Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/O-5EkfuG_4lxXPyzZKYUkB2YUkQ.roa
File: O-5EkfuG_4lxXPyzZKYUkB2YUkQ.roa (raw, json)
Hash identifier: g0MO1BziGRZ1GgBJmxPSjltzCtK8DrRrRtnbQr7DiYw=
Subject key identifier: 3B:EE:44:91:FB:86:FF:89:71:5C:FC:B3:64:A6:14:90:1D:98:52:44
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0790
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/O-5EkfuG_4lxXPyzZKYUkB2YUkQ.roa
Signing time: Tue 29 Sep 2020 10:04:33 +0000
ROA not before: Tue 29 Sep 2020 10:04:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 119.14.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1936 (0x790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 10:04:33 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3BEE4491FB86FF89715CFCB364A614901D985244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f5:2b:94:01:39:02:d7:4f:11:d9:40:91:93:
ef:e6:dc:48:52:9c:b1:ca:10:20:58:0a:d8:62:7e:
66:c0:a8:b1:c6:3a:87:74:82:8d:40:22:4e:fc:9a:
f9:6d:b4:44:af:06:8a:24:1f:78:bb:c2:61:6a:1d:
12:10:22:42:b5:09:4c:65:a3:85:d3:8b:12:f6:2d:
38:e4:45:48:8c:8c:11:f1:62:c3:2e:98:ce:05:87:
fb:27:3b:03:9f:4a:13:3b:25:74:15:24:f4:d9:b8:
8d:5c:46:14:a4:da:c6:16:7c:bc:d4:93:9f:00:8d:
61:b4:6f:ce:1c:a4:2b:2c:cd:2f:4e:71:f2:b2:73:
c1:f4:48:16:49:e3:9e:6b:66:e4:f5:c1:cd:23:77:
b6:e7:75:61:47:b3:6d:e7:46:c1:89:9a:8f:06:61:
a1:43:85:d2:3d:e5:91:ea:d4:21:8d:b8:e6:96:ae:
bb:f5:5d:e0:32:12:64:de:50:fc:28:83:3e:54:cb:
53:15:5d:39:14:1c:33:b4:32:3e:6c:8c:18:ff:69:
33:22:68:53:4a:ea:cc:df:e1:88:28:eb:3e:8d:c3:
58:11:9d:db:b1:fa:7a:01:a8:25:c4:db:0b:4c:71:
46:44:b4:95:cc:a8:ef:71:f9:9a:84:53:e2:fe:a3:
df:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EE:44:91:FB:86:FF:89:71:5C:FC:B3:64:A6:14:90:1D:98:52:44
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/O-5EkfuG_4lxXPyzZKYUkB2YUkQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.14.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:bf:e6:d4:aa:29:e5:50:b5:4e:96:6a:cd:99:fe:19:4d:1b:
c4:77:5c:b0:d8:06:28:df:58:ac:9a:3a:3c:af:f8:77:d8:e8:
17:94:d1:ef:36:68:c7:32:58:40:cc:73:93:11:be:c6:f6:f4:
33:ef:e5:21:d6:23:cd:47:df:02:ee:00:1a:2c:af:51:87:34:
ce:ba:ff:36:89:0b:05:5d:f4:c5:3e:5b:17:b4:39:c6:e1:32:
0f:af:d9:50:fb:18:fe:48:90:85:8d:b0:82:22:7a:bb:ac:d3:
f1:6b:35:3c:34:f6:fa:18:57:4e:64:2d:d2:20:96:78:a2:3c:
04:70:0c:d2:ae:23:4a:5f:d1:42:6a:7f:81:ae:5f:a7:c1:8d:
78:5d:bc:c7:1d:b1:f9:cf:5e:68:c4:19:8d:33:c5:3c:54:fb:
60:ea:90:94:14:b7:00:31:26:7a:7c:41:24:33:11:ff:1c:92:
3b:f5:74:ff:c8:24:de:df:a5:3a:c7:cb:57:e0:63:51:29:00:
f9:64:78:b5:f2:e1:2d:c9:22:cc:e8:ec:b7:0e:60:54:b1:16:
4a:ba:76:b3:95:be:1c:85:9f:86:f4:f4:fd:36:8a:cf:45:24:
60:86:5c:d8:35:6a:bb:bd:a2:48:6e:39:24:b8:6d:08:66:21:
d9:d6:c1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org