Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/P74vmJQIP0mVz_axzO0Uhwv7YfU.roa
File: P74vmJQIP0mVz_axzO0Uhwv7YfU.roa (raw, json)
Hash identifier: 0+3BN+NJUphQ3nM8iTzzw72+WdJqmlLe3ar/acZKOkw=
Subject key identifier: 3F:BE:2F:98:94:08:3F:49:95:CF:F6:B1:CC:ED:14:87:0B:FB:61:F5
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0A8A
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/P74vmJQIP0mVz_axzO0Uhwv7YfU.roa
Signing time: Wed 06 Oct 2021 07:01:32 +0000
ROA not before: Wed 06 Oct 2021 07:01:32 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38843
IP address blocks: 223.27.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2698 (0xa8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Oct 6 07:01:32 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3FBE2F9894083F4995CFF6B1CCED14870BFB61F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:c1:58:43:16:5e:75:3e:46:99:98:45:59:
38:b3:45:2e:2b:b6:9d:3e:e2:60:92:c2:99:e7:de:
cb:20:a1:e7:da:77:1d:0e:d9:68:b7:6b:8d:8c:9f:
95:61:35:54:c9:3d:64:07:80:bf:47:92:8f:18:df:
6c:3b:85:53:de:79:d1:25:4d:c7:14:47:03:8b:fb:
de:44:d1:63:f2:c5:bb:3c:01:1e:60:fd:69:5c:1d:
f7:31:43:4c:a9:8b:f7:4f:78:46:2e:8f:77:13:fe:
38:ad:4a:28:fa:cb:b3:28:27:20:2a:37:f3:ea:2f:
39:76:58:f9:6d:bf:49:b0:28:96:bd:af:41:3c:c9:
57:70:31:70:fb:c2:e8:ad:40:ed:aa:f5:77:40:89:
96:cd:a7:bb:f1:64:bc:f9:af:62:88:71:ed:f6:76:
c6:32:3a:e0:2f:c8:a5:16:fe:50:65:a1:4c:e9:59:
2d:f9:47:96:1b:02:4b:a1:f9:4c:a3:5e:0f:dd:59:
d1:65:dc:2b:70:55:6d:c5:4b:5d:ea:1c:e1:19:0a:
9d:a9:36:2e:54:43:bf:99:a1:3e:89:10:fa:e8:29:
78:31:f0:6d:b3:00:16:0d:9c:62:e2:3e:09:99:36:
78:02:0d:19:97:f7:08:46:d9:86:d4:89:73:d0:79:
c1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BE:2F:98:94:08:3F:49:95:CF:F6:B1:CC:ED:14:87:0B:FB:61:F5
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/P74vmJQIP0mVz_axzO0Uhwv7YfU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.36.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:9d:c4:bf:60:d2:21:89:ca:5a:37:45:c6:21:b6:9e:2c:0b:
1e:66:46:f8:e7:07:f9:a7:6a:b4:fa:f5:2f:5a:43:7e:12:b8:
f9:35:07:22:fa:e1:9c:fc:24:27:45:ae:61:3f:b1:ba:53:49:
da:34:5e:d9:cd:e6:50:e8:d6:07:ff:d8:22:56:46:57:ef:af:
1c:87:ec:09:71:15:f5:94:62:5c:4c:d5:7c:ec:de:48:2d:44:
c8:b8:67:e2:40:40:d7:e0:13:6b:0d:f6:5a:b5:a8:a1:06:77:
dd:9e:5a:d5:62:1f:76:1b:3a:d5:a5:91:7e:da:0c:20:21:cc:
c3:55:54:2b:81:e1:c7:a0:f6:d4:b0:e8:b4:0d:83:3b:0a:1e:
21:89:ba:3e:e9:8d:c2:2d:63:db:f0:5b:22:4a:31:8c:2c:1d:
a7:fa:2b:8f:f7:d4:90:00:08:f7:b4:b7:67:f6:2e:58:10:7c:
52:b2:fe:0a:28:0a:71:60:53:7c:5a:bb:48:ce:0a:03:99:52:
e6:30:34:36:a2:ab:26:25:10:ec:83:71:be:9c:c0:ff:bf:d6:
38:27:b0:17:94:01:55:38:69:b3:71:a1:09:9e:ea:53:ef:55:
59:2f:92:be:54:ac:81:ea:0a:07:da:2b:9e:ef:a3:4f:62:d9:
c3:76:9c:e8
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE
RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yMTEwMDYw
NzAxMzJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDNGQkUyRjk4OTQwODNG
NDk5NUNGRjZCMUNDRUQxNDg3MEJGQjYxRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHy8FYQxZedT5GmZhFWTizRS4rtp0+4mCSwpnn3ssgoefadx0O
2Wi3a42Mn5VhNVTJPWQHgL9Hko8Y32w7hVPeedElTccURwOL+95E0WPyxbs8AR5g
/WlcHfcxQ0ypi/dPeEYuj3cT/jitSij6y7MoJyAqN/PqLzl2WPltv0mwKJa9r0E8
yVdwMXD7wuitQO2q9XdAiZbNp7vxZLz5r2KIce32dsYyOuAvyKUW/lBloUzpWS35
R5YbAkuh+UyjXg/dWdFl3CtwVW3FS13qHOEZCp2pNi5UQ7+ZoT6JEProKXgx8G2z
ABYNnGLiPgmZNngCDRmX9whG2YbUiXPQecEBAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUP74vmJQIP0mVz/axzO0Uhwv7YfUwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80
sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O
TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vUDc0dm1KUUlQMG1Wel9heHpPMFVo
d3Y3WWZVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAt8bJDAN
BgkqhkiG9w0BAQsFAAOCAQEAop3Ev2DSIYnKWjdFxiG2niwLHmZG+OcH+adqtPr1
L1pDfhK4+TUHIvrhnPwkJ0WuYT+xulNJ2jRe2c3mUOjWB//YIlZGV++vHIfsCXEV
9ZRiXEzVfOzeSC1EyLhn4kBA1+ATaw32WrWooQZ33Z5a1WIfdhs61aWRftoMICHM
w1VUK4Hhx6D21LDotA2DOwoeIYm6PumNwi1j2/BbIkoxjCwdp/orj/fUkAAI97S3
Z/YuWBB8UrL+CigKcWBTfFq7SM4KA5lS5jA0NqKrJiUQ7INxvpzA/7/WOCewF5QB
VThps3GhCZ7qU+9VWS+SvlSsgeoKB9ornu+jT2LZw3ac6A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:16 2023 by rpki-client on console-fra.rpki-client.org