Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/VAiyPZlnK63ubUBTLRJ9euR9JWA.roa
File: VAiyPZlnK63ubUBTLRJ9euR9JWA.roa (raw, json)
Hash identifier: A+ChOLXdxeZiWb/w9MfReRh7M9Zwq94/DA+lR3bnzvc=
Subject key identifier: 54:08:B2:3D:99:67:2B:AD:EE:6D:40:53:2D:12:7D:7A:E4:7D:25:60
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0940
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/VAiyPZlnK63ubUBTLRJ9euR9JWA.roa
Signing time: Wed 03 Mar 2021 01:58:19 +0000
ROA not before: Wed 03 Mar 2021 01:58:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 119.14.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2368 (0x940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Mar 3 01:58:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5408B23D99672BADEE6D40532D127D7AE47D2560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:a0:e7:77:a7:fa:99:86:3f:30:83:8b:57:
8a:31:c9:5a:3d:fa:7a:75:31:ad:24:fc:e7:74:31:
84:76:37:db:68:2f:69:fb:83:db:90:58:ce:81:37:
68:ac:d1:3c:f1:6b:f3:2b:d0:c0:76:6c:38:d5:0e:
08:c6:ae:ac:c7:bf:b0:ee:0f:af:9f:d4:80:5f:03:
34:6a:b8:8b:68:65:27:52:75:85:4e:ab:4a:46:c6:
08:8c:52:6e:63:45:e5:0c:53:31:d1:29:d9:8c:ad:
ed:21:e3:b2:27:1b:8f:6e:fe:ba:72:c7:b6:b3:1b:
c4:4b:a1:33:ab:78:23:44:25:df:db:1e:3c:f3:64:
22:fe:4e:2d:7e:f3:78:69:cf:d2:82:11:13:8b:97:
7f:88:a7:8a:c6:14:d1:0a:f9:1c:88:98:0f:71:83:
da:25:67:c6:6e:69:76:0d:10:41:88:ea:78:26:ac:
aa:a6:f6:fe:c6:79:a6:a0:fa:1a:4b:db:ab:64:e8:
83:96:2a:8a:4a:0c:61:f5:40:d5:f0:83:2c:7a:b8:
6f:5d:af:03:a4:d1:fb:44:96:32:47:1a:e9:de:74:
77:6c:73:11:58:72:ad:e4:d5:e3:8d:2b:5d:af:2d:
b3:b9:99:d8:d1:f4:c6:44:8b:99:a2:fc:0d:aa:1b:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:08:B2:3D:99:67:2B:AD:EE:6D:40:53:2D:12:7D:7A:E4:7D:25:60
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/VAiyPZlnK63ubUBTLRJ9euR9JWA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.14.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:37:98:fe:6f:b5:31:ac:ed:25:72:11:5d:b5:98:e1:0d:69:
5a:91:34:67:ca:0b:23:41:b7:0d:84:c6:86:8d:5a:3b:86:bd:
d0:da:a7:cf:66:3b:42:15:ba:b1:80:fe:d6:0b:d5:2b:4c:7e:
b1:84:52:bc:71:4d:e9:0b:2e:db:e5:2b:36:8a:e1:4c:4c:87:
76:b8:8e:d0:b1:5c:d5:c9:22:1e:4b:bf:ed:bc:ae:0a:32:6b:
f0:e5:31:e0:17:1b:6d:84:36:75:58:66:9a:21:99:78:78:0e:
ff:d1:c4:03:99:70:80:b3:62:0e:1c:92:b3:88:9c:29:5d:f0:
34:5b:f0:b2:f0:d1:22:8e:2e:a1:5c:73:a7:f6:d1:6d:81:12:
b5:aa:4a:92:3d:77:f0:25:69:62:47:09:89:7c:fb:2b:1f:36:
13:e3:db:71:9a:7e:b8:0b:67:9a:02:30:b7:25:94:15:a9:e3:
c3:d1:92:9b:0e:7d:bc:cb:19:b2:fa:a7:17:b0:82:47:06:9d:
b7:9b:5d:2f:74:d5:c5:1e:33:6b:35:5e:3a:d8:53:16:fe:09:
a7:a8:5d:6b:bc:78:24:49:a9:52:8f:a7:e3:fa:98:66:42:9f:
b7:0d:36:42:79:27:2b:dd:f1:26:4a:b5:db:a6:21:c8:41:ec:
be:78:95:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org