Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/vL7vzLAB9kNeDyF9NzFkaXdb9wI.roa
File: vL7vzLAB9kNeDyF9NzFkaXdb9wI.roa (raw, json)
Hash identifier: BIe+ldYOTg/I4dgnBMDFggvcbbIQIKaV8aR1O5DiHxA=
Subject key identifier: BC:BE:EF:CC:B0:01:F6:43:5E:0F:21:7D:37:31:64:69:77:5B:F7:02
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0977
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/vL7vzLAB9kNeDyF9NzFkaXdb9wI.roa
Signing time: Sun 07 Feb 2021 13:09:17 +0000
ROA not before: Sun 07 Feb 2021 13:09:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 198949
IP address blocks: 223.27.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2423 (0x977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 7 13:09:17 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BCBEEFCCB001F6435E0F217D37316469775BF702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:66:94:01:17:07:81:28:d1:60:8e:5c:4d:
fd:b8:b6:17:ba:c4:14:47:81:64:b6:fc:c2:bc:ae:
17:b1:5f:c6:80:5b:96:38:70:bb:b3:bf:3a:3c:2c:
8e:d0:22:e7:76:80:58:05:1b:2d:1d:a7:22:00:bb:
86:ff:e6:9e:54:69:74:c3:c0:2b:a6:96:6c:a2:be:
ff:40:84:cb:72:fb:6d:de:ec:c5:c8:03:82:5f:bc:
68:81:76:59:83:45:c9:c0:a6:42:12:44:71:5c:8b:
08:31:53:8f:3c:36:c8:02:96:48:e8:d5:07:2e:db:
ae:4a:e1:6e:d1:3f:c0:60:ad:0e:6b:ab:dd:2b:b6:
8f:49:b9:09:cf:40:39:53:e7:34:a6:02:ad:e2:6e:
1c:eb:a7:c0:55:e4:df:5e:73:62:d5:1f:c4:3e:f3:
38:cb:a8:39:7c:87:89:f3:fd:42:7d:73:51:34:7c:
ae:f1:3d:e3:e1:25:5a:cb:42:32:2d:92:53:a2:c7:
9c:78:89:20:40:60:63:a1:57:1b:ef:ec:a0:95:8d:
a6:a3:95:bf:87:73:26:74:02:4b:68:a1:aa:f8:14:
e6:a6:24:64:cb:e6:ae:b0:54:a6:fa:a4:e5:ef:f1:
1c:63:d5:11:d4:5e:a7:b7:9f:32:72:94:ae:a7:62:
71:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BE:EF:CC:B0:01:F6:43:5E:0F:21:7D:37:31:64:69:77:5B:F7:02
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/vL7vzLAB9kNeDyF9NzFkaXdb9wI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:2d:af:de:79:05:21:a0:9c:98:dc:5a:39:c7:f4:09:d7:b3:
6b:54:31:50:d3:39:02:dc:fa:81:ab:70:1c:cf:a3:8f:d3:ac:
7d:83:9b:d1:92:64:9a:18:12:c1:84:23:3f:c0:de:df:f3:bc:
e0:32:4e:b6:03:22:b9:b5:86:7a:51:42:f1:87:dd:57:77:40:
84:3b:cc:c1:98:e4:30:84:dc:bd:53:6c:6f:53:09:24:12:14:
81:be:00:35:4f:94:63:62:ad:e4:85:f5:ff:a8:c5:f6:49:e0:
87:19:26:c7:16:09:7a:4e:4b:e5:b6:28:00:f1:46:84:13:eb:
3c:b7:26:b4:1d:9e:25:1d:b1:91:7a:bf:1b:6a:f2:2c:1d:9d:
cf:d6:70:f0:7d:f4:b4:a5:c6:4c:71:21:f2:f7:50:2a:8f:73:
26:c4:13:5a:3a:fb:45:9d:16:d5:68:f4:45:1d:57:ea:c6:27:
7f:de:84:2e:ad:be:02:f6:0a:12:6b:75:eb:e5:56:b7:24:0a:
2d:6a:c4:62:3d:ac:d4:2f:7a:63:e7:92:18:13:bf:3b:ff:3a:
9e:d1:40:5a:c3:58:26:4a:2f:33:4f:5f:11:9d:48:04:21:ac:
6f:53:ce:0d:6b:64:fe:53:a7:80:e0:01:ba:0a:65:49:4c:96:
9d:60:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:16 2023 by rpki-client on console-fra.rpki-client.org