Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/3U-SHlU_Mz8nTtyMJsfaRlp-C14.roa
File: 3U-SHlU_Mz8nTtyMJsfaRlp-C14.roa (raw, json)
Hash identifier: YE+NiYYtGQu4gHbotnpwFZNSXOqUp6xPAB+hKDxTSBI=
Subject key identifier: DD:4F:92:1E:55:3F:33:3F:27:4E:DC:8C:26:C7:DA:46:5A:7E:0B:5E
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 09E8
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/3U-SHlU_Mz8nTtyMJsfaRlp-C14.roa
Signing time: Wed 29 Sep 2021 02:40:33 +0000
ROA not before: Wed 29 Sep 2021 02:40:33 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9416
IP address blocks: 202.151.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2536 (0x9e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 02:40:33 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DD4F921E553F333F274EDC8C26C7DA465A7E0B5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:95:90:65:87:f0:1f:37:11:4b:64:1a:5c:
6d:6e:e0:6d:b2:67:e8:80:77:ed:77:8a:71:07:19:
c7:b7:c5:40:7d:54:17:e1:40:78:48:c1:58:78:cd:
58:7d:05:7a:dd:1f:cf:66:bf:36:fd:b8:7c:5b:b3:
78:23:68:de:64:cb:cc:1b:6f:c5:a0:0b:2f:5c:84:
e6:44:61:78:e6:ed:21:85:01:8b:ec:df:6b:32:07:
b5:cb:94:57:6f:e5:78:2d:f1:c7:05:88:14:29:6b:
1e:93:ba:07:8b:b4:08:ec:f1:19:d4:30:81:9f:6b:
ac:49:e3:0e:13:de:10:aa:e5:68:1e:77:bb:7f:5d:
fb:2f:c3:b6:ff:f1:b0:cc:bc:63:24:fe:d5:12:48:
4e:5b:82:d5:2c:e7:a5:e6:51:03:b6:04:3c:27:e2:
3f:3f:a1:e8:ab:a9:cd:34:0b:da:3c:3a:95:a9:68:
fd:f5:d0:81:3f:d2:51:25:03:c2:84:a5:bd:9a:93:
bf:c6:ff:a1:0e:44:74:3c:a1:d5:bf:00:66:35:bf:
aa:10:6a:cf:6e:34:c2:8e:2c:83:6e:a7:52:85:b8:
47:1a:f6:85:f6:f1:76:f4:b3:30:55:b7:8d:6f:11:
70:93:2d:ad:46:39:83:e8:87:a1:37:7b:3d:3c:8b:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4F:92:1E:55:3F:33:3F:27:4E:DC:8C:26:C7:DA:46:5A:7E:0B:5E
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/3U-SHlU_Mz8nTtyMJsfaRlp-C14.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.151.48.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:50:2b:f9:83:a6:5f:08:b7:8e:6a:47:4b:16:3b:a1:b9:0c:
0a:6f:e2:4a:10:41:c8:57:aa:c0:cb:74:1f:5c:7d:f6:e9:be:
a5:5a:36:6d:28:54:55:0f:69:66:0f:b4:52:53:9b:10:b3:64:
13:3d:f3:59:99:be:c3:ec:ab:42:99:83:7c:e2:10:52:15:f8:
db:28:fa:b2:47:d6:7f:7d:67:e6:b9:5d:da:d4:07:09:2e:03:
78:45:3a:91:42:aa:0e:5f:fa:13:05:fc:c5:6f:a4:41:d1:4f:
b3:3b:c2:1a:12:92:ee:5c:0c:55:0d:fa:1c:12:57:70:1d:a1:
45:63:16:6c:2a:b3:38:b9:7b:14:e6:44:19:b1:4d:28:75:df:
cf:60:75:d0:80:1f:16:6f:37:8a:6d:0e:7a:56:70:6a:45:68:
59:f6:ec:6f:f3:e7:d8:94:55:f8:94:ce:1c:9e:2b:17:46:15:
1a:cf:3f:17:e0:27:f8:fc:bd:98:e2:00:d9:0f:2d:32:3a:d0:
0a:1b:80:11:1e:ae:51:a6:47:3b:dd:4e:44:37:82:21:8e:51:
21:44:c5:f0:12:e8:48:74:e9:08:b5:cb:ee:d0:7d:cc:d2:70:
5a:99:37:5f:cc:6b:5a:88:68:30:27:ce:33:90:71:90:0f:03:
3d:9c:b9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org