Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/in7fjJR01NQdSjoSCuutHxNXT9Y.roa
File: in7fjJR01NQdSjoSCuutHxNXT9Y.roa (raw, json)
Hash identifier: hKZXVqjvdVlFbVkWciKw+ud8WPLj/Ejb5uywL3e40CY=
Subject key identifier: 8A:7E:DF:8C:94:74:D4:D4:1D:4A:3A:12:0A:EB:AD:1F:13:57:4F:D6
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 08D0
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/in7fjJR01NQdSjoSCuutHxNXT9Y.roa
Signing time: Fri 11 Dec 2020 09:04:13 +0000
ROA not before: Fri 11 Dec 2020 09:04:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38843
IP address blocks: 223.27.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2256 (0x8d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Dec 11 09:04:13 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8A7EDF8C9474D4D41D4A3A120AEBAD1F13574FD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:0f:1b:7a:b3:96:f5:df:24:c0:67:94:87:
e7:11:2d:ca:d1:e6:c7:b7:9e:d2:37:2b:99:1e:18:
e5:7f:81:63:dc:0f:d3:20:96:df:bf:e5:0a:ac:08:
5b:40:45:2f:33:ff:45:06:1f:14:42:f0:0d:15:d5:
29:db:7e:2f:43:d9:ad:69:53:8b:12:32:db:0f:db:
26:69:89:43:18:34:c4:5a:df:38:d9:30:7a:d4:a3:
7c:ec:ab:0e:b5:b7:94:1f:e5:d7:a2:f2:ad:f7:a7:
5f:19:ef:b3:35:cd:7d:0d:11:9a:82:6d:f8:40:f9:
07:cd:70:79:2f:23:3d:89:77:2c:f0:e1:e8:47:9b:
66:30:2f:70:9a:9c:43:9b:7c:f2:64:d3:7d:cb:23:
20:0d:08:73:c2:ab:b9:28:16:f9:5f:a7:a6:8f:12:
32:ea:9e:d5:a7:9c:f4:a3:7b:f7:41:71:e1:4b:a8:
ac:72:e9:c0:e1:d9:75:e2:50:99:5d:cf:7a:a4:4f:
32:3f:d2:06:f6:f6:d0:59:54:3f:1d:48:43:79:5b:
9b:e9:3b:82:f0:74:a5:b1:5e:61:64:0c:fa:df:d1:
4b:5d:ce:16:ef:1f:3c:17:a5:8c:0a:cb:26:df:e5:
53:71:e5:19:d3:2a:12:c9:66:c7:bc:65:7a:44:ec:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7E:DF:8C:94:74:D4:D4:1D:4A:3A:12:0A:EB:AD:1F:13:57:4F:D6
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/in7fjJR01NQdSjoSCuutHxNXT9Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.33.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:af:2d:cf:b4:44:5e:e5:c3:09:40:9a:08:88:16:0b:cb:1c:
7d:c1:90:38:b7:41:17:e7:17:00:eb:b1:f3:55:19:fd:45:ff:
da:eb:e7:ae:7d:1e:66:7b:5c:54:34:15:b4:40:8f:3b:a9:0e:
44:1c:98:28:da:50:3b:28:19:88:b9:32:f4:50:28:84:cb:b7:
61:47:32:35:a7:e6:d8:a9:e5:cb:c7:a0:91:a7:66:cc:f9:d5:
b6:a1:1b:95:7a:be:97:b2:bd:7d:7d:66:a9:43:b8:81:60:92:
a7:e7:3e:a9:75:15:5e:cf:6a:f6:1b:bb:f3:eb:a5:58:ac:1f:
c4:b4:79:83:b4:3c:63:bc:73:2a:b0:68:2d:96:31:bf:55:cc:
60:3b:6a:78:69:ba:3d:18:99:f4:b8:47:df:02:ee:68:ed:a8:
5d:fc:18:5b:1a:41:d5:52:5e:f0:a5:2d:fc:89:ee:e1:23:c5:
50:af:51:40:e7:10:b5:cc:15:8c:24:97:f1:47:5f:46:c6:a1:
5d:26:fd:12:53:35:92:49:64:cf:d7:91:59:44:19:23:85:17:
35:d9:48:10:50:7c:f3:f9:2b:8d:63:de:8b:d9:20:be:f0:b1:
cc:b4:bb:a3:aa:28:73:bd:19:50:46:f3:06:a7:d3:48:e7:13:
cd:f5:2e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org