Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/a4TAW8xURzW0jWq6ph_b-_rKvXo.roa
File: a4TAW8xURzW0jWq6ph_b-_rKvXo.roa (raw, json)
Hash identifier: 3MOzNI6AiPVuQzTibUQkpud/THg/HrNw0AIMzzX0vnI=
Subject key identifier: 6B:84:C0:5B:CC:54:47:35:B4:8D:6A:BA:A6:1F:DB:FB:FA:CA:BD:7A
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 090F
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/a4TAW8xURzW0jWq6ph_b-_rKvXo.roa
Signing time: Sun 07 Feb 2021 12:42:38 +0000
ROA not before: Sun 07 Feb 2021 12:42:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 220.157.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2319 (0x90f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 7 12:42:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6B84C05BCC544735B48D6ABAA61FDBFBFACABD7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:33:77:4a:7e:58:7c:4a:6c:ee:be:75:7a:
94:2e:d2:2b:40:fa:2b:06:27:97:3b:76:98:ea:7a:
2f:09:d3:e7:d4:9d:30:40:f4:4a:38:4d:5a:3f:03:
fe:83:10:7f:55:69:a9:29:e7:ec:ec:33:a1:e2:0c:
ea:f0:75:aa:15:64:05:35:38:1a:0d:fe:22:8c:08:
65:a3:55:68:35:7f:fb:b8:7b:00:06:36:88:38:4b:
62:5b:99:6e:b8:9f:bc:ad:be:18:65:62:9f:d5:7c:
9f:32:6d:10:3d:b4:5d:9f:b6:0c:a7:33:91:0d:6e:
b2:7d:28:63:0e:13:28:2a:e8:4b:4f:95:7d:69:1a:
ba:4b:73:f8:75:74:05:46:80:21:a6:de:74:94:dc:
b9:01:42:d7:f9:7c:49:dd:a5:ce:24:a1:a8:84:9d:
05:71:b5:61:7d:60:f3:6a:7e:7e:5b:28:07:e8:bf:
9f:3b:fb:7d:13:e8:c1:9b:54:f5:6a:62:0e:20:81:
06:f1:1f:7f:fb:fa:de:dd:9d:10:c6:65:f1:54:c3:
1d:ba:ee:25:d7:c0:7c:62:4a:0e:e2:68:3f:41:4e:
a3:12:92:f7:a9:4a:45:b3:7c:96:37:36:d2:1f:51:
81:29:0d:b5:7d:97:05:e2:90:10:c1:b7:58:91:2a:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:84:C0:5B:CC:54:47:35:B4:8D:6A:BA:A6:1F:DB:FB:FA:CA:BD:7A
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/a4TAW8xURzW0jWq6ph_b-_rKvXo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.157.112.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:a1:c2:0a:bd:4b:cc:59:45:42:57:b8:86:9d:d9:96:57:e0:
3d:74:3a:8d:02:08:a5:f7:e3:ad:5d:dc:01:f8:f5:80:ab:78:
11:d7:43:c7:29:81:75:7a:c1:fd:4d:92:9c:d1:f0:17:54:43:
21:54:a3:77:bc:da:5e:50:e7:33:51:c1:3b:f1:4e:2c:9c:a1:
4c:9c:9a:85:33:47:69:49:dc:03:0a:5a:3c:4b:0f:04:f3:73:
bc:8b:06:37:79:c5:e2:ab:4f:43:56:55:33:8e:b8:8c:f1:51:
fb:18:fe:e5:a9:29:9f:ec:c6:4c:59:3d:f9:d5:c4:0f:a7:0b:
99:17:09:59:cb:b8:4b:e7:44:5d:da:10:66:ea:25:d5:94:53:
44:d5:1e:e1:36:d0:18:1e:30:e5:ff:db:d6:70:83:c9:a5:f4:
5a:7b:9f:87:e2:98:6a:f2:22:3d:e6:fe:d5:62:92:c6:92:98:
4c:76:7f:34:04:f3:1f:89:15:61:a0:fc:04:a4:d9:c4:60:8b:
13:ff:ff:a1:ee:66:12:7b:02:c2:d2:8e:20:66:f5:b6:8b:4b:
9d:51:8c:95:1a:22:31:4c:ce:ba:e3:b2:0d:fd:c4:d5:1e:ed:
87:59:74:83:a4:b3:06:1a:de:3a:06:c7:9a:d8:e9:46:57:8b:
0f:85:30:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org