Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/_oDNuABcF3K7pizJqLWuSfeUGkM.roa
File: _oDNuABcF3K7pizJqLWuSfeUGkM.roa (raw, json)
Hash identifier: cU76ytPsLtcqeMPBVkj0gL8zmyCizgGCSZkZiDXZiuU=
Subject key identifier: FE:80:CD:B8:00:5C:17:72:BB:A6:2C:C9:A8:B5:AE:49:F7:94:1A:43
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0921
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/_oDNuABcF3K7pizJqLWuSfeUGkM.roa
Signing time: Mon 22 Feb 2021 14:06:57 +0000
ROA not before: Mon 22 Feb 2021 14:06:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 115.43.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2337 (0x921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 22 14:06:57 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FE80CDB8005C1772BBA62CC9A8B5AE49F7941A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:26:de:4f:b2:b9:dc:97:24:a9:3e:7a:8b:
87:d2:d2:a0:8a:55:b0:b4:c9:c8:e1:f5:10:56:ed:
69:cc:9b:c8:ad:e6:de:1d:85:a2:a1:2d:f3:82:0b:
2b:b4:b5:24:d1:73:5e:e7:81:cb:6e:ed:98:27:cc:
52:ae:95:5b:79:d1:01:48:86:bd:00:c3:52:70:cf:
88:d8:af:9e:ba:19:cc:f4:9e:41:ea:fb:68:90:b1:
e2:63:f8:b6:e6:20:a2:c4:99:8b:66:63:96:61:b1:
e1:f3:93:ec:09:4a:62:d7:a6:3c:ed:c7:6d:b2:8b:
dc:80:8c:e7:2f:1e:b6:26:88:b7:65:3e:39:7b:1a:
d2:ab:0f:6c:e9:68:79:d7:a8:8d:51:62:45:5c:52:
d4:15:d3:3d:87:07:e0:14:ca:99:47:6c:50:57:52:
62:a2:28:a0:f4:ed:d5:5f:ef:ed:f1:41:54:bf:bd:
c6:7c:b5:96:f4:82:b2:1b:c4:51:f6:a0:c3:16:0d:
3a:e2:cb:08:02:cb:2a:29:de:84:21:8b:3d:31:78:
83:7e:54:cf:4b:05:fa:4f:e1:58:62:b0:c6:92:d4:
18:0c:f8:a5:f4:34:8f:f1:a3:46:74:c2:38:08:7f:
df:97:98:c4:7c:bb:6f:5b:68:a1:b8:7d:10:10:3e:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:80:CD:B8:00:5C:17:72:BB:A6:2C:C9:A8:B5:AE:49:F7:94:1A:43
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/_oDNuABcF3K7pizJqLWuSfeUGkM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/17
Signature Algorithm: sha256WithRSAEncryption
28:f5:ad:0a:a0:58:25:e6:4a:47:8d:cd:6b:5b:2d:29:7e:03:
76:26:fd:2e:b5:e4:9a:c2:13:d2:30:14:60:e9:4a:d2:3a:1a:
80:19:96:84:e9:ec:46:ea:95:1f:66:3f:b1:c7:05:3a:8b:b6:
30:d9:ed:b6:f4:48:40:d1:7c:ec:a6:84:6d:c8:96:97:ce:aa:
51:20:0e:b7:79:b5:c2:c8:b8:a7:93:2c:fd:0f:ce:2b:80:13:
87:aa:c6:88:87:1a:65:54:87:a7:4c:2a:1f:63:2f:0b:de:17:
20:a6:e5:5a:d4:08:e7:59:b1:3a:e3:e5:80:0e:13:3f:de:70:
c5:f1:16:3f:ac:61:93:8c:bd:96:e8:6d:6b:24:fb:89:0f:86:
f3:b0:0d:a7:9e:46:63:16:07:9d:3f:3c:9b:d0:71:02:e0:e0:
d6:7c:90:df:74:37:22:90:e5:9d:66:f7:6d:a2:e5:04:28:0b:
d3:88:32:33:f0:d5:33:47:b4:f2:3e:65:6d:bf:92:58:b7:af:
6f:61:ce:de:e2:8f:7f:86:7c:86:3c:5b:52:5f:81:63:91:88:
31:df:38:f1:7a:b0:5a:a7:a9:15:c0:56:54:85:ad:92:95:75:
1a:93:7f:8b:df:99:2f:1d:03:53:99:28:0d:5c:d8:fe:7b:d3:
12:8f:13:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org