Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/pzhphrjqoL8C7OY8CQznCxFvG3U.roa
File: pzhphrjqoL8C7OY8CQznCxFvG3U.roa (raw, json)
Hash identifier: nN6aBhJ5dNckbcjtdnY4/Qbt6YlQ7zeEhtawzAdol9o=
Subject key identifier: A7:38:69:86:B8:EA:A0:BF:02:EC:E6:3C:09:0C:E7:0B:11:6F:1B:75
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 09F7
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/pzhphrjqoL8C7OY8CQznCxFvG3U.roa
Signing time: Wed 29 Sep 2021 02:40:37 +0000
ROA not before: Wed 29 Sep 2021 02:40:37 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18042
IP address blocks: 119.14.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2551 (0x9f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 02:40:37 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A7386986B8EAA0BF02ECE63C090CE70B116F1B75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c1:67:94:b5:8a:c1:2b:e3:66:14:ad:bf:89:
f0:35:36:c9:e4:70:56:d6:d7:a9:60:b5:ac:f2:4b:
86:72:dc:d3:0e:b5:06:82:0f:81:3a:7b:6f:31:ea:
76:b4:c0:4b:3b:eb:7a:3b:6a:76:2c:cd:66:35:b8:
b3:77:fc:68:31:f9:dd:be:42:c5:2a:22:ed:0b:70:
36:7f:e0:d7:42:d2:16:95:77:26:49:b6:5e:c7:cc:
77:dc:4f:15:a4:c8:c7:05:e5:7f:2e:51:74:70:a1:
ad:96:90:bd:c2:b5:d3:d5:ad:bc:d3:91:05:53:47:
b6:a7:46:c5:b3:a1:d4:8a:54:79:e0:68:e8:c1:a3:
90:30:99:8c:59:e4:3a:ad:91:65:ea:3e:31:c9:cf:
19:85:21:dd:dc:ec:69:ab:c8:81:a6:19:03:28:2e:
e6:62:9d:72:be:e4:a0:1f:5c:db:be:47:13:f3:94:
b3:32:f3:52:80:56:61:6c:4f:0b:b4:42:76:61:60:
44:70:31:b2:6d:0e:16:b9:d6:48:00:91:aa:ad:91:
eb:db:0b:da:fe:b5:9e:90:5d:e9:12:14:69:77:cd:
de:07:7d:30:76:63:98:a8:5b:0e:ff:a2:a9:56:fa:
fb:23:c7:85:d6:f2:b0:95:14:3e:26:11:3d:80:35:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:38:69:86:B8:EA:A0:BF:02:EC:E6:3C:09:0C:E7:0B:11:6F:1B:75
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/pzhphrjqoL8C7OY8CQznCxFvG3U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.14.0.0/17
Signature Algorithm: sha256WithRSAEncryption
08:10:d9:bc:f9:a5:d1:7e:21:6c:2d:76:1d:22:0c:fb:c5:a7:
c8:86:a4:37:f9:66:8a:b4:75:98:b3:c3:58:03:69:ce:28:a1:
54:fc:fe:04:c6:04:80:5f:a6:31:6a:cb:10:8f:6b:ad:01:7c:
91:d3:8b:e5:47:81:81:40:f6:13:a0:3e:a0:de:18:d9:9a:61:
0a:bf:a8:5b:a7:66:10:b5:a8:89:1b:00:50:a6:f4:0a:0a:f8:
d7:5d:20:20:f8:e0:88:46:b5:7f:a6:2e:bb:47:75:f4:e4:ba:
42:82:90:09:cd:2b:ee:90:40:18:0f:cf:40:2f:f8:32:b7:ab:
f4:21:b0:b4:54:52:df:f0:a5:63:19:be:17:69:35:42:8e:a2:
51:0d:76:cf:32:7c:9b:e0:f6:5b:44:0b:82:69:9e:92:e1:ce:
96:cf:81:04:17:ac:3b:af:40:05:0a:fe:0f:99:09:0e:14:ed:
dd:3c:05:30:1b:ca:e1:20:b8:77:bd:da:91:22:b3:88:48:0d:
1c:e6:f0:e9:b9:8c:67:33:c5:c0:e5:57:1b:2b:f1:aa:16:96:
e3:08:80:9d:4a:e7:53:d5:32:0a:e7:68:c1:c2:31:3f:55:19:
1a:1b:22:50:29:32:2f:f2:7d:cf:ba:e7:99:16:d4:28:da:86:
ee:a7:c1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org