Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/6ja9P6i7k5pDM52P4hMCHAWGe-Q.roa
File: 6ja9P6i7k5pDM52P4hMCHAWGe-Q.roa (raw, json)
Hash identifier: PD7DDtLHi85zXStqXkzXI+dwVhBVkNRUPgIg4Y0Ad+A=
Subject key identifier: EA:36:BD:3F:A8:BB:93:9A:43:33:9D:8F:E2:13:02:1C:05:86:7B:E4
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 08F9
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/6ja9P6i7k5pDM52P4hMCHAWGe-Q.roa
Signing time: Sun 07 Feb 2021 11:54:13 +0000
ROA not before: Sun 07 Feb 2021 11:54:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 115.43.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 7 11:54:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EA36BD3FA8BB939A43339D8FE213021C05867BE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:12:46:31:bd:02:15:ff:0c:71:df:39:b0:
05:ec:74:38:27:aa:e5:33:26:10:0a:74:1a:df:69:
46:ea:71:b3:88:48:cc:5b:e8:41:72:4e:e6:f0:5b:
9c:b9:91:41:88:3d:31:52:94:de:d9:02:11:ce:e1:
18:36:66:cb:10:96:52:09:4a:f1:66:37:69:0a:bf:
fa:9a:99:25:db:ba:af:af:f9:3f:54:14:04:b9:a1:
05:b8:a4:58:3b:25:3b:33:30:27:b4:53:a4:e0:46:
23:4a:a1:9e:7c:97:f5:53:48:cc:a7:2f:23:b3:f9:
a9:96:5a:32:9b:19:91:60:10:68:f7:3e:5c:a8:b7:
a4:15:c4:d9:12:65:8a:be:7a:c9:f1:89:b5:35:6d:
b3:24:b7:12:06:c3:e9:8d:ad:27:29:40:46:e2:43:
b4:84:77:3a:a1:62:df:44:b0:c3:6f:a7:58:9d:bc:
f3:f8:7f:c8:27:c9:60:d3:56:89:c2:dc:45:5c:28:
d1:42:f5:c9:21:9a:c7:07:bf:63:28:65:bb:17:fc:
3f:9d:ec:b8:ed:c8:01:f4:e0:bc:71:04:06:a0:ab:
c2:b5:e5:ca:0a:90:1c:b6:dc:a7:6c:77:c8:11:18:
9e:5c:a2:a4:fa:07:86:ab:f5:81:86:af:2f:e4:b8:
ae:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:36:BD:3F:A8:BB:93:9A:43:33:9D:8F:E2:13:02:1C:05:86:7B:E4
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/6ja9P6i7k5pDM52P4hMCHAWGe-Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/17
Signature Algorithm: sha256WithRSAEncryption
45:24:35:70:07:fa:8d:12:15:6d:d6:af:ca:14:d8:ed:5d:3e:
90:84:42:7d:6b:22:a9:bb:cc:a9:c1:fa:1e:ec:be:56:3f:6d:
3b:a3:fd:af:e0:07:a4:04:e3:a5:fb:bd:d7:6a:c6:2e:dc:ee:
b7:06:8b:21:74:70:74:98:f6:dd:42:4e:78:e3:72:a1:1a:ab:
d2:75:93:aa:3c:fd:b8:1e:0d:a3:23:c3:f0:53:b9:60:a6:97:
73:44:7e:51:4a:c2:32:ce:83:68:5d:25:15:af:44:c7:e4:90:
04:3e:86:c0:6c:7e:40:85:72:45:82:9b:e9:5a:91:24:1f:b9:
f3:ee:80:b2:f0:34:d3:4c:1f:00:72:da:63:fc:73:a8:ce:d6:
79:f7:32:ff:c9:0d:39:fc:77:de:99:7e:13:30:7f:b9:61:64:
f7:db:06:fb:3f:32:da:3e:1f:27:46:48:e2:32:2c:f2:85:97:
cf:91:9e:6e:78:81:a5:bf:f0:21:56:0b:42:ad:8c:bc:a1:6a:
60:3c:01:62:f3:8f:5e:28:c0:25:d5:dd:7f:2e:b2:1e:c6:ad:
e9:70:0f:77:f4:f1:df:7c:e6:ed:d2:1b:03:a9:36:31:bb:c2:
3a:e0:ae:2b:62:bf:17:0a:32:f0:9a:96:3c:4b:09:43:4d:ee:
5d:65:7b:1d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5
QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yMTAyMDcx
MTU0MTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEVBMzZCRDNGQThCQjkz
OUE0MzMzOUQ4RkUyMTMwMjFDMDU4NjdCRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoyBJGMb0CFf8Mcd85sAXsdDgnquUzJhAKdBrfaUbqcbOISMxb
6EFyTubwW5y5kUGIPTFSlN7ZAhHO4Rg2ZssQllIJSvFmN2kKv/qamSXbuq+v+T9U
FAS5oQW4pFg7JTszMCe0U6TgRiNKoZ58l/VTSMynLyOz+amWWjKbGZFgEGj3Plyo
t6QVxNkSZYq+esnxibU1bbMktxIGw+mNrScpQEbiQ7SEdzqhYt9EsMNvp1idvPP4
f8gnyWDTVonC3EVcKNFC9ckhmscHv2MoZbsX/D+d7LjtyAH04LxxBAagq8K15coK
kBy23Kdsd8gRGJ5coqT6B4ar9YGGry/kuK7VAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6ja9P6i7k5pDM52P4hMCHAWGe+QwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM
T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H
L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HLzZqYTlQNmk3azVwRE01MlA0
aE1DSEFXR2UtUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAdz
KwAwDQYJKoZIhvcNAQELBQADggEBAEUkNXAH+o0SFW3Wr8oU2O1dPpCEQn1rIqm7
zKnB+h7svlY/bTuj/a/gB6QE46X7vddqxi7c7rcGiyF0cHSY9t1CTnjjcqEaq9J1
k6o8/bgeDaMjw/BTuWCml3NEflFKwjLOg2hdJRWvRMfkkAQ+hsBsfkCFckWCm+la
kSQfufPugLLwNNNMHwBy2mP8c6jO1nn3Mv/JDTn8d96ZfhMwf7lhZPfbBvs/Mto+
HydGSOIyLPKFl8+Rnm54gaW/8CFWC0KtjLyhamA8AWLzj14owCXV3X8ush7Grelw
D3f08d985u3SGwOpNjG7wjrgritivxcKMvCaljxLCUNN7l1lex0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org