Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/oebH3CN8OwwwrcGTWhc5g6sO1lU.roa
File: oebH3CN8OwwwrcGTWhc5g6sO1lU.roa (raw, json)
Hash identifier: +3lr4aSIy+2sciAmNaWDOKDCOwnxBdsnr+1Fh+Xdxfs=
Subject key identifier: A1:E6:C7:DC:23:7C:3B:0C:30:AD:C1:93:5A:17:39:83:AB:0E:D6:55
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 08F1
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/oebH3CN8OwwwrcGTWhc5g6sO1lU.roa
Signing time: Sun 07 Feb 2021 11:52:57 +0000
ROA not before: Sun 07 Feb 2021 11:52:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 119.14.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 7 11:52:57 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A1E6C7DC237C3B0C30ADC1935A173983AB0ED655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:dd:d9:62:de:7c:7c:d3:8c:e7:b3:62:18:
59:b5:fd:4f:b4:66:dc:9e:a0:da:b8:e2:a6:8b:ed:
7d:e1:18:49:d6:4a:5c:71:6d:db:ec:19:f8:a3:dc:
cd:d5:a6:d4:a5:f1:74:b3:20:e6:5f:05:f3:f1:b6:
4e:a6:7c:f1:97:9e:a6:1f:fb:7e:d0:25:68:49:a5:
0c:11:90:78:a3:94:17:a7:c3:af:d0:3e:ab:57:b9:
c1:be:3d:51:ac:5c:52:5e:33:97:3e:1c:37:8a:3f:
22:54:cb:47:f3:53:e8:e2:89:19:59:46:43:c8:b2:
27:ef:5a:80:88:11:22:ab:8d:47:8d:3c:81:8f:86:
4b:87:df:98:e4:75:98:1c:ab:06:8a:63:ca:30:4b:
1c:36:bd:93:5a:0a:ed:c2:9c:a2:7a:58:2a:a0:0c:
5b:b4:13:9e:36:6e:d4:98:3c:3d:fa:ce:e2:6d:6f:
24:e0:eb:ce:d6:32:0c:b8:2f:9e:68:34:5f:34:93:
70:a4:e5:5d:51:ee:a9:f9:31:75:09:b1:0b:5d:b6:
de:b1:bd:51:6b:95:7d:97:ab:f6:06:8a:85:0b:a5:
72:8b:7d:99:23:e5:73:96:03:99:00:d2:cb:7a:5d:
7d:f1:65:34:8d:3e:fd:da:db:d7:59:79:3b:29:c8:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E6:C7:DC:23:7C:3B:0C:30:AD:C1:93:5A:17:39:83:AB:0E:D6:55
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/oebH3CN8OwwwrcGTWhc5g6sO1lU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.14.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:72:47:8a:03:74:18:7a:2a:8c:96:eb:f3:2b:ff:c4:75:ee:
e5:b1:6d:0a:e9:94:58:70:e9:8a:52:0d:f1:1f:74:30:35:2f:
13:7f:00:83:ae:2a:91:1c:66:91:34:3b:54:ba:cd:5c:67:3a:
d7:01:d1:1a:e3:e0:a2:92:1d:68:3a:d5:25:f6:a5:20:ab:2c:
9b:47:27:8a:ea:5b:f3:6e:24:89:39:c0:bc:67:5d:63:02:65:
97:0e:9e:44:4b:4e:9e:e3:89:1f:75:a6:ec:a3:aa:99:a3:3c:
78:a6:c9:8c:14:54:fb:7c:c6:c9:e8:e8:c5:6c:99:d3:2c:8e:
29:d2:fc:13:a7:4f:fa:30:01:55:a2:ca:d0:cc:f9:de:b3:8e:
70:0c:3e:6c:2c:76:97:4f:40:b8:a5:53:8f:ac:68:a6:73:41:
18:ad:e0:95:20:56:e7:50:75:9c:44:e5:98:3e:7b:9d:33:dd:
58:6f:a6:65:4b:04:4e:21:0b:32:02:1d:63:74:5e:2e:37:4f:
59:f9:57:17:ed:8f:9b:a4:96:22:c3:bd:73:b3:ce:33:a5:45:
c1:79:7a:e3:dc:8a:dc:e6:20:d4:22:c3:d4:5f:37:13:e2:47:
9a:00:9e:af:de:7e:bd:24:a2:32:99:be:33:66:67:34:fc:8a:
13:7d:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org