Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/zQQEs5TptAJNb8xLVjx5Q4T1rK8.roa
File: zQQEs5TptAJNb8xLVjx5Q4T1rK8.roa (raw, json)
Hash identifier: WI28ujcMz2AFXYWY93vPZPFHx0QK+p/lehkv+JE/OEg=
Subject key identifier: CD:04:04:B3:94:E9:B4:02:4D:6F:CC:4B:56:3C:79:43:84:F5:AC:AF
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0A98
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/zQQEs5TptAJNb8xLVjx5Q4T1rK8.roa
Signing time: Wed 06 Oct 2021 07:09:11 +0000
ROA not before: Wed 06 Oct 2021 07:09:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38843
IP address blocks: 223.27.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2712 (0xa98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Oct 6 07:09:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=CD0404B394E9B4024D6FCC4B563C794384F5ACAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:45:a1:7e:72:90:20:98:93:19:b6:a0:cb:
56:d5:4d:63:42:45:93:86:bc:87:f2:78:e6:61:92:
16:a0:d1:06:22:fa:bf:18:43:da:32:d3:00:f2:22:
27:44:8e:e2:ea:cf:76:47:c1:76:20:88:82:39:db:
9b:52:ee:25:e0:48:a8:20:0b:cf:5b:05:79:28:f5:
48:45:f7:96:1c:e3:aa:38:10:ca:df:2f:2a:3f:b7:
8d:5e:da:89:5a:73:f4:9a:00:c2:9c:c0:0b:a7:c6:
fa:2a:8e:04:a2:4c:d4:fd:1c:e3:a0:cf:43:cb:05:
1b:be:1e:1e:82:bd:7f:cc:35:03:95:30:74:3c:b7:
17:fa:bc:e4:8b:ec:6f:3c:d2:de:7e:e5:7d:09:b3:
c4:11:07:2b:7d:93:3e:ab:6f:f8:5e:c8:29:ad:0d:
e2:72:5e:90:cf:82:ee:60:52:fa:ef:77:1a:19:1f:
59:77:c9:3e:99:3c:7c:08:5f:eb:c4:45:54:53:a4:
10:29:46:c0:d3:6b:a3:d9:a4:63:f7:0a:96:36:c0:
ec:46:f2:72:5a:10:3d:34:7b:0e:fd:c8:30:0c:47:
18:ad:35:62:34:1d:66:83:a7:0d:36:a5:ea:cf:74:
b2:15:4e:a2:3e:b1:ce:ca:cc:5e:2e:aa:df:fb:71:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:04:04:B3:94:E9:B4:02:4D:6F:CC:4B:56:3C:79:43:84:F5:AC:AF
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/zQQEs5TptAJNb8xLVjx5Q4T1rK8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.49.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e7:b3:08:9e:70:36:28:26:e6:1f:e3:ed:37:11:25:02:99:
46:e8:21:97:d5:2c:d6:fc:b0:fa:ca:a6:49:03:18:62:8c:ed:
0c:bd:43:4a:ef:13:86:57:ed:d5:b1:cd:7a:b4:6e:82:c2:46:
8d:0f:79:d2:93:eb:2f:6e:23:8f:da:25:4e:e3:cc:ec:04:be:
3a:c4:e6:e6:72:e5:dd:76:32:d5:5e:82:c2:6b:c5:89:9e:dd:
f5:ff:66:17:7d:9b:8b:25:62:1f:b6:b9:d1:bd:73:84:6d:b5:
fe:f5:c4:43:e0:ec:6e:a6:e7:a5:f7:0a:e9:55:a4:c6:d0:c1:
9f:cd:3a:33:1e:f1:80:c5:ee:14:85:03:14:29:4c:af:3c:5c:
60:9b:ab:87:07:2c:d4:23:f9:7a:c3:44:41:b4:f0:b4:9a:46:
1f:94:9d:e9:62:fc:99:36:59:a6:f6:2f:57:ec:66:2e:45:07:
59:9b:2d:e2:14:d8:8b:7e:e9:ec:8f:d1:02:a5:c4:bd:dc:71:
c8:40:9a:1e:78:9a:0d:00:22:a9:0a:b2:38:d6:6c:48:67:d8:
92:de:1c:5d:c6:47:f0:de:62:4b:be:e3:85:b6:49:68:48:66:
5e:18:74:75:09:e9:51:7b:96:a7:8b:76:44:a7:91:0f:67:05:
aa:1c:5b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:13 2025 by rpki-client