Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/gKCumNbVfG16gxD0O6pxtNRpWZs.roa
File: gKCumNbVfG16gxD0O6pxtNRpWZs.roa (raw, json)
Hash identifier: 08FVkk+maJ97c7osaf7PcC/oE7BZvCex4L1bOM0AIPM=
Subject key identifier: 80:A0:AE:98:D6:D5:7C:6D:7A:83:10:F4:3B:AA:71:B4:D4:69:59:9B
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 094F
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/gKCumNbVfG16gxD0O6pxtNRpWZs.roa
Signing time: Wed 03 Mar 2021 02:05:30 +0000
ROA not before: Wed 03 Mar 2021 02:05:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 124.155.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2383 (0x94f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Mar 3 02:05:30 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=80A0AE98D6D57C6D7A8310F43BAA71B4D469599B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:89:53:4f:51:d1:bf:80:6b:ac:c2:cd:8c:
f9:e3:af:3d:34:4f:10:87:9b:f1:25:c2:c6:ae:ec:
37:df:3a:b0:54:71:66:64:e5:9c:80:95:73:d8:82:
61:14:5f:d4:a0:3d:06:79:c2:d7:2a:f5:cf:1a:23:
07:ae:97:7e:ea:4c:22:f8:d0:92:d1:a6:74:41:e7:
e3:93:9b:d6:b0:35:f9:99:22:9b:54:8a:4d:19:99:
fe:4b:48:b7:49:68:1a:e1:4c:65:7f:88:cc:bc:5d:
73:cd:53:9f:66:7f:f4:aa:49:3f:30:2e:27:91:f7:
a7:86:46:02:e9:52:b9:eb:45:4d:f2:5d:f6:d4:c3:
70:f6:fa:5e:d1:b8:ba:0d:58:82:b1:00:84:9f:69:
78:e4:13:73:90:56:a0:43:73:13:f7:ce:60:e8:db:
ad:31:13:8d:c2:16:77:82:c9:b0:8e:d9:ed:62:62:
e0:f7:bf:12:49:e8:b0:ca:fd:94:e8:f6:9e:d6:f7:
ae:a5:b2:b1:46:5c:3a:6b:23:4e:f4:1b:90:02:89:
d4:38:ce:1d:f5:cc:a0:22:22:1a:87:71:e4:bc:55:
0f:af:03:ee:80:1b:c3:c3:44:3f:e4:6b:7b:b5:78:
2d:76:90:9a:28:e7:c5:41:63:e1:89:c1:c4:3d:9f:
f9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A0:AE:98:D6:D5:7C:6D:7A:83:10:F4:3B:AA:71:B4:D4:69:59:9B
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/gKCumNbVfG16gxD0O6pxtNRpWZs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.128.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:33:58:7f:95:90:c6:8f:78:ad:f0:0b:f1:1a:56:49:76:03:
44:4b:42:c2:2e:76:de:58:e5:3c:e8:ba:6a:fe:40:0a:ef:eb:
86:d1:a3:82:aa:40:4e:c6:23:97:67:f2:73:58:09:22:88:90:
34:de:d2:af:c3:83:53:da:57:1f:f5:73:50:7f:d1:2f:e7:4b:
76:ca:06:20:f5:75:47:cd:14:4f:7a:0c:1e:e2:4b:fa:b7:32:
7d:b8:d4:80:f6:1c:f0:1e:25:6a:e1:03:83:e8:81:20:a2:37:
e7:56:10:a1:e2:7a:ba:3a:7a:bd:e8:88:e9:39:e5:3a:da:6c:
06:51:bf:a7:41:69:01:e3:c1:28:a5:22:57:cb:e9:e3:ac:f6:
69:b9:d4:af:c1:f8:fe:40:ba:b1:0c:75:dc:df:2c:3f:7c:ec:
ab:68:c7:32:f1:a3:63:d9:1b:25:e1:80:1a:2a:0f:bc:50:e9:
f2:7f:a0:72:24:bb:c7:95:62:c2:13:ba:33:d1:40:eb:e8:ca:
42:f8:a0:58:8c:a2:f0:57:19:e4:ac:14:ac:62:e2:b0:65:27:
71:f2:2a:4f:8d:78:e7:bc:3f:1d:cd:45:87:eb:fa:86:53:52:
ae:63:98:a2:76:62:3b:7a:48:66:3a:e7:67:b1:e0:8a:1d:48:
ad:46:9f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org