Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/PAfBz8u9jF7nOO1xPvwZC-H68Es.roa
File: PAfBz8u9jF7nOO1xPvwZC-H68Es.roa (raw, json)
Hash identifier: TCXwnq6BHPOX+WqJUKMu/p34//95yRPxRYCIUTh2eW4=
Subject key identifier: 3C:07:C1:CF:CB:BD:8C:5E:E7:38:ED:71:3E:FC:19:0B:E1:FA:F0:4B
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0903
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/PAfBz8u9jF7nOO1xPvwZC-H68Es.roa
Signing time: Sun 07 Feb 2021 12:41:33 +0000
ROA not before: Sun 07 Feb 2021 12:41:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 202.151.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2307 (0x903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 7 12:41:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3C07C1CFCBBD8C5EE738ED713EFC190BE1FAF04B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:bc:2c:3d:fa:d3:41:98:56:8f:89:33:00:
f8:6f:19:e1:a1:94:64:0d:a2:07:b1:1c:2e:68:63:
7e:b8:d4:61:8b:66:d8:31:9a:94:b4:73:58:c7:3d:
2f:54:0b:93:6d:84:10:e3:19:d9:cf:02:00:83:bb:
19:85:70:c1:32:72:9e:5b:64:27:9e:c1:12:57:fb:
17:99:00:73:79:db:f3:98:93:87:e9:d4:80:92:b2:
75:9e:41:94:49:1c:ad:ec:4e:6c:8d:23:a7:69:ec:
79:78:9b:66:11:e0:7d:9b:69:5a:6b:82:4a:e0:f0:
da:2e:a4:c3:8c:48:75:49:6b:71:2b:2e:42:34:70:
b4:55:4e:79:d9:f9:c0:f8:b8:b2:ba:9d:9a:8b:ef:
24:ed:d7:ec:55:b9:34:ce:6a:ac:54:58:f2:b8:1b:
36:26:89:57:c9:cc:6b:c0:d3:d0:96:f3:33:fc:d8:
4e:b3:45:ea:e6:fe:42:6c:e7:a5:e3:3a:16:e3:6f:
cf:77:c8:cb:a2:5d:2e:73:65:3e:2c:17:3b:02:91:
53:ec:35:49:8f:ed:7b:7c:5c:8c:ca:52:ac:d9:a4:
2a:07:6a:ed:f3:67:aa:df:22:ea:a6:4a:61:3b:4a:
91:b6:b9:c8:2c:d4:c0:d5:bb:66:64:66:34:81:d1:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:07:C1:CF:CB:BD:8C:5E:E7:38:ED:71:3E:FC:19:0B:E1:FA:F0:4B
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/PAfBz8u9jF7nOO1xPvwZC-H68Es.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.151.48.0/20
Signature Algorithm: sha256WithRSAEncryption
50:69:aa:9b:8f:08:0d:fa:1c:95:7b:3a:c7:cb:0d:d4:3d:78:
79:cc:56:18:20:4d:b4:71:5d:8a:86:9e:18:b6:82:4c:b7:46:
a6:f3:33:52:7c:fa:13:9e:03:18:21:77:a1:de:7e:c2:dd:07:
24:a4:7a:aa:dc:b0:af:7d:b0:65:98:e6:9a:8a:3a:5b:bc:54:
1a:d3:5f:2a:fb:58:e2:7c:e3:dd:3d:b6:ee:89:4d:85:b2:92:
a8:ca:a6:e6:fe:20:b5:41:6a:df:af:43:a3:f6:a2:c7:1e:d1:
97:d7:2c:5c:e4:72:bb:83:58:9a:9e:2b:6d:39:a6:bd:03:3e:
b0:6b:c4:c9:2d:9e:9b:da:c8:b5:94:cf:a0:1c:87:b8:af:35:
41:d8:e3:a1:8b:23:98:00:fc:6d:e7:86:37:f8:e9:2e:31:9c:
0a:12:17:43:db:c8:b5:1c:04:57:77:d0:24:cd:61:7b:e2:99:
e4:34:c4:f2:e7:31:28:ee:b7:52:7d:53:7c:a5:5c:b0:e0:4c:
82:56:3b:c8:47:23:2e:56:07:60:72:0a:4e:ad:ce:1a:58:86:
37:f4:16:06:05:4f:e1:f5:ed:a7:87:a9:ec:41:cd:64:7e:5d:
f2:2d:6f:0d:c1:3f:8d:62:ae:6b:30:99:bf:58:8a:d2:90:74:
6a:eb:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org