Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/RTTew6_C0WnZttcU4knxSKrUOl0.roa
File: RTTew6_C0WnZttcU4knxSKrUOl0.roa (raw, json)
Hash identifier: iSSAVu/SGfTJcpVw0/VCOrL61LL3jr61zHt5X6fhJlo=
Subject key identifier: 45:34:DE:C3:AF:C2:D1:69:D9:B6:D7:14:E2:49:F1:48:AA:D4:3A:5D
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0793
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/RTTew6_C0WnZttcU4knxSKrUOl0.roa
Signing time: Tue 29 Sep 2020 10:04:33 +0000
ROA not before: Tue 29 Sep 2020 10:04:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 202.151.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1939 (0x793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 10:04:33 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4534DEC3AFC2D169D9B6D714E249F148AAD43A5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:de:21:4b:cc:ff:d6:bd:c9:95:61:3d:bc:
3f:d9:95:73:9b:ba:e6:34:ea:66:8e:7f:61:64:40:
2c:51:9d:ae:41:26:ca:5d:f4:98:90:52:14:c2:dc:
13:c9:f8:ae:e6:24:fb:54:ab:d6:d8:a5:7a:52:24:
67:f3:ac:c9:35:a2:85:f3:b8:a0:2c:26:85:5f:eb:
8b:95:76:55:ee:14:07:65:e5:e0:76:4a:a4:9d:92:
82:b5:e5:f8:a1:c1:82:3c:fe:e0:5f:e4:12:9a:1c:
67:58:92:f9:e8:83:3e:bf:27:eb:42:54:97:d1:46:
46:30:53:66:f9:53:3e:ce:cc:cd:bf:2d:81:16:f7:
7e:01:d7:07:de:d8:9e:6c:bb:00:5c:93:7a:c1:c6:
98:9e:24:ec:4f:01:1a:33:a4:61:4d:39:c5:db:8f:
01:86:8d:a6:4b:f8:a2:66:4c:0e:ce:f3:4e:3d:1a:
eb:b6:cb:63:80:85:59:6b:bf:1c:ab:03:ba:e2:eb:
b8:93:84:8d:2f:f7:5a:d8:5c:47:8f:77:a4:51:83:
1b:6e:c6:e3:9d:81:2a:38:d9:7a:92:b5:e7:09:26:
ab:d8:7c:18:07:76:3e:f8:0e:98:2c:d4:97:e6:c3:
ba:77:9b:3c:4c:0a:70:a7:87:68:8d:65:76:0a:54:
a4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:34:DE:C3:AF:C2:D1:69:D9:B6:D7:14:E2:49:F1:48:AA:D4:3A:5D
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/RTTew6_C0WnZttcU4knxSKrUOl0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.151.48.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:60:22:d1:62:5a:cb:be:ce:4a:69:06:1f:b9:8d:03:23:a9:
2f:5a:fd:9d:b9:c4:54:76:46:e4:49:f1:96:98:21:e8:c0:71:
3e:2f:86:86:bb:c4:c6:ec:50:e8:5f:7b:97:a8:48:17:fe:28:
40:fb:af:c3:4d:c4:0a:72:9a:f3:c8:30:27:a7:56:78:5f:79:
a9:8f:ea:13:d5:17:4d:30:5a:28:93:9d:e2:a4:5b:1c:cf:ca:
00:1d:38:2b:a3:66:1c:0a:85:02:e8:47:dd:c1:4a:01:fc:eb:
8b:20:0d:0d:fb:ff:28:89:e0:39:ff:4d:d4:79:29:da:9b:7a:
b4:ef:16:1b:ac:d4:af:76:f7:c0:f4:a4:43:37:3a:ea:13:af:
79:28:f0:05:36:8d:48:ee:70:00:da:ce:ce:8b:38:cc:35:9d:
5f:a9:ab:fa:8f:46:47:a6:59:86:d7:8a:ac:5a:ff:52:13:15:
98:98:67:6e:b9:c6:7d:6c:3b:ef:df:5b:99:c1:d7:e9:b7:40:
20:5a:da:43:7e:9e:80:25:af:8f:af:33:59:06:09:3f:b3:d1:
a1:29:f3:17:61:76:50:2a:6e:45:92:00:ba:7b:01:b4:15:9e:
03:f9:e3:b2:c2:84:79:8d:aa:7f:ee:c9:ef:01:4b:64:1f:be:
70:77:0e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org