Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Rz190OT0k313ZDSUgxzjFNguJGs.roa
File: Rz190OT0k313ZDSUgxzjFNguJGs.roa (raw, json)
Hash identifier: +DmrrU75JW9w+bFEHHz6dZ1g9wFCcxnsf6DMvySXu7w=
Subject key identifier: 47:3D:7D:D0:E4:F4:93:7D:77:64:34:94:83:1C:E3:14:D8:2E:24:6B
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 078F
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Rz190OT0k313ZDSUgxzjFNguJGs.roa
Signing time: Tue 29 Sep 2020 10:04:32 +0000
ROA not before: Tue 29 Sep 2020 10:04:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 115.43.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935 (0x78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 10:04:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=473D7DD0E4F4937D77643494831CE314D82E246B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:67:a5:fb:b4:6e:42:2b:f8:ac:36:29:83:6c:
43:6b:d0:24:aa:a0:14:96:94:3d:53:e4:7c:56:8a:
1a:ee:2f:48:3f:00:20:d4:db:2f:dd:2d:be:0d:4a:
38:74:c9:de:9b:44:2b:36:dd:23:d2:78:1f:96:41:
98:9d:15:13:3a:89:d3:29:65:aa:cb:06:be:28:4f:
17:d8:62:c5:f7:01:47:ff:f6:06:c2:d7:0f:ff:06:
45:02:3f:6b:e0:4b:02:03:a5:b2:15:ed:50:00:86:
76:65:18:a7:03:c0:f9:0c:b6:0e:44:05:34:f9:5d:
69:54:34:cf:48:ab:28:8f:6a:d5:16:e4:1a:96:c2:
ca:21:b5:6b:ff:a4:58:7d:62:10:50:84:6b:55:6b:
5f:f8:35:7f:2d:ba:1c:0b:fa:1a:a0:32:d9:c6:18:
41:65:2e:98:56:c1:d0:02:24:d3:85:f1:b4:f2:f2:
f3:e3:a6:89:ad:8c:e6:5a:59:ad:f7:a4:55:3a:61:
48:e9:e6:62:fc:0b:fc:85:e4:bf:a3:33:c1:af:be:
ab:fe:f5:1b:76:c6:71:82:39:d4:25:c1:d7:fc:c7:
76:9e:c8:b7:9b:4f:d5:2d:99:ec:bd:15:76:2d:2e:
50:dd:57:72:38:e0:eb:79:39:48:7d:bc:34:ae:f0:
31:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3D:7D:D0:E4:F4:93:7D:77:64:34:94:83:1C:E3:14:D8:2E:24:6B
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Rz190OT0k313ZDSUgxzjFNguJGs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:33:75:9a:00:39:c8:07:02:a7:8b:89:6e:45:62:0d:ec:17:
69:e6:0f:69:e5:c5:3f:a6:42:5f:ab:a4:ad:74:58:43:24:8d:
30:1b:cc:c0:c8:fd:e2:b9:67:10:85:20:29:aa:45:23:52:60:
6f:8b:45:2b:83:8b:ab:2e:0e:33:02:bc:51:30:d1:07:83:05:
64:85:c3:79:9d:c7:c1:ec:d9:5a:4b:40:73:3b:6d:93:50:3f:
c7:fb:a5:a4:87:e4:60:10:48:75:fc:59:43:98:d3:74:0c:a6:
6c:be:9f:a6:d0:18:bf:8c:4e:60:b1:51:5c:d5:05:ab:2b:65:
fe:87:88:cc:67:d5:8b:72:7a:37:1c:4a:40:e5:92:49:83:ba:
37:5c:b0:6c:4a:19:a7:77:93:e4:3b:76:1e:90:dd:7a:68:1e:
fe:07:74:fb:2a:d1:13:01:b3:4e:e7:74:bd:7f:56:03:eb:d6:
6d:a7:80:2d:c7:94:36:90:93:93:cb:a1:0a:3a:d4:54:c8:81:
fc:20:f5:32:2c:d7:74:60:2c:10:88:f8:a1:9c:c2:42:9e:89:
c8:82:3e:88:ea:76:9f:a3:a6:71:10:7d:4e:a7:f6:fb:5a:b7:
66:67:1c:30:21:ec:b3:e3:b3:46:92:1e:b3:56:20:a1:63:fe:
8d:67:0d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org