Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/MyCVXDNSt4N0-5o1UMWCMqd8_tg.roa
File: MyCVXDNSt4N0-5o1UMWCMqd8_tg.roa (raw, json)
Hash identifier: PIUXeOwM3tK6PiGWnkBnYAqs+GSIkl2Yl7+NLkoG3vA=
Subject key identifier: 33:20:95:5C:33:52:B7:83:74:FB:9A:35:50:C5:82:32:A7:7C:FE:D8
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0927
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/MyCVXDNSt4N0-5o1UMWCMqd8_tg.roa
Signing time: Mon 22 Feb 2021 14:08:25 +0000
ROA not before: Mon 22 Feb 2021 14:08:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 119.14.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2343 (0x927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 22 14:08:25 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3320955C3352B78374FB9A3550C58232A77CFED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:97:f8:e0:34:2e:f8:bc:2e:0d:3e:be:8d:
d6:31:a6:42:c7:12:e2:0c:a9:62:04:ac:f2:ea:0f:
92:cf:39:5b:6c:e7:df:e2:67:a6:b8:0f:a4:38:2b:
b4:f8:af:24:69:82:d5:56:9e:80:02:a3:64:dd:a0:
91:e8:dc:f0:60:4a:ef:3e:fb:6a:e7:1a:3d:9a:00:
be:b2:c6:ef:ac:eb:28:61:e8:f8:29:52:c8:0b:6f:
9c:d0:1b:be:40:c6:95:60:49:b1:f0:9d:82:57:5f:
6d:5f:6b:8c:e3:40:2d:b1:8a:52:1c:9b:3e:57:c4:
14:a1:91:4a:ff:b3:83:d7:7c:1b:cc:02:88:87:34:
3c:c1:cb:e9:a6:c0:0a:e3:94:93:9d:61:8e:c4:2a:
53:de:11:54:4c:85:a2:28:1c:81:9e:a0:9e:49:f4:
3a:2d:36:98:e3:c6:58:5c:f1:db:0d:09:84:0e:3d:
2f:42:3a:c9:6c:d8:79:e8:fb:67:47:af:f7:e9:13:
1f:80:6f:c7:ac:ca:02:ef:8d:89:cf:a0:40:f8:ff:
eb:2c:c2:51:bf:d5:09:73:ea:dc:23:67:32:9b:42:
9b:96:1b:0f:c5:8e:37:60:a2:32:78:f4:9a:9b:e4:
a9:28:9c:36:c8:fb:18:aa:c7:7c:ea:e3:69:44:ae:
96:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:20:95:5C:33:52:B7:83:74:FB:9A:35:50:C5:82:32:A7:7C:FE:D8
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/MyCVXDNSt4N0-5o1UMWCMqd8_tg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.14.128.0/17
Signature Algorithm: sha256WithRSAEncryption
11:6b:79:8f:79:da:17:7e:4f:a3:fd:d3:08:80:3b:15:35:ff:
ee:a9:1f:4b:3c:26:9a:3c:de:89:c9:22:43:b8:82:9c:92:35:
fe:f3:cb:a3:4a:d5:b1:92:50:93:21:51:5c:68:fc:41:44:1c:
d1:8f:da:c5:5e:d1:60:f1:8c:f3:79:58:20:fa:7c:91:74:8b:
85:f4:c8:1f:83:06:29:80:62:ec:eb:db:1b:dd:ed:a7:47:06:
f2:77:0f:84:49:32:14:ae:4f:c0:e8:fc:23:67:ca:3a:2c:3b:
d7:25:38:d1:ed:32:d7:59:02:7a:e7:5c:c1:53:b0:ec:0a:a9:
5e:3b:15:6b:6c:fb:30:e1:be:9a:db:0c:03:50:72:e1:a1:88:
98:c6:0d:e8:45:e8:13:d9:7e:50:3a:76:16:2e:0e:c5:6e:c9:
28:0b:16:28:90:a5:5d:16:26:c8:4c:72:d3:1e:72:0e:22:25:
cd:85:4e:4d:20:c9:f5:f6:dc:e1:6c:b6:1f:87:8e:9b:16:3e:
7e:5f:14:35:52:7c:72:4e:2c:0e:b6:1b:bd:14:ca:62:27:37:
fd:f2:ce:df:2a:51:6e:44:36:a3:31:66:91:c9:fd:95:ea:9a:
1d:ee:60:bb:4a:33:51:67:ba:1d:f6:b7:2b:4f:a0:a3:ef:bf:
0a:82:39:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org