Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/ePtWISL1BBCh-1zEj1b3tA5gGZg.roa
File: ePtWISL1BBCh-1zEj1b3tA5gGZg.roa (raw, json)
Hash identifier: mHDz/sCE2/6EQNDCQxPVCij8mpHVFxiYEym49NPm6+s=
Subject key identifier: 78:FB:56:21:22:F5:04:10:A1:FB:5C:C4:8F:56:F7:B4:0E:60:19:98
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0BF3
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/ePtWISL1BBCh-1zEj1b3tA5gGZg.roa
Signing time: Fri 01 Sep 2023 09:11:47 +0000
ROA not before: Fri 01 Sep 2023 09:11:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9416
IP address blocks: 119.14.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3059 (0xbf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 1 09:11:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=78FB562122F50410A1FB5CC48F56F7B40E601998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:31:93:8a:41:8d:f5:53:ae:ce:74:13:90:
a6:97:7d:cf:e4:11:b1:86:4e:9f:73:7b:de:e9:02:
2b:6d:18:bc:3b:68:f6:9b:90:1a:22:4b:a6:a8:cf:
8b:f9:4b:40:64:be:8f:71:6b:a7:a7:ff:8e:31:a1:
22:5a:bf:4a:04:43:df:de:f3:fc:ce:d8:df:66:18:
2c:d9:f7:7d:9d:82:e2:3c:9d:4a:d3:cc:05:86:3a:
6c:fe:f6:cb:16:9a:61:78:d9:39:ac:d1:7d:b9:0b:
f5:5c:c7:2c:c0:eb:c2:d8:77:83:5c:a4:16:64:95:
3d:3f:6b:55:43:95:0a:88:af:6b:2b:46:7f:9d:85:
60:bb:91:de:9a:c8:b3:b1:92:f4:fa:e4:a5:00:b9:
4b:fd:f1:b3:ab:79:1c:31:d1:57:e1:77:da:0a:f2:
cb:1f:cd:bb:5e:52:03:4d:97:9d:cb:05:01:bc:d6:
c3:59:6b:3d:20:c8:ef:6a:68:44:f9:6f:ae:18:bf:
6b:ab:5e:1c:9b:3b:73:61:bd:f4:18:a9:73:1a:d2:
4a:1b:e8:e7:07:3a:3d:d5:f3:4b:af:e3:4b:ef:ab:
df:98:c9:8d:8e:48:d1:db:5b:f6:98:81:61:a4:bd:
95:1f:ba:0b:b7:0d:47:87:b7:39:e9:ee:6f:9e:62:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FB:56:21:22:F5:04:10:A1:FB:5C:C4:8F:56:F7:B4:0E:60:19:98
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/ePtWISL1BBCh-1zEj1b3tA5gGZg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.14.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:dd:c3:30:40:6f:a9:cf:83:be:0f:95:83:a7:f3:1a:0f:3d:
43:9b:e9:eb:13:fe:9e:43:e3:53:8c:dc:d3:4a:57:41:1e:25:
58:7b:1c:b4:7c:75:d4:50:a7:7f:b2:c6:d2:5c:97:56:3e:47:
65:96:b4:5f:00:6d:1c:fb:a8:1e:7f:36:cd:12:b6:8f:72:19:
50:b1:ce:3c:e5:cc:70:c1:1d:1e:60:e9:0b:5d:5f:76:4c:f0:
69:ad:c0:d4:90:52:31:a4:ef:e0:f3:73:a3:49:18:c0:97:31:
59:d3:cb:42:a1:cb:26:c4:d8:a9:60:e1:29:57:5c:e6:a7:a2:
f4:14:39:61:62:23:d6:2a:f4:80:3e:52:9a:3a:45:25:59:c2:
27:ee:78:8b:a9:ef:05:19:98:01:28:c6:57:77:6c:ce:f5:1a:
83:4b:9b:82:58:11:9a:3e:b1:3b:3e:e6:f6:3e:de:d3:68:1e:
9c:46:e1:9b:dc:91:1f:41:ec:8a:d7:15:9f:4a:27:99:b5:5b:
35:6a:13:47:24:7b:25:41:ad:2e:d8:f0:32:1b:d3:f3:fc:66:
d2:5b:98:04:55:1c:97:16:e0:8c:60:03:c3:15:a8:4d:87:ef:
7a:90:75:de:98:28:9c:1e:9b:7e:64:13:a5:3a:f4:b3:00:51:
b3:87:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:20 2025 by rpki-client