Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/INc6bfG1z-GfY1pCUZ0G34_UY0k.roa
File: INc6bfG1z-GfY1pCUZ0G34_UY0k.roa (raw, json)
Hash identifier: VgiNBe5AoFEdbebyEcQoOsADHMYkrgLqHoPDvZitPfg=
Subject key identifier: 20:D7:3A:6D:F1:B5:CF:E1:9F:63:5A:42:51:9D:06:DF:8F:D4:63:49
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0957
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/INc6bfG1z-GfY1pCUZ0G34_UY0k.roa
Signing time: Sun 07 Feb 2021 13:08:43 +0000
ROA not before: Sun 07 Feb 2021 13:08:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 198949
IP address blocks: 124.150.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2391 (0x957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 7 13:08:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=20D73A6DF1B5CFE19F635A42519D06DF8FD46349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:e9:c1:fa:8d:65:89:8a:06:05:65:cd:e6:
78:ff:15:af:de:48:8d:93:b8:36:02:31:61:ea:24:
79:e6:c8:e7:3b:10:6b:38:7d:45:85:05:79:65:e3:
93:5a:c4:4d:30:d3:03:6d:90:d9:83:8f:db:27:7f:
4f:01:7a:a5:34:39:7c:10:37:da:2c:05:64:b1:0e:
09:49:ed:04:6f:6b:eb:55:a5:fe:bc:c4:11:3d:e6:
8c:db:35:d4:fb:c3:47:95:70:18:d5:53:76:b8:83:
33:9f:33:cf:45:3c:13:36:c2:8e:3e:05:13:3c:15:
af:a6:f9:42:f5:9d:92:52:d3:e8:90:66:a6:66:bc:
c4:4b:1c:d7:ad:a5:7c:f1:da:05:78:e4:c0:76:48:
ab:ea:d4:32:52:17:5f:e2:dc:ab:13:10:c0:e2:93:
c3:84:c6:11:c7:5e:1f:fe:29:99:f6:f0:db:59:e5:
c2:1e:7f:2a:8f:c1:56:13:b0:0b:c8:61:bb:d6:30:
2c:6a:c5:7c:aa:84:98:f2:fa:3f:4a:4c:71:2c:8b:
6a:a3:43:b6:63:0a:05:ab:d8:fd:84:04:3a:2b:f4:
c0:42:26:25:20:f3:a3:e1:ef:cc:89:35:db:e5:73:
5d:cf:9f:6a:e5:ed:82:db:60:5f:4e:96:b0:83:df:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D7:3A:6D:F1:B5:CF:E1:9F:63:5A:42:51:9D:06:DF:8F:D4:63:49
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/INc6bfG1z-GfY1pCUZ0G34_UY0k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.150.132.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a8:97:32:76:7c:9d:f6:9c:28:03:2c:ce:33:cd:2b:ac:fc:
48:2c:ca:21:2d:03:16:9d:37:90:2b:2a:2e:44:c9:85:c1:c7:
07:15:49:be:74:1c:2b:be:0f:ba:d6:ad:a8:d7:29:67:61:7a:
4a:6f:c5:71:48:6e:e1:b3:b8:13:47:23:a4:2e:89:49:6c:a5:
a0:9a:ca:fa:67:6b:f7:6d:94:29:1f:0e:27:3a:ea:9b:00:c5:
9f:62:3d:83:fa:ef:2d:3e:f0:b0:f9:6d:07:4b:ad:47:2e:9b:
5e:4f:70:0a:c2:95:7e:36:23:2c:ec:77:9f:f1:33:2d:35:24:
39:6e:44:db:a0:29:25:5c:2c:9a:21:18:9a:e9:78:0c:28:e6:
bd:39:85:7d:11:68:23:d4:09:dc:8a:74:2e:dd:d2:7f:36:35:
3b:10:fc:db:c9:d3:e6:ea:e8:c8:b3:23:73:57:d4:61:ea:f0:
ce:ec:2b:5f:9c:92:e4:a7:f7:4b:73:88:70:93:65:7e:ab:48:
f2:d7:6e:f1:ff:db:a4:6a:a9:9f:5a:2e:31:88:a4:d0:09:64:
ca:3a:8f:14:37:ed:60:3d:5a:d8:d9:66:78:b9:ec:cd:08:ce:
fe:d1:77:b1:90:2e:90:b8:b9:73:ae:10:8d:5e:be:f4:1b:d5:
e0:e3:c3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:04 2023 by rpki-client on console-ams.rpki-client.org