Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/TPLWwjqxAfB5hSLLV9wIJvPn6AQ.roa
File: TPLWwjqxAfB5hSLLV9wIJvPn6AQ.roa (raw, json)
Hash identifier: dBlPlcW+SrzGp+q7zBy05mnTYa4QuQfKwpKpO8S1WjU=
Subject key identifier: 4C:F2:D6:C2:3A:B1:01:F0:79:85:22:CB:57:DC:08:26:F3:E7:E8:04
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0999
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/TPLWwjqxAfB5hSLLV9wIJvPn6AQ.roa
Signing time: Sun 07 Feb 2021 13:09:48 +0000
ROA not before: Sun 07 Feb 2021 13:09:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38843
IP address blocks: 223.27.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2457 (0x999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 7 13:09:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4CF2D6C23AB101F0798522CB57DC0826F3E7E804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:0e:2d:31:ba:48:e2:68:26:4c:ac:74:8d:
3d:f4:a7:21:fe:c1:24:d9:21:d6:13:01:37:07:4d:
8c:91:f7:b9:23:22:3e:6a:ca:42:a8:4f:38:7c:77:
f1:c1:95:57:59:d0:70:36:f7:be:58:e3:af:b4:c0:
56:ed:b1:07:42:1d:62:5a:12:85:e6:f2:9f:96:7b:
5c:cf:7d:b1:11:27:32:d3:02:1e:70:a8:38:33:5c:
aa:ac:80:5c:aa:a8:6c:60:b8:51:9f:7f:c8:37:2e:
18:74:02:8c:d6:46:1f:51:ab:b3:14:41:78:44:d4:
3f:d1:16:e3:54:c6:03:59:95:1e:c4:1c:8f:03:dd:
3c:1f:32:f2:78:0e:ba:ba:48:77:5a:80:37:5d:11:
e5:92:fa:8d:90:a0:f7:72:32:79:d7:57:d7:d1:23:
3f:06:fc:fc:04:5b:1d:e8:1f:d8:64:c5:f5:e9:1a:
00:11:22:b0:ed:50:d5:99:11:18:a3:8a:72:39:ef:
71:5e:84:28:f0:3f:d3:9c:e5:6b:87:92:3e:92:d5:
e5:1c:46:41:a1:a0:85:bd:db:4b:98:1c:f0:e8:62:
31:6c:26:ad:d3:d8:c1:90:fe:b4:97:db:0d:eb:18:
fc:70:cd:18:fe:ad:95:ba:4e:cc:f0:3a:af:c2:ae:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F2:D6:C2:3A:B1:01:F0:79:85:22:CB:57:DC:08:26:F3:E7:E8:04
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/TPLWwjqxAfB5hSLLV9wIJvPn6AQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:02:45:ea:66:56:e7:2f:33:a7:e2:c6:cc:8d:7b:8e:c7:05:
ee:00:87:76:40:c8:ec:39:3e:4e:9d:a5:8b:6e:5e:94:03:be:
3a:4f:d0:7e:f1:8d:c2:7f:b7:36:b1:8a:4f:33:9e:39:e2:8a:
1c:4a:cc:ff:9d:e0:b8:a6:b2:62:5c:d8:09:ef:82:c7:f0:66:
01:08:cb:b5:b4:85:5f:a1:54:bc:a1:b7:74:23:35:0f:8c:9e:
db:e3:ed:ef:e4:3c:f6:1e:55:a2:23:99:d4:b9:71:45:4f:6c:
ed:b7:7a:6a:a1:c1:fb:1d:8f:f4:91:00:cd:8e:54:bc:76:14:
15:0f:b0:3b:06:d6:ae:c3:c4:47:bc:e8:35:e4:48:fa:02:0d:
51:a5:a2:ed:8e:ec:3b:4e:f8:f6:1c:1b:98:dc:40:13:2a:4a:
fb:a1:95:05:59:b7:32:b3:48:3b:78:ae:43:42:c7:d7:7a:c0:
41:a7:a6:d8:11:3e:20:2b:f3:2e:4f:70:3a:68:e7:8a:b0:25:
25:84:b3:65:8d:9e:4f:66:0f:1d:cb:94:b8:cb:d4:93:55:d6:
5a:f5:11:f7:e4:70:81:48:99:db:0a:cb:05:3f:24:c1:db:6a:
8e:a5:7c:42:d5:30:72:bb:bd:a4:86:f4:33:ba:3e:66:ba:a5:
5d:b7:fe:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org