Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/igkjrDvgGpaywe92aCJfdMdXmLk.roa
File: igkjrDvgGpaywe92aCJfdMdXmLk.roa (raw, json)
Hash identifier: k1JJ2ciZ+Hk6B7VoNgePIskY7EbI57PrrWLFF8CBvXk=
Subject key identifier: 8A:09:23:AC:3B:E0:1A:96:B2:C1:EF:76:68:22:5F:74:C7:57:98:B9
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0A7A
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/igkjrDvgGpaywe92aCJfdMdXmLk.roa
Signing time: Wed 29 Sep 2021 02:42:50 +0000
ROA not before: Wed 29 Sep 2021 02:42:50 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38843
IP address blocks: 124.150.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2682 (0xa7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Sep 29 02:42:50 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8A0923AC3BE01A96B2C1EF7668225F74C75798B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:e5:e6:71:a6:df:a1:18:c6:39:a0:84:d2:
8e:21:67:88:ee:8c:c0:e6:11:29:00:a1:e9:66:69:
62:e5:fd:8d:67:e3:dd:4a:ad:52:e3:9b:6b:b3:d3:
10:a0:6f:b5:a8:bd:07:a9:5b:bb:94:77:ab:df:04:
4f:2e:60:26:b6:c6:d0:3c:42:b2:32:8f:e4:cf:3d:
87:89:cb:1e:07:71:d4:84:9c:65:03:7b:f0:9a:d8:
43:af:32:55:29:ea:a5:18:5f:25:05:a7:41:57:c6:
6c:af:03:ab:d5:27:4b:64:24:22:f8:40:a1:92:1f:
c6:ad:fa:cd:08:63:d4:c2:bf:27:2c:fe:e6:e1:77:
85:74:5e:ee:04:30:be:fa:e4:32:98:5f:3c:90:6d:
10:32:4b:18:3e:0c:2a:72:63:7a:bb:d7:15:c0:c9:
53:07:51:60:96:44:f6:ae:0d:11:f1:df:bd:bc:50:
f1:84:96:56:82:30:61:6b:9d:54:d0:55:15:bd:68:
cb:66:69:02:d7:ba:c5:3c:58:54:58:2a:37:57:5f:
5d:c1:84:34:a8:d8:a7:bc:fc:89:71:33:7e:f2:08:
8d:3d:8b:7b:5b:25:4a:e8:63:47:f3:45:08:c6:d4:
e7:c6:d0:84:27:9b:c2:7a:59:c7:24:d4:c1:d6:c3:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:09:23:AC:3B:E0:1A:96:B2:C1:EF:76:68:22:5F:74:C7:57:98:B9
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/igkjrDvgGpaywe92aCJfdMdXmLk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.150.128.0/21
Signature Algorithm: sha256WithRSAEncryption
65:e2:1e:95:bf:4b:13:a1:8b:62:9c:46:28:a6:ea:b2:f1:c6:
53:20:f9:88:d8:53:b9:7b:74:91:0c:c3:91:3e:c3:52:ee:f2:
e0:e1:b4:63:3b:52:ad:bb:ab:ec:54:d5:7e:bc:44:76:75:08:
ba:58:1e:3d:f8:db:d7:bc:36:dc:63:3d:4a:7f:42:2d:cc:ce:
c7:61:01:24:df:30:68:b0:cd:59:c1:54:5c:97:1c:73:8c:6b:
65:5a:02:f3:42:04:4c:f9:b7:de:cc:35:c6:2c:8a:1b:23:0a:
a6:4b:c4:c6:05:58:e5:5c:61:8d:0c:12:af:88:96:a6:6f:33:
56:95:b8:84:d0:a4:d7:aa:c0:78:16:4a:e2:93:49:36:ef:90:
63:68:a5:42:47:57:03:99:64:5a:f0:48:3d:b8:98:e1:d5:10:
46:14:d3:f6:9a:62:bb:ff:8f:28:29:ac:2e:4a:4b:1c:15:51:
71:11:75:b8:b0:52:5b:c1:f0:0c:eb:9b:b3:40:1b:08:f2:80:
67:a9:fa:24:67:be:cc:83:9d:f0:92:62:a5:45:bf:87:b5:d5:
44:a5:89:ba:3b:f7:14:0b:08:8b:83:7d:e1:94:79:f8:25:40:
ec:eb:bc:97:35:c2:9d:53:95:09:3e:f0:6f:25:c0:9a:17:f3:
c2:b5:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:04 2023 by rpki-client on console-ams.rpki-client.org