Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/rycfGJLTk88DomHjJOIeT85_tpw.roa
File: rycfGJLTk88DomHjJOIeT85_tpw.roa (raw, json)
Hash identifier: bCRpOCJCzUvpLAhE2GX/W+IRbZyD6LASM0nhJt0E418=
Subject key identifier: AF:27:1F:18:92:D3:93:CF:03:A2:61:E3:24:E2:1E:4F:CE:7F:B6:9C
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0CD8
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/rycfGJLTk88DomHjJOIeT85_tpw.roa
Signing time: Fri 01 Sep 2023 09:39:50 +0000
ROA not before: Fri 01 Sep 2023 09:39:50 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38843
IP address blocks: 124.150.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3288 (0xcd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Sep 1 09:39:50 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AF271F1892D393CF03A261E324E21E4FCE7FB69C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:93:5c:a9:01:7b:16:93:94:53:65:9a:3f:
92:21:41:cf:ed:4e:79:e9:db:d8:bd:95:e2:a7:0a:
bb:71:b3:46:ea:69:70:e8:ad:8d:72:26:65:d7:b9:
1c:ee:ef:6e:65:c0:61:46:50:4d:3c:5c:28:4b:e6:
1b:25:3b:70:00:d1:0e:dd:20:15:a6:ec:1e:bb:b6:
1b:c1:0a:51:3b:b1:15:3c:15:ab:4d:4f:29:84:8a:
cc:26:7c:08:12:db:72:fc:7a:d2:d7:54:db:35:68:
de:9c:4d:e1:bd:9f:36:19:0c:0a:04:09:42:1f:03:
75:8f:26:12:1a:e5:32:b6:68:8d:e6:09:d2:05:11:
44:f9:53:75:71:a4:f2:e8:57:76:11:38:d9:13:d0:
a7:9f:55:c0:d8:84:43:3c:43:c6:82:c5:ac:f8:56:
1e:77:e8:e2:1b:2d:ae:ce:4a:8a:14:37:99:13:41:
1c:59:85:03:28:54:e1:15:00:69:72:85:f1:63:c0:
7d:46:44:b6:f8:ec:2c:e2:ab:d6:13:37:d8:91:27:
b9:93:3f:89:4f:71:11:02:82:3b:b7:12:5d:2a:22:
1c:b1:f2:cf:5a:6d:d2:22:a5:e5:95:c9:e1:52:51:
33:2f:44:d3:e6:a9:fb:ac:61:53:13:f8:31:90:b2:
b9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:1F:18:92:D3:93:CF:03:A2:61:E3:24:E2:1E:4F:CE:7F:B6:9C
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/rycfGJLTk88DomHjJOIeT85_tpw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.150.132.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:da:34:ec:0e:f4:8c:a2:f3:b6:20:64:27:f1:eb:12:7c:b5:
82:fc:a3:78:09:dc:c2:f0:4a:9b:9d:06:04:6a:79:1b:4e:95:
4e:03:de:2e:31:d9:34:a9:a8:47:b2:f1:e0:ec:7b:cf:47:7a:
9f:bf:69:22:39:4e:3f:ef:b6:32:bd:5e:c1:09:ab:3e:13:4f:
b4:3c:82:68:24:00:07:6c:d7:da:4f:c3:22:f1:9c:6f:83:74:
70:68:f7:98:10:f6:2c:34:b6:72:9f:50:48:da:20:de:25:fb:
08:5b:24:b7:c2:7d:39:45:09:18:17:2f:6e:eb:cf:19:de:db:
6d:e0:6f:98:66:64:9e:11:34:1f:15:42:30:c3:14:2f:b5:46:
6e:ba:40:70:a6:f5:d0:b5:92:33:b0:15:8f:c1:16:be:60:e7:
f6:97:6a:43:6a:91:15:27:c0:94:5e:39:75:8e:54:c6:9f:2f:
09:ee:35:2e:0b:f1:d0:be:37:39:c8:2e:73:74:dc:a6:9c:98:
1b:4b:c3:b5:9a:35:6d:19:55:65:3e:1b:ed:b1:1b:d6:03:67:
b8:f1:6a:e7:19:8b:76:6f:19:cf:8c:44:e6:67:32:b5:1c:90:
9d:93:91:df:67:e7:b1:ac:ae:2c:63:5f:14:91:eb:55:8b:3a:
57:8a:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:58 2025 by rpki-client