Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/P_UQB2SPbFE-bnN-ENeR7fFOCqw.roa
File: P_UQB2SPbFE-bnN-ENeR7fFOCqw.roa (raw, json)
Hash identifier: G/BK0zfL/ZoH4W3IKwHuA9pe6RII4MlDfe6DfELNv0k=
Subject key identifier: 3F:F5:10:07:64:8F:6C:51:3E:6E:73:7E:10:D7:91:ED:F1:4E:0A:AC
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0907
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/P_UQB2SPbFE-bnN-ENeR7fFOCqw.roa
Signing time: Sun 07 Feb 2021 12:42:32 +0000
ROA not before: Sun 07 Feb 2021 12:42:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 122.99.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2311 (0x907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 7 12:42:32 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3FF51007648F6C513E6E737E10D791EDF14E0AAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:b1:0b:ac:e9:90:4b:48:d5:b1:62:91:f9:
00:57:3d:f2:ec:c7:34:2a:91:3c:c2:28:d5:2c:fb:
72:f3:0a:7e:42:49:b5:b2:83:2e:ab:dd:0c:23:f2:
66:bc:37:42:4b:36:f9:4b:ab:de:c0:92:ff:f1:d1:
c8:42:71:61:7d:2f:14:e4:95:10:7d:92:60:63:74:
64:c6:bf:21:49:1f:81:de:a8:db:71:f0:66:c5:3f:
1b:61:ed:43:73:de:60:f6:82:0c:4c:4b:9c:8c:aa:
16:38:6b:34:8d:48:d4:2b:d3:bc:31:ce:1e:e5:d5:
e0:ef:1c:cc:9d:b0:1b:6c:b5:79:45:d4:b9:f3:53:
61:38:0c:19:1c:ba:2c:79:39:66:0f:84:76:ee:c3:
fb:7e:e6:76:21:72:16:56:49:3b:1a:e1:21:9d:0c:
2e:9b:d5:86:a2:a2:b4:84:91:09:9d:b3:90:29:98:
55:3d:5d:2d:51:be:5d:af:88:5b:c3:59:91:fb:66:
63:9b:f8:b6:b9:97:ed:a9:f2:49:f8:bd:dd:ee:9e:
ff:20:66:9f:51:e2:ca:ed:dd:c7:12:54:ae:00:7c:
f6:35:83:3a:a2:58:2e:ed:04:2e:14:07:ad:10:dd:
37:2c:74:b5:3c:59:70:3d:23:b4:14:fa:ac:77:85:
d8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F5:10:07:64:8F:6C:51:3E:6E:73:7E:10:D7:91:ED:F1:4E:0A:AC
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/P_UQB2SPbFE-bnN-ENeR7fFOCqw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.99.0.0/18
Signature Algorithm: sha256WithRSAEncryption
7d:a5:4b:06:a8:fa:68:d5:d8:06:44:3d:b8:4e:e8:60:66:67:
27:ff:12:6c:6d:8c:0b:2a:2e:a1:26:b7:95:65:e2:62:7e:ae:
8b:15:5d:c6:aa:82:b6:8e:9a:4d:0e:23:1b:45:3a:e5:f7:08:
e9:43:58:c0:17:b1:ee:8d:4f:70:69:51:70:08:c4:6a:45:c9:
df:d7:f9:86:57:54:65:43:a5:3e:4c:c1:78:90:fd:fe:4c:cb:
f9:be:3b:7d:5e:e2:bb:46:77:03:32:7f:b6:29:56:cf:c3:83:
33:4c:5b:56:e7:8e:0f:38:36:22:6e:ce:d3:cd:f2:15:56:c8:
bd:f5:a7:57:c9:2b:e6:f3:08:0d:df:5b:f4:dd:f4:7b:03:da:
7f:c0:15:74:02:81:10:ce:bd:0e:fe:e6:eb:f1:3d:a2:47:1b:
df:d8:df:18:a8:8b:28:04:99:07:19:90:8f:db:76:09:9d:24:
30:b2:f3:d4:fd:63:2c:87:ba:4e:e0:49:75:cd:e6:a3:d8:dc:
b4:4d:40:49:33:a9:c6:03:51:91:88:5f:10:0a:1b:23:2f:61:
85:ca:4b:ec:34:ab:26:73:60:41:96:81:9c:0e:bf:8b:65:22:
91:3e:a4:92:c2:dd:c8:83:fb:cd:f2:fc:76:5b:e6:66:b2:f4:
f2:ca:59:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org