Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/qjrgaRKC9jL74UpszVwe_sn_e-Y.roa
File: qjrgaRKC9jL74UpszVwe_sn_e-Y.roa (raw, json)
Hash identifier: 9Zw8CGTEm/IVWZ56skgjCQvOnnFkws3tQo7ayQSqLO8=
Subject key identifier: AA:3A:E0:69:12:82:F6:32:FB:E1:4A:6C:CD:5C:1E:FE:C9:FF:7B:E6
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 08C0
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/qjrgaRKC9jL74UpszVwe_sn_e-Y.roa
Signing time: Fri 11 Dec 2020 09:02:05 +0000
ROA not before: Fri 11 Dec 2020 09:02:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38843
IP address blocks: 124.150.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240 (0x8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Dec 11 09:02:05 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AA3AE0691282F632FBE14A6CCD5C1EFEC9FF7BE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:e5:e3:64:b8:dc:6a:35:65:b0:13:87:0b:
71:c2:f8:ba:ec:02:cc:ad:4c:31:47:23:02:ba:21:
79:f6:85:af:41:7f:f4:e0:97:e6:45:a0:d5:2e:bf:
2a:bf:70:fa:4d:71:2d:26:2e:f7:12:00:f7:92:14:
f8:4e:e1:54:4b:d3:cc:05:ad:bd:0f:91:07:de:b8:
84:23:47:0e:be:2d:19:f9:a5:86:42:3c:ae:55:00:
be:44:66:68:db:5e:ec:14:ad:23:96:20:81:8e:4e:
d6:c6:f4:dd:0d:36:7c:2a:d4:7e:df:00:39:9c:4c:
b8:f5:c9:0d:59:17:d5:94:88:3f:b6:13:f3:38:d4:
85:48:97:e0:16:6e:a6:f3:60:e5:86:24:b3:0e:a6:
d9:65:e0:4a:26:d8:02:71:d5:f4:10:6a:f1:85:b9:
f6:53:bd:ea:cf:a5:5a:bc:fb:63:94:30:67:6f:23:
96:6d:6d:ce:2c:d4:07:ba:47:52:2b:93:33:f9:1f:
ef:4c:79:96:f0:b7:02:cc:af:a6:a6:6d:da:7a:e9:
18:2d:53:b7:b1:5b:59:25:d6:c2:b1:03:e5:39:f4:
2f:0b:5a:71:c3:90:46:f3:96:b8:23:53:04:75:98:
a9:d3:9b:50:0d:d9:6d:3e:3a:ea:4d:3b:35:ab:43:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3A:E0:69:12:82:F6:32:FB:E1:4A:6C:CD:5C:1E:FE:C9:FF:7B:E6
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/qjrgaRKC9jL74UpszVwe_sn_e-Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.150.129.0/24
Signature Algorithm: sha256WithRSAEncryption
54:14:f3:d3:96:f6:fa:3d:12:c5:f9:64:2f:f7:35:35:2e:89:
2f:ad:d0:b1:7c:22:dd:a5:24:61:a7:e5:c6:81:d8:fc:32:aa:
f3:40:d3:21:48:fd:0e:f1:48:84:69:46:9c:e6:a7:ce:ea:d9:
ba:cb:b6:7a:b7:f7:40:03:05:7f:ea:7c:22:0a:a2:bf:f7:f6:
16:1b:98:72:21:20:04:70:d9:4f:04:be:35:96:30:49:80:7f:
fe:a6:ae:7d:f6:9c:94:43:32:b1:5c:3c:73:cc:da:50:d6:8c:
16:38:4a:8c:24:96:34:60:f8:db:a3:1e:76:89:de:1b:fc:0c:
8d:ab:6a:cf:fc:60:2a:22:1a:ab:5b:7b:b0:4c:76:e2:6d:a5:
e9:cc:af:ae:38:1f:ef:4c:3a:82:8c:5c:bc:ed:48:b2:4b:e0:
a2:41:a4:6b:ef:80:fa:80:42:e2:5b:5d:d3:4a:f0:1e:98:f0:
a1:fc:b6:25:1b:99:25:52:58:99:e9:d5:55:9a:d4:b8:98:a4:
59:07:8e:e1:60:d2:42:06:51:26:46:fd:c2:da:10:11:90:72:
ac:e6:87:b5:9c:c8:8d:84:82:d7:37:32:1e:06:8b:e4:b9:18:
f9:af:4f:37:30:33:8c:79:c7:84:91:7b:0d:f5:04:2c:83:97:
a5:7e:67:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:03 2025 by rpki-client