Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/JbB5m1jVA_duyCs_FJPInMR8XfI.roa
File: JbB5m1jVA_duyCs_FJPInMR8XfI.roa (raw, json)
Hash identifier: QysvL2aR9arcUAr0wljNFG11N+nBV7vLjAqNJKY/bAc=
Subject key identifier: 25:B0:79:9B:58:D5:03:F7:6E:C8:2B:3F:14:93:C8:9C:C4:7C:5D:F2
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 09FE
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/JbB5m1jVA_duyCs_FJPInMR8XfI.roa
Signing time: Wed 29 Sep 2021 02:40:39 +0000
ROA not before: Wed 29 Sep 2021 02:40:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9416
IP address blocks: 115.43.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2558 (0x9fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 02:40:39 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=25B0799B58D503F76EC82B3F1493C89CC47C5DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:9b:dc:d3:75:45:26:db:be:19:98:22:f9:
d5:00:1c:e6:fa:77:dd:61:02:96:c3:44:a9:ad:11:
d2:51:c6:e7:ae:16:81:cd:52:f1:97:a9:fa:23:25:
33:77:0e:6f:e4:68:db:9e:d4:c9:90:1b:ff:3d:41:
f1:92:f5:92:9c:bf:1f:16:68:ff:04:a0:12:bb:35:
a2:7f:93:6d:4e:d6:fa:ae:08:2d:c4:42:2d:cb:6f:
5c:56:7b:dd:27:1f:86:23:86:4e:0d:69:52:33:32:
e6:8e:45:7b:32:98:4c:1f:55:f2:fb:12:08:8e:91:
60:3d:64:69:75:04:01:77:95:bc:5c:91:c0:15:f9:
fa:a8:c5:36:06:c7:64:e5:9b:f3:37:8e:d8:8d:6f:
f6:71:60:e5:44:c6:1f:34:ec:91:62:11:ec:ea:13:
0e:76:e8:a9:6d:65:5c:1a:e8:20:8a:39:6a:f0:6c:
cd:73:d4:10:da:70:8a:ef:5a:17:09:9e:63:e9:f6:
cd:95:cf:79:67:22:2d:c8:e8:db:ae:1b:a5:fb:5f:
3d:33:85:ff:77:c2:ea:41:72:83:e1:21:41:22:5a:
07:c9:86:98:17:f7:c0:13:60:66:95:40:7f:a6:31:
58:a3:c9:c5:bd:5c:e7:b5:d4:96:3c:3c:30:e3:f4:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B0:79:9B:58:D5:03:F7:6E:C8:2B:3F:14:93:C8:9C:C4:7C:5D:F2
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/JbB5m1jVA_duyCs_FJPInMR8XfI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/17
Signature Algorithm: sha256WithRSAEncryption
27:db:1b:6f:c3:7c:90:28:dc:57:39:83:34:a6:d0:a8:25:3b:
fa:78:39:86:1a:a0:1a:2c:d9:4c:db:cb:1c:e9:8c:37:e2:41:
7e:49:6f:7b:9d:e4:04:2b:eb:fa:40:74:7d:00:bb:bb:18:8e:
16:9e:90:97:1f:55:30:76:0a:d3:fc:8b:5d:69:59:4b:91:69:
a7:65:41:30:da:95:90:73:cc:b8:72:b3:88:27:f4:fa:15:e8:
0d:29:84:ea:70:6a:8d:23:1c:67:00:cc:c4:47:30:14:37:ed:
19:08:26:0c:cc:38:79:17:85:84:dc:59:d3:56:f4:72:5b:fc:
48:a9:ee:07:4b:8f:5e:06:e0:69:e7:52:d0:45:9f:ed:6d:bd:
0a:b0:5e:54:97:d1:27:8f:65:32:08:a1:bd:4e:df:84:f1:74:
11:2d:0f:ce:4a:e1:f0:56:8a:6c:c1:10:a1:1d:21:a0:eb:14:
86:26:ff:b3:1d:fc:3c:41:02:c8:34:44:a7:9e:c0:bb:f9:29:
07:d3:0a:73:d6:bc:71:61:4a:51:93:f4:03:78:67:ad:93:41:
f8:31:1b:23:5f:fe:73:00:2e:4e:18:33:7c:f1:4d:85:90:6d:
8e:d2:fd:09:00:d5:a9:4d:b2:70:d8:8b:86:2a:1d:71:6f:10:
20:e6:0c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org