Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/daEB5iP15KK241meyjAM25d8cbY.roa
File: daEB5iP15KK241meyjAM25d8cbY.roa (raw, json)
Hash identifier: AMQKluYAwNsZyF3NNMJrOdgYGtFOWryOpk9vgmVUzRQ=
Subject key identifier: 75:A1:01:E6:23:F5:E4:A2:B6:E3:59:9E:CA:30:0C:DB:97:7C:71:B6
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 08AC
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/daEB5iP15KK241meyjAM25d8cbY.roa
Signing time: Fri 11 Dec 2020 08:56:50 +0000
ROA not before: Fri 11 Dec 2020 08:56:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 198949
IP address blocks: 223.27.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Dec 11 08:56:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=75A101E623F5E4A2B6E3599ECA300CDB977C71B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:c3:ff:5b:41:62:44:b0:d8:4c:02:33:ca:
66:e2:82:53:18:37:a1:c9:7e:70:db:f4:e3:d1:ca:
b5:f2:e2:b9:38:48:a3:48:2c:63:a2:ed:81:6f:9b:
10:de:4a:bd:2e:35:ae:10:61:4b:bb:0b:83:f3:17:
04:6f:07:6c:df:24:24:cd:7d:0a:b9:4a:04:dd:e1:
97:9d:77:04:5d:cd:1a:4b:99:7e:9b:83:99:19:76:
e4:85:0f:db:73:05:22:85:67:67:83:ed:73:9a:67:
59:cf:7c:50:8c:29:df:8b:14:58:cf:78:70:0d:eb:
7a:85:f5:6f:d7:37:91:15:3c:f9:86:75:6b:60:01:
34:fe:ed:ad:ad:7b:36:ea:79:a9:f8:af:c2:dd:36:
b1:0e:9e:72:28:04:30:af:59:9b:64:bc:a8:e8:e7:
a6:93:66:61:e8:07:1d:d1:15:c8:c1:f8:6e:a5:97:
f6:e9:d7:a8:b9:42:93:d6:8c:ed:ae:f9:f2:cf:90:
54:7d:83:3b:b8:9e:13:8f:b2:41:d6:0f:2a:bf:9e:
de:fb:4e:9e:2a:db:70:e5:8c:d9:cf:14:05:93:e4:
17:eb:e2:7f:45:69:a5:a0:87:a4:b5:c9:5f:32:15:
75:a0:8d:42:8a:46:6a:e4:81:df:62:a0:ea:35:20:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A1:01:E6:23:F5:E4:A2:B6:E3:59:9E:CA:30:0C:DB:97:7C:71:B6
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/daEB5iP15KK241meyjAM25d8cbY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.39.0/24
Signature Algorithm: sha256WithRSAEncryption
93:64:36:f7:21:f9:cc:f2:29:ab:e3:9a:70:a9:d7:b7:06:15:
ac:03:46:6b:ba:78:71:98:06:80:64:22:03:c3:7b:6f:8f:79:
6a:4d:78:f9:00:49:af:7d:82:e3:18:2b:67:64:4d:02:68:5b:
40:a3:f5:20:ad:ec:4b:6e:c7:cc:00:50:fc:32:84:c8:04:87:
98:02:f7:02:ac:df:77:46:02:13:e8:35:c0:b2:0d:57:be:6c:
98:bb:8b:67:2a:d5:30:e2:d1:29:d7:68:38:68:b6:0a:a7:31:
c4:c4:96:f1:37:8f:f9:81:79:99:26:3d:8d:b9:aa:3c:6e:4f:
34:84:41:ce:0d:2a:4e:96:ef:af:93:4a:56:d1:92:e3:b4:b3:
cf:9e:07:b2:da:b4:89:34:8a:6c:02:a0:07:59:7a:d0:bc:0f:
2c:ae:fa:d4:ca:45:72:9c:29:7d:b5:0a:db:21:30:c6:40:d0:
ff:74:c5:67:d8:34:9c:ab:0a:b9:de:ac:c3:42:de:16:1f:42:
dd:eb:a8:8f:c0:a7:23:6a:15:e2:96:79:b7:a9:2a:a2:56:52:
8b:f9:71:9e:ce:6f:94:d8:64:42:e3:f0:1d:a7:47:d0:e8:b2:
e5:a6:d6:3c:67:67:b6:a6:0c:4e:e1:fe:da:91:04:7d:94:d2:
26:b3:cd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org