Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/uOE3pEK4boJ18V0DDs9-iV-4PxA.roa
File: uOE3pEK4boJ18V0DDs9-iV-4PxA.roa (raw, json)
Hash identifier: 6Gm1GAfp1EVNwLDKZPe8a+DIVkZN84GQXrGD5mmAl/s=
Subject key identifier: B8:E1:37:A4:42:B8:6E:82:75:F1:5D:03:0E:CF:7E:89:5F:B8:3F:10
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0951
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/uOE3pEK4boJ18V0DDs9-iV-4PxA.roa
Signing time: Sun 07 Feb 2021 13:08:38 +0000
ROA not before: Sun 07 Feb 2021 13:08:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 198949
IP address blocks: 124.150.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2385 (0x951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 7 13:08:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B8E137A442B86E8275F15D030ECF7E895FB83F10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:72:50:dd:a5:2a:92:0a:88:01:f9:ab:02:
e2:af:ef:fa:98:6e:83:0d:cf:8c:ff:9e:a2:a7:3d:
21:c5:36:22:6f:81:6c:22:2f:36:01:b6:b2:72:f6:
62:8b:5c:ff:82:a1:fb:45:61:ff:49:df:c9:c2:76:
9b:ee:2a:9e:fe:b5:86:d2:51:b7:d1:3b:d7:50:a3:
b5:33:1e:13:37:1e:3c:48:e3:35:af:76:88:fb:8c:
9c:4a:1e:33:fd:76:7e:92:90:c5:45:bb:70:37:e8:
8e:08:5b:c9:5c:ca:84:b1:36:bc:9d:5e:19:fe:dc:
55:1c:f9:67:ef:04:1c:6f:41:94:1c:7b:f2:18:0b:
5d:fc:01:c7:d3:e5:a5:94:ef:de:b3:11:de:b9:12:
d9:5e:9f:fe:af:a7:c9:0e:a9:70:45:2a:66:6f:01:
07:0a:4c:06:15:2c:0a:09:96:3e:ed:97:39:be:54:
e8:22:4f:65:11:61:7a:74:d1:46:e6:d1:a2:09:42:
32:da:a0:db:d2:02:16:66:58:4c:e1:37:df:ff:1d:
ed:2d:36:ca:a4:09:2d:3c:58:7c:13:78:8e:1c:f6:
05:d7:88:18:86:2e:45:79:39:f9:f6:3f:70:54:0b:
9d:85:31:1d:cb:fa:37:06:d8:31:ba:33:8b:f1:8f:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E1:37:A4:42:B8:6E:82:75:F1:5D:03:0E:CF:7E:89:5F:B8:3F:10
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/uOE3pEK4boJ18V0DDs9-iV-4PxA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.150.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:cb:54:ad:f5:6a:7e:16:80:6d:f9:99:9f:11:1f:b0:5f:44:
65:c9:4e:d0:af:d6:f2:23:3e:d9:87:e4:14:fb:09:b6:90:94:
39:b4:8b:19:6d:94:2a:6c:e6:cf:0e:a2:c3:3b:0a:03:d8:0b:
b2:b5:1a:73:27:be:55:f9:08:d9:94:da:21:ce:62:c9:bb:99:
7d:bf:a2:26:eb:9f:89:20:2c:5b:cd:6e:ca:a9:6b:b8:16:7f:
18:c3:92:0a:c8:61:fd:7b:72:59:f3:53:38:4d:54:74:d8:06:
7b:45:ec:18:0c:10:e0:8d:c5:48:f9:a1:36:90:1f:21:67:e5:
f0:03:17:71:73:c4:69:52:d6:38:4e:30:22:41:88:18:ff:06:
e7:7f:c5:05:dc:d7:82:ad:57:6d:62:9b:63:e9:cc:97:76:59:
aa:8e:72:e3:0a:58:5c:ca:35:dc:c2:fd:43:12:73:ab:ba:a5:
6f:8f:b3:a9:90:0f:76:18:11:bb:7c:5e:d4:94:9e:e8:d8:b6:
40:9b:3c:e7:fb:3f:c9:cb:2e:9e:86:53:71:b7:e5:28:0b:d0:
4e:a9:0a:44:c0:ff:fe:d6:79:a2:2c:cb:3c:f2:ea:76:a3:88:
87:74:0d:90:80:54:e3:15:09:5d:a3:8e:a2:83:09:d7:4f:df:
03:70:3a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:04 2023 by rpki-client on console-ams.rpki-client.org