Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/fkzFbb9TH2kMTs4EGk8_dNHzA-I.roa
File: fkzFbb9TH2kMTs4EGk8_dNHzA-I.roa (raw, json)
Hash identifier: fhOw+rLGn+cdlspZyZWgJ1Zv5Z+hdierTqSWIK15mvc=
Subject key identifier: 7E:4C:C5:6D:BF:53:1F:69:0C:4E:CE:04:1A:4F:3F:74:D1:F3:03:E2
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 09FD
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/fkzFbb9TH2kMTs4EGk8_dNHzA-I.roa
Signing time: Wed 29 Sep 2021 02:40:39 +0000
ROA not before: Wed 29 Sep 2021 02:40:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9416
IP address blocks: 115.43.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2557 (0x9fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 02:40:39 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7E4CC56DBF531F690C4ECE041A4F3F74D1F303E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:e6:20:ae:1e:8f:ae:4f:08:c4:80:68:68:
0e:14:55:13:77:f2:5c:b3:e1:20:c8:cc:06:1f:73:
6b:6d:ae:9a:05:21:d4:53:37:33:9b:f8:84:7a:2c:
f2:25:96:47:bf:7e:56:7c:ac:cb:5e:93:a0:fc:3b:
97:9e:90:40:b5:cd:04:fe:2e:1f:1d:a9:4b:26:00:
d4:12:3b:ca:be:6b:91:bd:3e:52:2c:f8:d7:c5:89:
61:21:c4:ff:f8:a7:9f:c4:22:e2:3b:99:db:40:59:
42:04:4f:65:3d:81:fc:3d:9d:de:14:26:cd:1a:b2:
ef:0a:eb:65:36:ea:fc:79:11:f2:67:8e:5b:25:1e:
cb:8a:92:fe:16:96:90:65:12:f8:5e:d4:b7:92:30:
24:c4:78:fd:fd:2a:14:7d:09:53:75:d8:25:ca:0f:
df:af:80:90:8d:82:04:b5:b2:97:a0:e1:d0:8b:ce:
e1:1d:d4:22:49:06:61:5d:1b:e6:92:d9:b3:56:46:
11:1c:b1:78:10:f1:f4:f8:20:db:00:cd:2e:46:be:
b6:7e:dc:2e:4c:28:2f:8d:c4:b4:c7:dd:17:b4:d0:
60:de:be:6c:f3:8f:7e:0a:56:a5:9c:8a:e0:16:94:
11:e7:45:51:0a:0c:12:51:45:3f:7d:f6:37:17:49:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4C:C5:6D:BF:53:1F:69:0C:4E:CE:04:1A:4F:3F:74:D1:F3:03:E2
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/fkzFbb9TH2kMTs4EGk8_dNHzA-I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.128.0/17
Signature Algorithm: sha256WithRSAEncryption
73:66:e9:75:71:14:be:16:08:39:cc:82:8b:11:53:63:c0:2a:
c2:2b:ae:16:b8:84:5b:92:95:3e:4d:84:11:92:2a:a4:00:6b:
0f:cc:ca:a7:ee:ca:97:e1:87:38:d8:ad:c5:1c:87:4d:b7:cd:
a5:8e:63:13:1c:a9:85:92:41:90:e5:ba:10:63:38:26:8f:de:
f2:e2:1e:92:18:6d:a5:27:89:1d:79:10:d4:2a:40:67:df:89:
64:ff:a4:84:88:f3:ff:dd:b8:2a:61:19:86:31:eb:3a:d8:19:
c0:a6:3f:b8:8b:b9:52:58:ee:6f:99:41:25:39:28:bc:68:7b:
7d:08:5e:a6:bd:43:e3:c6:55:61:0e:69:0a:f4:46:10:49:df:
99:27:dd:74:d2:e4:59:0e:29:a7:87:b6:56:72:ad:83:1f:39:
ba:5f:f1:85:cc:ad:a1:22:40:56:3f:19:8e:ee:5d:df:d5:93:
40:de:f3:1b:0b:1d:58:55:c9:7d:43:4a:fa:78:5e:3b:d9:57:
7a:95:07:b5:4a:e0:6a:48:3d:08:18:be:9c:e2:91:c9:ba:c3:
17:78:2d:75:99:e4:bd:63:ab:8d:40:9c:3c:5b:d7:4e:c6:75:
d9:f4:ee:1b:f5:f1:e7:4b:02:b3:56:8e:0d:e3:14:0b:2a:9c:
be:f2:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:53 2025 by rpki-client