Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/NT0QOk-H0JY79kI4dnNaCMNF83s.roa
File: NT0QOk-H0JY79kI4dnNaCMNF83s.roa (raw, json)
Hash identifier: XM2nq/lktD9gzkSxzmH+LBOSXPTFrjdq3Pwa+nUVXAw=
Subject key identifier: 35:3D:10:3A:4F:87:D0:96:3B:F6:42:38:76:73:5A:08:C3:45:F3:7B
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 093E
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/NT0QOk-H0JY79kI4dnNaCMNF83s.roa
Signing time: Wed 03 Mar 2021 01:57:41 +0000
ROA not before: Wed 03 Mar 2021 01:57:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 115.43.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2366 (0x93e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Mar 3 01:57:41 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=353D103A4F87D0963BF6423876735A08C345F37B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:a4:28:29:0b:84:84:8e:9a:bc:d5:f0:11:
55:b7:6b:34:3c:9c:39:ce:20:f4:20:95:d5:56:e0:
5c:38:39:d8:b1:00:f4:b5:e9:d0:b9:e3:3b:91:61:
be:bb:84:c0:de:fb:17:b7:0a:2a:06:cf:34:40:36:
cb:c5:2b:5f:61:6b:02:e0:d5:6d:16:0e:6b:5d:6e:
88:3f:6e:a7:48:6a:91:a7:76:b2:f0:6b:74:a5:57:
2c:ff:1f:1b:4b:35:de:f4:da:60:f9:74:2b:05:54:
7d:51:d0:86:4f:73:c5:5c:fc:16:f8:40:f6:d8:e4:
7c:4a:0a:06:a7:16:b4:52:d0:04:e6:3f:54:d0:76:
b9:d6:5d:b7:11:4c:f2:00:a5:d2:85:4e:ba:4c:d9:
d7:63:9c:37:ea:b5:70:7e:87:82:36:9e:e3:71:6d:
7e:65:a0:eb:50:cc:25:34:d2:d0:b2:1a:a5:f8:7b:
0d:82:77:fc:d2:d5:2a:2c:ac:62:eb:55:19:31:e1:
c2:48:11:63:3a:fd:fb:37:c3:b2:1f:d1:8e:3c:c3:
5f:ae:3c:27:2d:2d:ba:a3:8d:7b:52:41:58:a1:ef:
8b:94:43:7c:e6:71:31:5c:28:7a:b3:69:e0:43:4c:
5a:1c:b8:aa:16:5d:cd:ad:89:6a:77:3b:0d:3c:86:
fc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3D:10:3A:4F:87:D0:96:3B:F6:42:38:76:73:5A:08:C3:45:F3:7B
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/NT0QOk-H0JY79kI4dnNaCMNF83s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:6c:1b:b5:7e:3d:4a:dc:84:6b:a1:c4:42:6e:3f:e9:ed:5b:
a7:e7:07:01:c6:28:a4:34:e8:f5:73:38:e4:f3:9a:f6:65:28:
03:57:49:32:89:3c:b4:fd:34:8f:05:6a:9c:e6:23:51:d7:62:
66:93:d5:6a:a7:e3:3e:69:8f:0b:82:7b:3e:4e:64:77:e8:52:
f1:ad:62:82:74:f0:38:85:81:99:a5:34:de:52:7b:df:23:d3:
9f:ae:0f:c9:34:3e:03:10:df:da:e1:98:40:92:5d:9c:d1:7f:
fa:53:70:1e:e3:b8:98:8a:e2:1c:61:c7:0a:59:78:ed:ca:ee:
61:3d:68:27:2f:51:71:92:e6:d3:74:5f:2f:54:a9:72:f6:a3:
1f:b6:19:47:82:50:87:87:4a:6d:13:cc:67:14:eb:36:47:8f:
2a:a6:50:98:fd:65:05:6a:9a:35:1c:f4:6c:d6:d9:a4:38:2c:
cc:f6:0a:fc:c2:2f:fe:21:4b:5f:26:65:bd:a5:01:cd:80:29:
2e:04:98:04:b5:b2:85:c1:ca:a0:09:8c:1e:85:2c:00:b2:d7:
7a:aa:01:12:1c:88:b1:52:2e:82:a0:66:fb:9b:60:ac:b3:01:
04:fa:1c:e1:65:4f:9a:36:46:bd:fe:6f:fe:b0:18:fa:e4:b6:
1b:a5:e6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org