Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/M-asLp0cE-NiJ0s4L6tgJ4UWccQ.roa
File: M-asLp0cE-NiJ0s4L6tgJ4UWccQ.roa (raw, json)
Hash identifier: 4cyMcMIdPf7iGrRkmYjfdDxxURqzJwEdPHQGELmv0F4=
Subject key identifier: 33:E6:AC:2E:9D:1C:13:E3:62:27:4B:38:2F:AB:60:27:85:16:71:C4
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0797
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/M-asLp0cE-NiJ0s4L6tgJ4UWccQ.roa
Signing time: Tue 29 Sep 2020 10:04:34 +0000
ROA not before: Tue 29 Sep 2020 10:04:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 124.155.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1943 (0x797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 10:04:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=33E6AC2E9D1C13E362274B382FAB6027851671C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d2:73:22:89:aa:45:0b:ae:9e:f8:4b:88:d0:
fd:21:96:11:25:ad:8d:fd:65:d6:c5:5a:9b:4b:07:
2e:c3:03:b2:1b:f7:71:70:e6:7c:29:11:87:c7:21:
a4:d0:c6:c0:e8:6b:aa:dd:e0:12:45:39:94:4b:c1:
47:f4:32:e2:69:af:4e:e8:48:c2:fb:2a:34:e8:36:
cb:c2:79:54:f6:cd:df:c7:2b:1a:cd:e8:82:15:34:
06:e5:6b:66:e6:92:4d:8f:25:cd:7a:c0:cb:98:5c:
ae:85:61:bc:10:4d:4e:a9:79:36:7b:46:51:c7:13:
85:f5:8a:40:d8:48:bc:4c:97:37:23:bd:48:2d:b2:
77:89:96:d8:5c:e5:a9:3e:fb:f2:d7:9a:b4:bb:4a:
26:2e:6f:10:6d:4c:cd:58:56:fb:b1:94:5f:0e:09:
32:ab:08:67:06:06:8b:c3:56:11:b5:f4:57:4c:62:
e2:5e:13:ee:fc:c4:25:25:57:4d:ab:5e:80:1c:2a:
b1:a6:da:88:d9:dc:33:e0:70:ac:62:5e:f0:b6:dc:
de:a9:1a:79:42:be:31:de:cf:e8:c2:5c:60:c1:0f:
d7:12:b4:4d:e4:a8:ba:15:e0:b8:9d:d4:c1:fa:aa:
d0:51:e7:db:bd:fb:cb:61:cf:7e:31:21:39:dc:c7:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:AC:2E:9D:1C:13:E3:62:27:4B:38:2F:AB:60:27:85:16:71:C4
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/M-asLp0cE-NiJ0s4L6tgJ4UWccQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.128.0/19
Signature Algorithm: sha256WithRSAEncryption
04:f9:29:f6:aa:ab:d6:b8:5a:44:f0:22:9d:02:57:f8:a1:01:
fa:2b:59:ce:47:72:99:1d:2a:36:28:fd:51:4e:d7:9b:5b:78:
06:8f:86:8f:f0:a2:76:a5:57:b1:74:1a:c4:c2:27:8b:9b:45:
0e:85:be:10:5f:81:a8:c1:0d:e4:6d:a2:ca:81:e7:34:27:f9:
d1:fb:d5:84:5c:b5:a7:e9:64:3d:3f:b5:c9:3f:82:6f:3f:51:
70:98:f1:71:e9:eb:67:59:d4:78:bf:99:c1:c7:62:bb:36:b5:
8b:f9:a8:fa:32:71:23:9b:03:a1:7b:ca:76:ad:7e:97:c9:58:
87:f7:4a:98:3a:3b:2b:2b:aa:91:90:20:83:53:40:b4:3d:18:
fe:02:68:e5:44:87:eb:15:1e:24:2f:c3:91:9a:20:b8:a9:4d:
e3:fa:bd:80:46:b5:4c:b7:5d:2b:8d:bc:4d:e8:94:d2:20:4d:
e3:13:ce:8c:4c:db:fb:19:9c:c7:05:08:9f:e2:5a:21:c1:7c:
69:ad:27:15:f7:0c:9f:97:b7:e1:53:a5:85:7f:a2:9a:bb:59:
b7:1a:d7:1c:6c:c4:ba:a8:f1:85:e8:58:2f:ec:f1:56:69:05:
89:8c:b3:46:11:bc:bc:71:ac:46:cd:3c:61:65:3f:7c:11:e3:
51:6a:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:04 2025 by rpki-client