Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/S8edrS332q_cMJ1DENdrFAl7GwA.roa
File: S8edrS332q_cMJ1DENdrFAl7GwA.roa (raw, json)
Hash identifier: FXOsxlg7yfQTCEAPbp1bxPvQ0HXs8FDM9RwLa7UGRNQ=
Subject key identifier: 4B:C7:9D:AD:2D:F7:DA:AF:DC:30:9D:43:10:D7:6B:14:09:7B:1B:00
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 08EF
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/S8edrS332q_cMJ1DENdrFAl7GwA.roa
Signing time: Sun 07 Feb 2021 11:52:56 +0000
ROA not before: Sun 07 Feb 2021 11:52:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 115.43.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2287 (0x8ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 7 11:52:56 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4BC79DAD2DF7DAAFDC309D4310D76B14097B1B00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a6:1b:e3:7b:07:c9:01:5c:eb:54:a3:a2:f4:
fb:3f:79:63:4b:de:02:26:d9:cc:36:5a:38:10:df:
b6:d3:a6:46:12:a6:e7:cf:05:a8:9a:9f:73:14:35:
9b:c1:1b:21:12:fe:9b:5d:51:21:29:bc:31:e3:aa:
2b:d7:1a:2f:f6:c3:ba:71:0b:fb:49:aa:76:0c:8d:
4f:ad:00:fa:9a:72:56:04:c8:28:c8:ca:6b:5f:e7:
d2:f4:55:96:3a:9f:75:23:56:b6:0e:c1:d8:87:f2:
4b:67:48:56:2c:f6:aa:bd:db:1a:7f:3c:b4:35:3c:
09:07:79:38:8a:22:2a:7d:3b:87:ed:7c:09:60:1b:
8c:c4:da:6c:e7:f6:6e:da:49:f9:82:d8:d8:ba:54:
d2:68:4e:3d:e4:40:e2:90:b6:b5:f3:8b:c2:45:36:
96:51:bb:36:06:bb:ad:d7:c9:95:54:49:60:39:31:
ee:1d:76:8d:f3:b7:05:f8:dd:78:cf:c8:9e:c9:22:
e9:5f:f7:44:05:cd:de:cf:86:8c:6e:4b:a3:66:60:
bb:49:7d:85:98:af:d2:e6:93:3a:da:a2:9d:48:58:
8d:2a:b9:84:0b:3e:62:57:10:7e:e8:11:46:4d:92:
b7:3f:da:ce:f3:fb:8e:6b:7f:c4:e0:5b:05:c7:34:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C7:9D:AD:2D:F7:DA:AF:DC:30:9D:43:10:D7:6B:14:09:7B:1B:00
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/S8edrS332q_cMJ1DENdrFAl7GwA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:0a:4f:30:72:ca:62:45:99:62:93:2a:28:39:0a:cf:41:00:
d8:e4:c9:6d:80:fc:1e:01:6b:06:0c:4b:9a:8a:b9:1b:4b:ce:
a3:f5:bd:ba:fa:b3:f8:44:eb:3f:6f:62:68:b7:7c:e6:e1:e3:
52:59:dd:67:d2:5e:78:6a:53:61:4e:45:5f:2e:e2:34:21:76:
28:0e:fd:1c:8b:f2:28:2e:2c:b2:62:d0:5b:59:98:28:bc:28:
d1:c6:a0:02:b2:15:28:e5:d1:2f:31:e7:7a:fc:42:d8:44:55:
5b:d1:51:fe:b5:b3:78:e2:60:f7:c6:44:d5:16:b6:6b:d4:37:
77:a6:30:1c:61:26:8a:64:66:01:d3:01:d3:54:a4:b5:eb:59:
69:3d:29:42:be:b4:10:77:9a:c0:e1:97:b4:c1:b8:0a:31:cd:
8f:31:dc:a1:b0:e5:90:df:96:b4:0f:28:33:d4:d4:fe:da:64:
e9:8e:f1:60:03:18:d2:e0:2c:4b:68:33:56:13:0c:24:9d:80:
80:e5:23:5a:4d:dd:b0:2b:5f:e1:81:e8:78:0f:11:10:50:01:
ae:d3:24:08:8e:75:c1:89:3f:2f:63:98:03:ae:2b:be:e7:cb:
96:72:42:53:5d:76:25:0a:fa:44:5d:4b:53:48:f5:5d:0f:c6:
54:16:83:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org