Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/njOo8u-dHYnscy-fDNB0MUQwomM.roa
File: njOo8u-dHYnscy-fDNB0MUQwomM.roa (raw, json)
Hash identifier: gZE2S13H81tF/7ZRqlxRvKB9SdY5f8/S4iDD1rq4r9I=
Subject key identifier: 9E:33:A8:F2:EF:9D:1D:89:EC:73:2F:9F:0C:D0:74:31:44:30:A2:63
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0AE8
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/njOo8u-dHYnscy-fDNB0MUQwomM.roa
Signing time: Thu 15 Sep 2022 02:40:49 +0000
ROA not before: Thu 15 Sep 2022 02:40:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18042
IP address blocks: 202.151.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2792 (0xae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 15 02:40:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9E33A8F2EF9D1D89EC732F9F0CD074314430A263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:d7:35:13:05:7e:38:f8:06:24:f2:0f:23:
91:57:56:88:e8:69:af:44:a6:f1:51:e5:b1:f3:e6:
46:e9:bf:93:33:7c:f8:14:68:6a:43:13:4e:04:68:
c9:a2:a1:e6:8a:74:92:08:43:c6:83:9d:03:e8:b1:
8a:16:84:85:04:cd:67:d2:fb:9c:58:10:af:c1:95:
31:79:8d:dc:20:3b:c7:a5:82:88:f2:7a:ee:93:ba:
69:38:28:19:cd:d6:f4:15:53:71:21:06:53:ef:0c:
74:0a:dc:6a:d5:ed:a3:b0:b3:be:9c:de:31:35:61:
ed:a2:55:16:06:e2:89:1a:c0:2c:63:4f:6a:ed:86:
1e:5d:51:16:03:74:0f:39:eb:08:1e:b1:8c:a4:30:
45:85:3b:1b:97:f4:ed:02:55:7f:28:78:8c:a0:b1:
16:28:d1:e0:df:2b:01:21:18:85:ff:d8:53:14:dc:
15:e2:bb:88:e9:cc:88:a1:f5:2e:8d:fb:e8:40:e9:
b8:5f:b0:87:c3:32:e7:40:6a:56:1d:53:c1:df:a7:
08:d4:0a:44:61:17:17:54:38:a2:0e:5b:e1:f9:f8:
11:8d:47:b2:fa:1d:85:5a:d0:3c:99:3e:99:24:00:
48:ff:a1:3b:42:28:ce:a9:0f:d7:75:fc:21:1c:f2:
d3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:33:A8:F2:EF:9D:1D:89:EC:73:2F:9F:0C:D0:74:31:44:30:A2:63
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/njOo8u-dHYnscy-fDNB0MUQwomM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.151.48.0/20
Signature Algorithm: sha256WithRSAEncryption
b4:07:c2:a0:36:1d:b2:5f:b7:46:64:16:e2:20:35:1b:41:76:
50:52:4e:a1:5c:e6:ca:55:f1:37:03:4f:f9:1e:ce:fd:5e:51:
d9:90:52:94:bb:9e:e4:4c:29:52:62:1f:45:5a:ce:ac:0d:b4:
08:d2:80:5d:be:87:18:42:9b:6b:30:b0:29:b4:9f:67:25:24:
cd:18:66:3f:e8:a0:98:7d:d0:08:34:15:f2:38:5a:0a:b6:1e:
18:e6:f3:36:6b:2f:dd:1d:9e:97:be:ce:f6:89:2f:42:85:aa:
6c:5d:2f:0b:04:79:a5:9d:d1:f9:55:90:f6:66:ed:18:99:1e:
eb:f9:98:5f:ea:a6:84:d1:cb:fe:7a:fd:a8:32:35:13:f8:ca:
a8:e7:bf:13:bb:09:da:f1:c4:78:49:50:ba:8c:ea:fe:76:4e:
70:d5:0d:07:2c:8a:87:4a:14:e7:b5:af:5c:2c:9c:50:c1:87:
b6:04:31:59:79:f1:28:08:70:7f:76:69:d1:c9:20:87:2d:6b:
08:52:3a:e9:3c:bf:da:66:0e:12:38:f1:71:47:46:c1:9d:19:
12:78:e6:40:16:fb:6a:12:17:f6:4d:da:87:5b:99:b0:8e:a9:
06:f1:c5:66:5f:f2:4c:d0:f1:fd:55:ac:01:42:25:7a:c8:a7:
03:db:a4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org