Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/w-Y3PwhZtUlN2Zr4mZwPhVS-6NI.roa
File: w-Y3PwhZtUlN2Zr4mZwPhVS-6NI.roa (raw, json)
Hash identifier: 6PjrA30GJEIoevNHUAGwH433Jq/eZVrkTz4niueEozU=
Subject key identifier: C3:E6:37:3F:08:59:B5:49:4D:D9:9A:F8:99:9C:0F:85:54:BE:E8:D2
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0BA9
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/w-Y3PwhZtUlN2Zr4mZwPhVS-6NI.roa
Signing time: Thu 15 Sep 2022 02:42:35 +0000
ROA not before: Thu 15 Sep 2022 02:42:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38843
IP address blocks: 223.27.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2985 (0xba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Sep 15 02:42:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C3E6373F0859B5494DD99AF8999C0F8554BEE8D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:01:0a:45:8b:91:70:fa:8c:40:e0:bc:7e:7b:
0c:80:11:06:f7:95:95:80:f6:d1:96:29:b6:ea:ca:
f7:91:4a:28:5e:59:fd:6a:70:84:ee:c9:fd:03:d3:
34:c0:d2:b8:4a:d5:68:29:b4:38:2b:9b:0a:d2:b3:
4b:8c:33:42:11:1d:91:e9:bf:a0:7d:fe:33:00:6a:
e3:92:77:09:e9:df:b8:2a:d5:86:c7:30:02:9d:16:
0c:7b:d6:72:2c:ee:24:8d:c2:42:f1:18:96:d3:60:
80:52:c3:88:df:96:af:0a:22:8d:ef:fc:ea:87:f3:
c6:7a:63:20:37:d4:86:5f:96:33:9c:32:a6:05:e0:
dd:61:3c:54:d3:e6:d5:ad:3f:7f:93:05:8f:9b:c3:
14:07:e8:ec:2a:91:06:13:89:39:36:e3:1f:84:1f:
2a:61:12:91:5f:72:02:10:f1:eb:6b:20:63:0b:9e:
98:02:6e:cc:ca:90:9e:87:5b:ec:17:1e:d1:d6:a2:
c6:a1:9b:5d:50:02:23:be:26:cb:01:6a:da:86:92:
8c:9d:91:26:18:19:92:49:fd:f7:f3:a8:b5:20:de:
1b:6c:e9:ea:38:6d:c0:ab:d8:07:fa:a6:2c:fc:fb:
df:ab:ec:88:4a:e7:7d:bf:2b:fe:7a:dd:0d:54:77:
aa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E6:37:3F:08:59:B5:49:4D:D9:9A:F8:99:9C:0F:85:54:BE:E8:D2
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/w-Y3PwhZtUlN2Zr4mZwPhVS-6NI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.35.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ba:06:f0:8e:79:e9:df:a2:16:86:d3:f7:8c:e4:e4:e3:aa:
f0:b4:07:3c:14:6e:1b:23:e7:3a:31:c5:02:19:06:af:b2:e4:
95:c4:d0:98:9d:c8:08:8b:69:54:5a:02:32:6e:31:97:c7:ab:
ce:89:ed:4b:30:ae:7f:0d:55:47:ce:c6:83:69:51:06:df:ad:
7d:ce:01:e5:c6:33:61:d0:4d:81:17:54:12:ac:07:67:26:9c:
41:d8:f6:ae:5c:86:3d:c4:48:41:f0:d8:4a:da:51:3d:62:9f:
47:be:34:28:a9:d7:d8:00:0d:51:e5:44:16:21:a4:cc:23:d7:
51:b9:40:9d:06:a5:2b:d6:f7:e6:c3:88:74:25:72:49:ca:b5:
d3:0a:14:b6:40:57:90:37:9b:fa:ce:37:76:88:af:a3:af:c5:
a3:83:90:73:0c:2d:dc:25:e4:51:e4:23:f9:0d:2c:4a:0d:9d:
84:d8:27:9f:1b:e1:84:1c:7d:15:53:5b:4e:5c:dd:2d:1c:a7:
73:04:67:09:c7:41:bf:fa:ca:ba:b8:28:98:00:b8:df:8e:4f:
5f:21:27:de:2a:b7:36:2a:4d:0b:8f:a5:48:40:d0:70:2e:c3:
02:1e:73:d2:6f:cc:92:68:ac:34:c1:cc:37:5c:5f:aa:e6:c3:
fc:d0:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org