Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/g5KGy2Chimju6fCu6SLI8sPOzVs.roa
File: g5KGy2Chimju6fCu6SLI8sPOzVs.roa (raw, json)
Hash identifier: L6pNPgSPJ0+13jdYsxQ/V6nnsku/zN5wNelCH1wFgBE=
Subject key identifier: 83:92:86:CB:60:A1:8A:68:EE:E9:F0:AE:E9:22:C8:F2:C3:CE:CD:5B
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 09A9
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/g5KGy2Chimju6fCu6SLI8sPOzVs.roa
Signing time: Sun 07 Feb 2021 13:10:03 +0000
ROA not before: Sun 07 Feb 2021 13:10:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38843
IP address blocks: 223.27.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2473 (0x9a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 7 13:10:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=839286CB60A18A68EEE9F0AEE922C8F2C3CECD5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:54:d8:ea:d9:be:a7:ff:da:31:74:84:8e:
34:47:d1:7a:da:27:b4:90:2e:7d:8f:a0:e4:e0:1d:
89:27:5c:6d:c9:76:6f:82:cc:88:a1:4c:d9:a5:ab:
57:f4:dc:28:b4:f9:a8:6f:06:9c:7e:df:a4:70:9c:
b2:58:13:8e:22:75:f8:29:85:0e:aa:67:8c:f6:7c:
a6:c8:c7:56:dc:d5:b0:c7:3e:16:27:ef:b3:9d:37:
b1:29:a8:43:5c:c2:60:c3:d1:ba:1b:f8:c8:b5:51:
1c:85:bc:50:bf:75:f6:86:fb:93:25:71:ec:1a:b2:
d6:9b:d8:f2:69:a4:cd:f0:3e:46:5c:ec:27:3a:f7:
b0:f3:26:98:04:4f:c7:37:66:b2:9a:ae:d6:d8:99:
9c:ab:93:08:1d:d0:43:e3:9c:40:05:48:d6:1d:08:
98:f9:0b:4b:c1:9f:44:b8:4e:7b:fd:2c:3f:09:8d:
d0:96:a8:27:9c:e6:ea:98:51:51:8a:d1:ca:7a:1a:
e5:d8:e9:3e:de:54:a7:c9:d2:f6:10:87:d8:77:e9:
24:9d:9b:6d:96:d9:90:37:a2:2e:8f:11:f8:62:9a:
b8:3e:1e:4c:f0:0f:bf:97:48:66:2b:fb:c2:db:13:
08:e6:7b:48:5c:1c:6a:62:91:e2:87:92:e9:06:11:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:92:86:CB:60:A1:8A:68:EE:E9:F0:AE:E9:22:C8:F2:C3:CE:CD:5B
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/g5KGy2Chimju6fCu6SLI8sPOzVs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.52.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:6e:65:27:6f:32:c2:2c:df:9e:03:dd:45:f8:17:c5:ea:9d:
c1:55:a9:ba:cd:34:36:36:68:27:9f:92:33:71:07:8f:77:a9:
db:1e:8f:7e:06:20:c3:fa:46:53:ee:43:5b:4f:bb:08:e0:68:
f1:17:b8:46:ab:2f:58:2d:f2:1e:ff:94:09:d8:84:08:a8:99:
d8:86:5b:d4:2e:2c:47:b2:78:4f:47:63:79:55:97:97:4e:2f:
58:8a:dd:13:5e:6b:cc:95:2e:a9:31:5f:1f:92:45:0a:6a:73:
7e:b6:e4:9b:3e:ab:41:ec:b7:85:ed:29:fa:78:48:97:d0:ac:
30:af:23:25:6d:77:8e:0c:20:13:25:fb:f3:2c:83:d0:51:bd:
2c:77:45:60:16:5e:70:6b:da:4e:90:2c:59:09:4c:91:cd:88:
f4:84:df:d7:23:06:3e:91:20:41:83:cf:3d:1f:ee:c0:63:84:
60:80:4a:96:2d:8d:47:83:37:31:b6:42:b9:b2:67:90:84:2f:
45:24:9b:d4:77:c9:e4:28:6e:a9:43:79:2d:26:5a:f2:9b:96:
22:f7:ff:7c:c6:f8:1a:c0:47:25:ff:d7:e5:6e:e8:4b:05:ce:
61:1e:a0:a5:b4:f7:8d:f1:bb:5d:fe:b1:0c:94:97:45:b0:cb:
8b:05:cb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org