:62:1a:1d:1c:7d:fd:00:8a:
e1:da:9e:25:54:37:87:f6:b6:88:c2:32:05:85:87:
0d:16:93:60:5f:f9:66:14:12:c6:d3:3a:96:d2:4a:
da:eb:9b:24:77:a7:46:67:f0:22:17:a8:c7:5f:ee:
79:54:e4:d2:81:32:0d:23:f9:77:a6:78:a1:7a:9b:
52:f3:a4:b7:5e:b7:78:9b:d0:13:8c:9e:38:29:5d:
55:44:c7:e1:6e:33:8a:0d:0e:93:24:5a:82:0d:4f:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:65:DD:2E:1B:65:E4:A6:6A:A7:02:86:CD:8A:7A:10:F8:48:01:15
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/C2XdLhtl5KZqpwKGzYp6EPhIARU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.48.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:0b:4e:6a:4c:de:80:ee:8b:68:1b:b0:f6:a2:b3:a6:1b:af:
0e:7e:a0:c7:ed:33:7a:65:dc:6c:44:a8:79:d7:aa:54:20:d0:
1d:d6:63:45:87:30:0e:c8:3a:c8:60:19:68:72:f5:7e:70:08:
aa:61:00:fa:77:ce:89:0f:90:ff:42:f1:48:87:83:2e:1a:7f:
f7:2b:52:ad:86:70:37:38:6f:b8:b3:7a:82:06:77:8f:84:e6:
29:d4:1a:5d:c0:6d:e5:0c:67:e4:16:ed:34:10:07:d9:14:de:
19:c2:e3:9b:51:63:fa:7e:9b:d7:51:1a:63:4d:c1:ca:91:38:
ce:f2:c6:00:65:e6:4a:78:6f:85:66:c2:8d:b2:a9:df:dc:8f:
47:5c:c6:c2:67:08:a7:b1:c3:46:31:ba:82:28:9e:c8:07:ea:
05:7e:a7:ae:8d:62:01:74:44:96:07:80:c2:56:36:50:eb:3e:
ca:fc:2e:c7:77:3d:c5:1a:d8:fa:eb:16:cc:66:c1:dd:dc:e8:
38:96:e8:30:5b:89:c7:f4:2d:38:ab:58:16:f1:bd:cf:20:f1:
ad:9a:c8:68:9a:cf:ff:65:c1:f7:bd:ea:66:5a:5b:1c:cd:9a:
7d:23:68:b5:1e:40:0d:47:79:45:d9:e6:05:ae:7a:21:7a:99:
83:37:79:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org