Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/26yHVW-naVZRNcTrU6ncuOzVwzM.roa
File: 26yHVW-naVZRNcTrU6ncuOzVwzM.roa (raw, json)
Hash identifier: tpq4ZXRBff9ZwqxTitT57VJoDZA8LRYBmS6aMT1pv1M=
Subject key identifier: DB:AC:87:55:6F:A7:69:56:51:35:C4:EB:53:A9:DC:B8:EC:D5:C3:33
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 093C
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/26yHVW-naVZRNcTrU6ncuOzVwzM.roa
Signing time: Wed 03 Mar 2021 01:56:16 +0000
ROA not before: Wed 03 Mar 2021 01:56:16 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 115.43.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2364 (0x93c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Mar 3 01:56:16 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DBAC87556FA769565135C4EB53A9DCB8ECD5C333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2a:aa:6c:18:b7:2c:ec:0c:60:d9:b2:6c:cd:
0a:3c:18:f0:cc:b3:ab:b9:a9:f5:d3:d7:32:15:01:
4a:e7:0c:8a:7c:b3:e7:ee:7f:4f:ae:ac:de:ef:77:
43:2d:2d:21:b5:30:7b:f2:d8:91:bc:a1:df:41:f4:
b1:df:e5:da:43:6b:5e:21:b3:8b:77:64:45:34:7c:
b0:8a:30:ab:e5:04:5f:54:f9:24:28:97:96:e0:85:
5f:e6:39:d5:93:f5:9d:42:42:0f:d0:ad:ac:57:e6:
23:b5:7d:35:d7:74:6e:09:ab:df:75:d6:24:30:cc:
ba:8d:c3:31:ed:09:64:18:38:c4:80:e7:e1:71:bf:
77:44:3c:9e:f2:21:cd:c4:d2:c9:cb:56:f6:34:de:
ca:1e:26:9c:43:38:5c:03:b5:3f:6f:39:8f:7e:3f:
c4:42:45:71:a7:c6:10:df:93:c2:ee:2d:58:1e:25:
0f:21:0b:62:ed:5a:2c:75:1c:24:f0:8a:26:18:e9:
80:29:e0:8e:ef:b5:4a:1e:24:fd:94:f4:9e:e7:16:
69:0d:9d:81:e1:81:a2:85:56:3b:db:a4:ae:77:4b:
03:86:6d:92:24:ef:3f:75:74:4d:dd:68:1f:e9:6a:
bd:83:a3:78:fd:33:f7:96:d0:79:f9:ab:45:02:9b:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AC:87:55:6F:A7:69:56:51:35:C4:EB:53:A9:DC:B8:EC:D5:C3:33
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/26yHVW-naVZRNcTrU6ncuOzVwzM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:87:c2:06:d2:27:9a:e6:5e:f9:ca:94:76:58:13:4b:78:39:
65:77:30:7e:81:a1:1e:d2:ff:97:74:7a:20:e6:66:6b:85:98:
28:4f:bf:8e:fa:1f:8b:a5:64:c3:0e:81:12:53:5b:90:03:57:
27:0a:cf:3e:bd:e5:18:e9:4a:79:4e:9d:7e:1a:ee:2b:12:32:
b9:1a:b3:79:bf:5a:b2:95:7e:20:69:44:9a:d7:cc:5a:8f:e4:
50:be:49:59:cb:06:b5:65:8a:22:fb:a7:0a:25:21:e2:d1:a7:
14:7f:ec:eb:85:4d:7d:5d:02:8c:ee:76:1d:d6:5d:f5:b1:2e:
a5:00:2d:cd:5f:05:86:64:8a:57:95:1a:a1:3f:17:d0:88:74:
d2:6c:d4:04:38:96:fc:a5:36:23:5d:7a:20:96:44:70:be:ff:
4d:6b:62:12:a1:4b:59:96:99:d5:41:f9:c6:23:3a:11:64:a6:
78:2d:89:cd:bf:6c:15:30:44:76:27:b3:1f:9a:70:e8:31:62:
42:f4:6d:45:45:f1:55:fe:05:2d:09:41:65:87:60:4d:61:0b:
c2:de:2f:42:03:4e:5e:96:08:fb:6e:46:e0:c7:5c:f9:29:0d:
89:85:fb:43:ca:bc:8b:f3:0b:ca:39:31:51:96:12:95:fa:9f:
8c:d7:f6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org