Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/kq1GiYtDzut2ozRAK4dLfN4BNx8.roa
File: kq1GiYtDzut2ozRAK4dLfN4BNx8.roa (raw, json)
Hash identifier: UNb7AV7OAMf2n4CPjg7ADBHSuYmCKUq8hf7Dl4LL7jU=
Subject key identifier: 92:AD:46:89:8B:43:CE:EB:76:A3:34:40:2B:87:4B:7C:DE:01:37:1F
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 090B
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/kq1GiYtDzut2ozRAK4dLfN4BNx8.roa
Signing time: Sun 07 Feb 2021 12:42:35 +0000
ROA not before: Sun 07 Feb 2021 12:42:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 124.155.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315 (0x90b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 7 12:42:35 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=92AD46898B43CEEB76A334402B874B7CDE01371F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:86:4f:a0:ee:db:49:be:72:b9:be:4c:b3:
27:51:86:43:09:54:e7:8d:33:7d:fd:3a:c6:e3:52:
17:ed:2a:d2:c9:f3:46:5e:5f:65:e3:b5:a5:81:99:
85:02:96:0c:6c:c1:44:9c:03:19:55:d2:5c:e7:43:
c3:51:26:08:fb:10:bd:ad:1d:17:4e:be:6f:96:37:
d3:50:00:ef:58:a8:aa:54:ff:bb:0f:0e:b4:55:1b:
68:12:01:75:3f:57:89:fa:e6:0b:d3:4a:78:ab:34:
44:27:95:56:9c:dc:f1:7b:48:9b:e5:a6:f8:54:18:
a5:10:3d:f3:bd:d5:54:b6:d4:8f:d1:3f:29:77:05:
f7:f2:3c:2c:01:bd:d1:e8:db:4a:ae:84:fd:ef:b9:
ad:f4:de:a5:5a:b7:55:b9:74:bb:e0:33:40:fa:85:
c6:19:7c:b7:43:0a:fd:59:09:41:fe:e7:b0:e0:3d:
de:d8:42:9b:d9:a6:3c:08:f8:e4:32:4f:eb:d1:8a:
6b:73:68:42:88:c9:67:56:8d:57:55:a8:57:ac:de:
bf:68:7e:98:1b:59:35:b2:7a:a1:7d:17:17:c7:ad:
65:80:67:eb:78:14:b0:66:a0:ac:48:d1:eb:2d:1a:
4b:a0:22:15:ef:bb:a8:0b:9b:00:cd:eb:88:4b:ff:
d5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AD:46:89:8B:43:CE:EB:76:A3:34:40:2B:87:4B:7C:DE:01:37:1F
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/kq1GiYtDzut2ozRAK4dLfN4BNx8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.128.0/19
Signature Algorithm: sha256WithRSAEncryption
32:ff:76:f3:92:81:d3:a8:d7:db:8a:80:11:87:25:df:57:3c:
e2:a8:eb:60:d2:06:e6:35:a2:6d:ec:67:db:c7:8b:b3:e3:09:
18:4b:f7:eb:3c:33:e9:15:df:2f:9c:f7:5e:0e:2e:ca:ff:4e:
f9:b1:c0:4a:01:6d:78:82:78:9a:ae:0e:51:c7:73:95:29:63:
b6:8d:e4:3d:7d:1e:16:4a:86:fc:a3:61:dc:b7:58:60:b1:03:
64:e6:91:7c:a8:e3:b3:34:8b:f7:1b:8d:39:a7:47:dd:0a:97:
35:01:b6:98:e2:49:62:a5:63:17:da:78:f0:97:29:85:a0:eb:
9d:4f:2a:77:ed:ba:ef:34:ea:76:a7:a8:e6:1a:39:57:51:07:
d5:8c:ae:00:88:aa:be:14:59:70:8c:0b:0b:b3:88:72:e9:14:
d4:c5:bb:76:10:15:4d:65:1d:25:31:17:98:d9:c9:d4:84:2f:
e0:59:ef:08:5a:c6:c9:f6:9c:1f:f0:3f:78:05:87:86:a0:9c:
09:70:73:0e:28:8f:0d:e8:1f:55:1b:eb:1e:56:f8:1a:5b:1a:
a8:07:96:eb:ac:40:13:5d:34:79:9d:eb:65:cb:1e:b9:5f:e9:
f1:ac:dd:84:a0:71:f1:c6:eb:22:2b:b5:d5:8b:b2:19:c9:c7:
a7:46:fc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:30 2025 by rpki-client