Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/plnyth9YBY6yTGhfoRBgKU2EXBs.roa
File: plnyth9YBY6yTGhfoRBgKU2EXBs.roa (raw, json)
Hash identifier: 3CrySiEhrDkUVUpBQTzQGwGepnYH7SsT83yPmLp7CzA=
Subject key identifier: A6:59:F2:B6:1F:58:05:8E:B2:4C:68:5F:A1:10:60:29:4D:84:5C:1B
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0925
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/plnyth9YBY6yTGhfoRBgKU2EXBs.roa
Signing time: Mon 22 Feb 2021 14:08:04 +0000
ROA not before: Mon 22 Feb 2021 14:08:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 119.14.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2341 (0x925)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 22 14:08:04 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A659F2B61F58058EB24C685FA11060294D845C1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:ac:26:7b:ae:72:b1:48:77:5a:fd:99:29:
0d:a2:1b:38:5c:3e:34:19:de:40:ce:95:36:59:16:
ad:fa:fc:1d:be:da:c1:60:8f:89:f0:49:60:09:d7:
bb:55:5e:a9:19:85:1a:da:0b:68:09:32:0b:8d:f0:
a7:40:7d:b9:89:64:44:77:33:24:11:ce:7a:ac:f3:
a8:16:5d:fe:97:94:3e:19:69:de:9f:cf:67:91:d3:
45:58:70:c5:b7:23:fd:e9:b4:28:9a:6a:50:8d:00:
8b:ab:34:35:79:7a:62:b9:6b:c8:d5:58:0c:38:4e:
94:2e:1b:5c:2b:06:05:c1:73:54:7e:f9:51:68:2f:
59:cc:84:b6:39:db:0e:78:f0:9a:3f:62:a4:7c:c9:
42:d0:5c:69:50:fb:b2:7a:67:49:a1:40:3d:55:9a:
b0:1c:ee:6d:cb:79:9e:09:78:38:61:ab:58:91:d0:
23:4b:af:fe:3a:12:21:cf:ac:f9:a3:9b:b1:e5:63:
5a:7e:a3:b9:5d:84:8c:dd:47:ff:d9:b3:2a:80:c9:
45:6a:6e:39:9a:6f:94:03:6f:80:b8:07:76:cf:9b:
81:22:53:74:47:94:58:b0:61:b3:93:25:61:aa:4d:
07:1e:fd:d8:26:74:06:ba:04:37:6b:82:8b:e1:2e:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:59:F2:B6:1F:58:05:8E:B2:4C:68:5F:A1:10:60:29:4D:84:5C:1B
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/plnyth9YBY6yTGhfoRBgKU2EXBs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.14.0.0/17
Signature Algorithm: sha256WithRSAEncryption
9e:c3:f6:53:8b:8b:40:13:57:2c:0a:19:b9:03:25:7f:e0:a2:
7b:5d:dc:1d:58:96:70:ff:f2:c3:9f:e9:cd:a2:47:85:98:96:
e9:51:3e:da:ee:47:a3:57:8b:ca:62:a5:d3:05:7e:83:d5:e5:
e3:e5:6f:77:a0:00:f4:7f:22:60:70:4e:98:f9:45:11:fc:e1:
70:a3:eb:ba:f9:52:21:81:91:bc:27:32:5b:16:03:f7:71:64:
8c:ea:56:6e:b2:38:be:f4:07:4b:56:87:c1:e5:b5:54:aa:03:
88:7e:67:07:bc:f7:08:0f:12:d4:08:ff:bf:76:0e:89:6d:94:
a2:1a:23:52:e2:ad:d6:c3:ef:0f:c4:a8:d8:b2:aa:86:0a:01:
45:a0:f7:61:52:1c:cb:f1:9a:42:48:e1:82:6d:4d:76:60:9a:
ce:b8:31:9a:bf:48:44:26:34:82:7b:4a:91:73:56:44:0d:fa:
74:6d:7e:67:aa:5d:a5:54:d1:79:51:49:86:fe:2c:39:66:81:
50:25:f1:4c:c8:d7:a3:cd:ba:3b:c3:bb:fc:9b:2b:d4:c4:37:
e3:b0:e2:99:df:d6:2a:3f:7b:ae:6b:6f:74:c5:a6:aa:15:a3:
23:1a:e1:64:fd:b7:14:10:e5:9a:68:ba:b8:88:f5:14:c5:34:
de:62:50:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org