Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/l5flcGAe0KArQ14MscfJn5L5O2w.roa
File: l5flcGAe0KArQ14MscfJn5L5O2w.roa (raw, json)
Hash identifier: mFRHkLuTtxB2KBCo9DCYuPr4+uBLls8dYQfoGxso+RY=
Subject key identifier: 97:97:E5:70:60:1E:D0:A0:2B:43:5E:0C:B1:C7:C9:9F:92:F9:3B:6C
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0CE2
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/l5flcGAe0KArQ14MscfJn5L5O2w.roa
Signing time: Fri 01 Sep 2023 09:39:53 +0000
ROA not before: Fri 01 Sep 2023 09:39:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38843
IP address blocks: 223.27.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3298 (0xce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Sep 1 09:39:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9797E570601ED0A02B435E0CB1C7C99F92F93B6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c3:84:5e:37:46:92:3c:dd:19:b4:c9:3c:30:
c1:30:d7:80:de:9a:d2:7e:b0:2e:68:b6:c9:ac:f8:
06:07:cb:35:82:67:05:8d:4b:4e:70:96:b7:58:ea:
69:88:04:f2:dc:30:7d:d1:79:bc:84:24:fb:95:22:
c6:7c:4c:21:f2:91:b4:84:10:30:b2:22:73:a2:77:
61:25:4a:bc:20:bc:60:4d:7d:78:d7:ab:60:d6:e7:
5a:37:d3:f0:a3:94:01:8c:cf:8b:19:70:b4:eb:b4:
c6:46:8d:ed:a2:73:6b:fc:ad:d0:3c:f5:1c:ad:b4:
e9:04:c1:89:bf:09:c4:8a:83:71:20:c7:ca:8a:d5:
3c:63:0c:d5:43:aa:94:17:a7:d5:8a:9f:16:de:a6:
73:80:76:d7:56:df:a3:01:38:b0:dd:ec:9c:9a:46:
f3:5b:2e:30:1c:de:cf:f0:13:f3:14:15:e1:9f:fd:
6f:ee:d4:68:0a:00:58:ce:9b:ae:71:de:1e:1a:58:
19:22:ec:4a:4c:f9:c6:5f:17:c8:55:71:47:b8:6d:
ce:f6:c6:aa:a9:cf:64:3c:08:2e:b7:8b:a4:d3:b9:
6a:65:74:53:ec:2d:72:10:38:7f:63:21:e6:9b:b7:
51:c0:61:2f:6c:f3:76:f2:4c:12:dc:ce:f6:c0:b0:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:97:E5:70:60:1E:D0:A0:2B:43:5E:0C:B1:C7:C9:9F:92:F9:3B:6C
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/l5flcGAe0KArQ14MscfJn5L5O2w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.59.0/24
Signature Algorithm: sha256WithRSAEncryption
80:33:55:55:fe:1d:fd:7d:b7:31:db:c5:27:da:5a:60:db:05:
9a:3f:d7:0e:6c:01:e9:13:9e:29:ee:fe:b0:82:4c:eb:2f:a0:
60:83:ce:5a:81:01:4e:cf:a7:83:d2:95:0f:05:54:4c:4f:9c:
d7:fa:07:a1:84:e6:dd:61:f5:28:e0:1c:16:8c:03:7c:7d:fd:
b3:c1:58:0c:ca:67:b2:e8:3f:c7:7d:89:5b:c1:24:19:84:56:
03:78:4f:ba:89:d6:0b:d8:db:d1:0e:57:d9:bd:70:19:7d:6b:
7d:98:70:20:0f:10:35:7d:1a:a4:ee:af:5a:1b:f4:52:3f:df:
ef:13:35:17:c4:16:89:1f:07:35:1b:33:36:05:15:18:3a:f7:
4b:a1:ea:73:3f:f8:1e:63:45:a7:ff:22:b2:47:ba:9f:15:47:
e8:24:6b:28:fa:ad:80:5e:9f:3e:5b:91:c5:20:d7:fa:ad:c4:
c6:51:c7:a4:b8:45:ef:d7:a8:29:19:ea:64:00:8b:1b:78:49:
3f:09:a0:4c:ec:9e:c0:45:96:a9:a8:71:3e:f0:d2:b1:17:54:
09:b8:92:d6:19:43:5c:9b:9d:d3:07:d0:d3:7b:0a:46:31:b2:
89:40:83:ff:5d:09:84:14:57:a2:07:5c:36:30:05:80:13:f2:
53:68:5f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:39 2025 by rpki-client