Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/wBFsFxl1zjHoUOfS4NwpPkDkV2o.roa
File: wBFsFxl1zjHoUOfS4NwpPkDkV2o.roa (raw, json)
Hash identifier: i4t17+Jp9+DgUuv/t034XOTjE72ldyT9aUgp4EziM8M=
Subject key identifier: C0:11:6C:17:19:75:CE:31:E8:50:E7:D2:E0:DC:29:3E:40:E4:57:6A
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 078C
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/wBFsFxl1zjHoUOfS4NwpPkDkV2o.roa
Signing time: Tue 29 Sep 2020 10:04:32 +0000
ROA not before: Tue 29 Sep 2020 10:04:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 115.43.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932 (0x78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 10:04:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C0116C171975CE31E850E7D2E0DC293E40E4576A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c9:f9:f1:10:6c:c3:a6:7f:18:ce:e5:5c:c1:
db:ee:d9:cb:95:f0:bb:ce:49:bd:ad:ab:56:e6:22:
e1:6a:9b:71:a3:e8:d4:24:e0:3b:30:2e:3d:24:f2:
b0:56:84:95:81:ee:56:1e:d0:b4:7b:cc:6f:2d:6c:
60:7e:18:67:40:5e:69:d7:ba:88:dd:9f:1d:e2:20:
d4:cb:9d:6b:a7:2d:27:68:2e:a5:5c:9e:79:9e:c9:
a2:8d:b6:bc:bb:4b:72:e5:13:21:c9:6b:66:29:2c:
5b:2c:93:f9:f6:17:c8:1f:77:b1:b4:b7:e4:fa:bb:
99:fd:77:b4:34:03:c8:99:f9:cf:f4:fe:15:29:f7:
5b:a2:db:61:65:c4:9a:48:98:26:fc:47:67:af:60:
50:a3:5f:07:5e:82:3c:21:5e:7c:fb:ad:89:21:3a:
12:12:f6:c3:32:0b:48:e1:10:2e:30:78:2b:25:b9:
ce:ae:dc:c0:d5:53:9d:e3:a7:44:64:4e:da:31:fe:
3b:76:37:10:51:ac:d6:11:25:a8:5b:fc:d9:b6:79:
dc:c0:fd:38:6f:f5:89:9c:5c:b3:a9:fa:b5:d6:5a:
f0:b6:20:18:fe:36:7d:9d:48:e9:69:e0:1a:e8:9f:
78:ed:e0:06:3e:0f:51:d2:82:a9:16:c5:9c:f2:09:
ed:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:11:6C:17:19:75:CE:31:E8:50:E7:D2:E0:DC:29:3E:40:E4:57:6A
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/wBFsFxl1zjHoUOfS4NwpPkDkV2o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:7c:db:a5:0c:77:6d:d3:a6:b2:ec:17:be:72:1c:b7:30:97:
a3:a2:ea:85:e5:0b:0b:82:51:38:6b:0f:85:57:c9:4c:3d:07:
41:b6:ef:53:8c:a0:43:28:b0:18:8b:26:20:27:52:77:36:7c:
9b:71:2f:97:e7:c9:41:a6:36:d2:12:03:c9:9e:f6:30:51:cc:
43:2c:09:be:5b:07:47:2e:64:0d:7d:e0:1e:58:b7:0c:da:42:
87:1c:4b:8e:4f:bc:e4:89:1e:d9:6e:60:52:15:87:d9:9b:20:
e5:68:f7:a4:6d:db:be:c7:ef:7f:f7:66:d2:49:62:ee:08:8e:
4d:8b:bf:e4:05:ee:5a:e1:e7:b3:4a:93:5f:e9:97:54:12:d8:
53:6c:1b:c8:f7:eb:77:68:35:b4:d1:36:e4:4b:8b:6b:7c:49:
b6:e3:39:a5:a2:ad:53:16:d2:d2:70:6e:b6:a6:b6:e3:b7:a4:
a4:c6:01:7f:8a:e1:78:1f:99:80:3e:7f:aa:3f:59:17:e7:85:
3e:06:8f:d1:dd:23:4d:ac:54:29:bb:d1:c6:1a:22:37:61:86:
29:88:d0:ab:db:1a:f0:87:12:2d:3f:fc:0d:9e:4f:ba:56:30:
fe:33:c9:87:ad:9a:4c:0c:9f:ba:43:9b:f5:fd:0f:30:14:af:
c4:d9:b0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org