Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/m4fJ2YGR33l19fh00cGfEaAx77c.roa
File: m4fJ2YGR33l19fh00cGfEaAx77c.roa (raw, json)
Hash identifier: dnvIy7VQO+UZS7P69kJxtga77iIyZhwWCtQUcxCFDNY=
Subject key identifier: 9B:87:C9:D9:81:91:DF:79:75:F5:F8:74:D1:C1:9F:11:A0:31:EF:B7
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0AE8
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/m4fJ2YGR33l19fh00cGfEaAx77c.roa
Signing time: Thu 15 Sep 2022 02:40:51 +0000
ROA not before: Thu 15 Sep 2022 02:40:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9416
IP address blocks: 115.43.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2792 (0xae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 15 02:40:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9B87C9D98191DF7975F5F874D1C19F11A031EFB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:6f:63:dc:b3:e6:b4:7a:32:0a:ca:b7:4b:
5c:f1:8b:7a:65:9b:44:78:95:18:30:84:e3:b5:41:
02:a1:5e:05:04:76:1f:87:fd:69:81:6e:24:21:08:
d9:ab:2a:4b:c5:74:37:4c:77:31:e0:b3:b2:fc:d3:
42:83:2c:db:24:c8:9a:8a:8d:85:22:e6:73:1f:39:
e3:18:e1:b9:e8:63:d6:2f:92:74:06:13:a4:eb:2d:
6f:11:21:f6:ec:2b:04:c5:a7:46:89:99:1b:af:2a:
17:61:3c:b3:64:77:97:fe:c4:b5:83:5d:55:33:3b:
72:5f:db:c7:13:76:fc:31:43:78:4f:dd:a7:5e:7a:
ce:e6:d1:86:9d:fd:87:72:ee:5a:54:de:0e:b7:cd:
0d:3f:62:5c:08:fd:18:c8:33:65:fa:98:c0:0d:90:
9f:80:f5:cf:36:b6:86:76:79:19:44:42:70:3e:b0:
9a:b0:e0:5e:3e:8d:b1:59:d0:f4:c5:30:47:21:56:
13:a9:e8:33:1e:37:8b:2b:70:0b:41:ea:65:04:ff:
81:01:82:45:0d:58:87:59:ac:83:17:98:33:1c:73:
8a:dd:c9:1b:86:95:8f:92:12:81:8c:5e:e0:1e:2a:
1e:34:52:ff:ac:77:6c:d4:11:e7:f9:ef:52:41:89:
5c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:C9:D9:81:91:DF:79:75:F5:F8:74:D1:C1:9F:11:A0:31:EF:B7
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/m4fJ2YGR33l19fh00cGfEaAx77c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:e7:5b:18:f8:08:f1:7a:f4:2e:95:9d:be:3f:9a:f5:eb:a1:
17:01:0d:7d:7c:4a:56:da:fd:e1:dc:ef:bc:27:c1:15:6a:45:
62:be:ab:c0:25:6a:c9:9e:80:a0:76:22:e6:b9:8a:b3:8f:dd:
84:2a:7c:2d:f8:75:a4:8f:f6:e3:aa:4f:5c:34:f1:2c:60:12:
a6:dc:58:56:0c:17:28:d8:cf:ca:29:82:e1:59:3b:39:ed:a6:
df:9f:b5:34:dd:a6:f8:ed:d2:f6:71:5a:50:7e:e7:0d:19:81:
28:5d:5b:0e:5c:6d:0c:31:18:e1:ad:ff:aa:d6:17:38:a2:41:
45:4c:66:21:9e:1b:4e:68:76:c1:89:b8:21:db:18:c9:85:72:
41:79:01:5d:74:90:c6:05:6f:07:a7:e6:b9:20:1d:67:6f:7b:
d7:18:cb:8d:1a:fc:04:20:90:6c:0b:50:01:6c:39:8b:ff:e9:
40:84:bf:75:2e:a4:3d:ae:a5:e2:83:18:1c:6a:d6:ee:28:ff:
81:66:d2:26:60:f1:82:96:a2:84:bd:63:e2:05:00:ec:12:e7:
51:43:8f:86:72:af:ec:e4:2a:ac:12:c2:4d:fd:fb:bc:98:f6:
b1:58:af:2d:ea:6a:8c:c9:d6:33:cd:cc:63:2f:c9:d5:b2:08:
c6:85:0d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org