Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/aQBkgnkYbbQO_ZnQ4mzmPnHGaD8.roa
File: aQBkgnkYbbQO_ZnQ4mzmPnHGaD8.roa (raw, json)
Hash identifier: dYCVpyU819XBYuxlUMCdXPQ/pHC5Kn5kbm3OAqHebg0=
Subject key identifier: 69:00:64:82:79:18:6D:B4:0E:FD:99:D0:E2:6C:E6:3E:71:C6:68:3F
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0987
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/aQBkgnkYbbQO_ZnQ4mzmPnHGaD8.roa
Signing time: Sun 07 Feb 2021 13:09:30 +0000
ROA not before: Sun 07 Feb 2021 13:09:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38843
IP address blocks: 124.150.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2439 (0x987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 7 13:09:30 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6900648279186DB40EFD99D0E26CE63E71C6683F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:45:bc:34:de:a0:85:86:1c:27:b6:cc:84:
85:2b:3f:22:44:21:a5:f1:7b:64:04:10:f4:fb:5a:
d7:3c:2a:73:57:47:54:f5:d7:95:1b:9c:f0:c3:7c:
bf:59:03:39:19:b3:9e:53:c8:db:1b:48:ff:94:76:
0c:5a:6d:e6:7a:55:c1:90:9b:af:75:53:10:fb:89:
05:1c:db:cd:27:0c:1b:3a:e4:3e:ef:b6:26:99:6f:
6f:98:cf:2b:38:4c:7f:ef:a1:61:2e:53:63:13:26:
f9:42:2b:88:06:7a:c9:8c:60:2f:be:21:ae:8a:ed:
ea:dd:f9:02:4d:21:82:a9:e1:bc:e8:95:86:44:9b:
30:95:a3:eb:2d:b5:d3:aa:99:78:87:07:23:25:76:
a4:db:4d:f7:c2:9c:ce:58:c2:22:34:da:42:35:12:
b1:94:de:1f:02:a8:fe:5a:50:fb:f2:92:cd:1e:50:
b1:5b:f4:3d:96:33:e3:c3:30:cf:85:cb:0e:4f:f8:
ea:89:ea:3c:95:9c:00:32:f6:dc:79:f3:74:bd:66:
14:da:ed:8c:6f:e7:6e:c7:f1:83:7e:ca:0f:bf:d2:
26:4b:e2:b3:ac:57:2d:da:40:96:be:eb:de:ed:81:
82:aa:a1:19:2c:0e:63:2f:bc:bb:82:af:c5:78:68:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:00:64:82:79:18:6D:B4:0E:FD:99:D0:E2:6C:E6:3E:71:C6:68:3F
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/aQBkgnkYbbQO_ZnQ4mzmPnHGaD8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.150.133.0/24
Signature Algorithm: sha256WithRSAEncryption
40:96:a1:a4:29:9c:ff:4d:bd:a2:0c:bf:4b:89:d8:d5:bf:29:
38:45:90:ad:89:65:8c:ee:8d:2b:ab:6b:69:e7:ed:d2:e7:06:
69:87:8f:3b:ae:0c:f6:2a:20:e7:17:6a:ff:ee:97:40:2f:2c:
3d:15:0b:38:c9:7b:89:07:50:15:8f:df:56:b6:38:ee:a0:46:
75:3a:89:cf:fd:6a:1c:15:f1:91:54:bb:36:33:79:28:46:ae:
72:25:2f:9e:ac:a6:55:c1:77:4f:1c:d9:af:09:a9:cc:c3:28:
a6:90:5d:fc:77:96:d1:d2:05:0c:ea:65:ba:b2:9b:69:91:d1:
a4:4d:df:99:e9:ca:94:e2:ef:86:e8:67:81:67:ef:68:1f:c6:
01:7f:53:25:f4:78:e7:a5:e8:a8:e6:4b:a0:8a:9a:74:60:74:
56:d5:00:6d:e2:af:da:cc:e5:f3:cf:f9:61:4e:16:95:58:65:
65:43:9f:b5:54:f9:51:d2:85:56:59:03:5e:3d:57:27:16:1f:
0f:37:a7:ec:23:2b:48:49:f8:4c:17:72:3f:19:51:4f:aa:98:
b1:4b:34:70:c8:36:73:43:d7:a2:b1:c1:02:64:fc:c2:7b:51:
6d:ed:d1:71:f8:89:92:31:22:6a:dc:e3:76:36:fb:45:62:53:
3a:c6:bc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:04 2023 by rpki-client on console-ams.rpki-client.org