Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/eo7TX2lhJAlnho954qQNtdsLh20.roa
File: eo7TX2lhJAlnho954qQNtdsLh20.roa (raw, json)
Hash identifier: oSZgGb8go9UrbgN+Kp4fv1zDm5B4JCSEe8NDH+PNjWQ=
Subject key identifier: 7A:8E:D3:5F:69:61:24:09:67:86:8F:79:E2:A4:0D:B5:DB:0B:87:6D
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0794
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/eo7TX2lhJAlnho954qQNtdsLh20.roa
Signing time: Tue 29 Sep 2020 10:04:34 +0000
ROA not before: Tue 29 Sep 2020 10:04:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 124.155.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1940 (0x794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 10:04:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7A8ED35F6961240967868F79E2A40DB5DB0B876D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:6e:82:46:bd:77:9a:fb:50:5a:c3:7f:b2:
ac:c5:dd:7b:9b:f6:55:2a:be:00:68:bf:6e:40:8a:
8c:83:84:2b:b8:d8:8d:82:37:23:4f:e7:44:96:3d:
7a:cb:cf:0d:6f:bb:71:ad:a5:b1:56:aa:b8:0a:96:
bd:37:dc:39:96:66:8f:d7:c7:1a:f4:d0:26:38:7d:
6a:a8:5f:66:94:c1:02:44:be:e2:29:3d:cb:16:e6:
a0:2d:f2:7a:a8:54:bc:19:6f:90:b2:b5:a5:46:c3:
46:63:fd:ae:a5:76:b8:78:dc:5d:bc:3f:33:55:c2:
5d:9d:2e:07:28:d7:24:35:9f:8b:e1:d2:81:fe:b5:
9d:c9:97:dc:e5:87:f6:ee:89:b1:64:08:92:7d:20:
24:1e:19:4c:22:0c:22:68:18:90:2e:68:4e:b6:40:
9d:6f:ed:4b:89:5c:22:8a:ad:0a:d6:4b:a7:3b:b3:
c1:e6:37:e5:a3:6f:dd:87:b4:9c:be:59:17:d3:12:
71:85:79:e6:41:dd:f5:39:74:52:c4:6c:08:bb:09:
b4:20:4c:54:30:86:c7:5f:06:41:d3:52:95:5e:3b:
30:4d:ac:a0:9f:28:6d:0b:e4:4e:61:c1:67:52:7e:
33:87:69:c6:4f:d2:ec:de:5b:68:d7:fe:25:97:4d:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8E:D3:5F:69:61:24:09:67:86:8F:79:E2:A4:0D:B5:DB:0B:87:6D
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/eo7TX2lhJAlnho954qQNtdsLh20.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:3e:00:76:20:ed:13:b6:af:49:75:43:08:4d:15:ea:a8:b4:
fa:db:b9:0a:2e:61:5c:ea:e7:32:ca:69:6d:60:30:e7:fb:74:
4c:ee:9a:cb:ca:90:fd:36:9c:e7:f0:9b:27:79:61:82:7f:a8:
46:c4:13:0f:9a:7f:ea:71:3f:de:6c:1f:e9:cb:09:19:f1:0b:
c3:eb:b1:ce:bb:d0:1b:53:36:37:07:27:6a:77:76:4f:32:da:
d9:69:44:7f:31:cb:3e:a2:64:d5:27:d8:3d:c0:e6:b5:0a:b0:
dd:49:55:e0:04:89:c3:ac:6d:8f:9b:0a:e7:36:31:ed:4c:64:
45:15:df:64:2c:dc:e8:bf:48:8f:bd:ec:22:e3:ea:ca:29:92:
60:19:b8:27:ed:dc:45:a6:a2:16:56:5a:97:80:40:64:a9:cc:
86:e5:f9:cd:7d:0f:c1:c7:9c:8d:7b:f1:51:36:66:fe:b6:cf:
da:01:2c:05:15:50:4c:ba:64:93:c5:f9:e5:aa:d6:05:76:4e:
05:d3:2b:2b:8b:a2:8d:07:dd:c7:26:d2:aa:c9:81:f8:19:b0:
4f:7b:0a:b3:79:df:94:51:be:c7:ec:4b:96:75:e4:19:d0:4b:
20:e3:f6:2a:f1:e8:b6:7c:cc:27:70:48:d6:fa:df:71:c0:39:
fe:42:5c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org