Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/AS_y7LX171eBl2-6yRbLkNY029A.roa
File: AS_y7LX171eBl2-6yRbLkNY029A.roa (raw, json)
Hash identifier: r486F97lsw4XyljOJC+LbYmaX2ceF8IrpunySPBH4QY=
Subject key identifier: 01:2F:F2:EC:B5:F5:EF:57:81:97:6F:BA:C9:16:CB:90:D6:34:DB:D0
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 078E
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/AS_y7LX171eBl2-6yRbLkNY029A.roa
Signing time: Tue 29 Sep 2020 10:04:32 +0000
ROA not before: Tue 29 Sep 2020 10:04:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 115.43.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1934 (0x78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 10:04:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=012FF2ECB5F5EF5781976FBAC916CB90D634DBD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4c:0f:07:f5:06:4f:9d:e8:da:71:bf:0f:a4:
d7:f3:54:9a:36:3a:43:8c:b7:55:ad:5b:2d:26:a5:
e9:e9:6b:7f:37:37:c9:d7:5e:a4:d5:1b:40:d6:61:
5c:a8:28:07:69:eb:6f:97:e1:12:c1:f2:b9:63:d6:
47:9a:23:43:86:13:8a:22:58:fb:62:0f:b2:d0:ea:
c0:b5:79:70:99:1c:b6:6e:9a:ca:d6:b2:3b:90:f3:
ea:3b:f1:3f:88:54:c3:d9:99:18:88:7c:dc:1d:0b:
38:c1:55:7d:13:eb:e0:7f:e4:d2:e8:35:84:02:1e:
dd:2e:3e:1d:43:bd:fc:8d:65:a4:7d:91:ee:0e:7c:
9f:4c:bd:10:af:90:6f:cb:56:c1:b6:a0:de:85:58:
2b:f4:93:16:82:3a:b3:d3:a3:39:fc:02:c0:67:39:
77:67:7a:4e:74:69:27:3a:5a:da:22:b6:50:06:d6:
d7:6b:c2:49:cc:a4:57:fe:fd:5a:5d:52:68:19:af:
8e:72:b1:0f:46:5b:06:05:b7:14:e1:6b:cd:50:9f:
e7:c3:54:42:16:fd:8c:38:96:39:63:36:30:8c:91:
ee:0c:ca:18:69:02:ed:e7:5a:3d:5e:62:28:51:f4:
d3:38:00:fe:11:ef:9c:16:b3:df:e3:ec:b1:e3:e8:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2F:F2:EC:B5:F5:EF:57:81:97:6F:BA:C9:16:CB:90:D6:34:DB:D0
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/AS_y7LX171eBl2-6yRbLkNY029A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/17
Signature Algorithm: sha256WithRSAEncryption
0b:c2:a4:fc:16:c9:21:d9:65:88:8a:f2:12:2d:ce:91:f4:d3:
97:50:f5:83:65:54:68:c1:ec:d0:31:e9:31:5d:d3:12:fa:35:
cf:91:c3:77:28:44:b0:43:2a:63:73:5a:3e:23:89:45:7f:f0:
76:bb:ad:5e:02:79:4d:68:6a:ee:a8:17:74:f9:20:c9:bf:6b:
69:26:ff:15:a5:35:bf:98:4f:44:21:06:98:10:23:91:5f:34:
1e:0c:c9:85:0b:76:00:08:68:e3:f2:80:db:74:b6:ce:1b:87:
0d:3c:9f:b8:b5:4a:df:f4:97:d9:23:f9:fc:1f:a2:57:ee:27:
af:9b:6e:9c:db:59:63:2c:b6:b0:ed:be:8a:7e:b3:c3:05:88:
ef:bf:11:68:d8:98:ce:87:50:85:01:7d:9c:46:70:63:fc:6e:
5d:3f:0c:0b:be:b5:b6:6c:27:63:b4:64:59:21:01:2d:22:a5:
41:05:7a:31:06:8e:94:b1:ed:0e:dd:1c:5b:7a:09:85:41:2c:
0b:93:84:2b:5f:6d:46:07:1d:e0:a4:c8:2b:9e:eb:c1:09:14:
60:46:0b:f5:4e:95:43:0b:bd:b5:41:9d:7d:8e:c0:99:0a:ef:
28:33:42:59:6d:fd:70:58:a2:b8:02:2a:91:99:ee:4c:f3:a5:
3f:a8:f0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org