Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/yWt6G-_chxTnFHS9-9Yhct4RTy8.roa
File: yWt6G-_chxTnFHS9-9Yhct4RTy8.roa (raw, json)
Hash identifier: 9waxrnmRMmDHcwHUKIPVPpL6bKMXaa5ZTha7UGn57QY=
Subject key identifier: C9:6B:7A:1B:EF:DC:87:14:E7:14:74:BD:FB:D6:21:72:DE:11:4F:2F
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 094D
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/yWt6G-_chxTnFHS9-9Yhct4RTy8.roa
Signing time: Wed 03 Mar 2021 02:05:22 +0000
ROA not before: Wed 03 Mar 2021 02:05:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 124.155.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2381 (0x94d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Mar 3 02:05:22 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C96B7A1BEFDC8714E71474BDFBD62172DE114F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:db:d6:74:b8:f8:48:08:c2:6f:a2:19:db:
9d:7e:b3:56:65:5b:27:f9:4f:61:d0:dd:a7:6c:f1:
ec:2b:2f:06:7c:cb:b4:1a:8c:1d:f8:35:c5:20:6e:
e4:cc:1d:1b:7e:49:55:f4:7b:85:bb:bb:4a:7d:f0:
a5:b2:08:52:f1:3f:30:08:2c:18:e8:78:ba:6d:dc:
c0:0a:4d:3b:0a:2e:fe:96:7e:1a:d2:59:7a:1e:21:
3b:25:ab:10:de:39:37:1a:d0:b0:d0:48:74:bc:b7:
b2:22:29:c6:5d:53:9c:b7:43:df:df:85:e7:57:a6:
02:d7:a9:3a:87:63:88:79:64:3f:0d:f5:e4:10:31:
b5:86:5c:21:95:2d:9f:29:05:6b:07:ba:4c:eb:c3:
3c:3c:c4:5e:54:2a:35:d6:85:e8:f8:e6:f7:27:c1:
c7:ab:88:49:a0:ea:16:ef:21:b9:2c:bd:05:c9:45:
b1:1d:ec:0a:c4:2f:de:91:8f:08:6f:22:6e:f8:30:
7e:6d:95:ef:c5:9c:1f:14:f7:9b:33:d2:c9:80:8d:
3a:0d:9f:48:62:08:a7:90:ba:11:25:97:7f:36:63:
90:85:44:b4:93:ca:f8:cb:92:19:a5:96:84:40:b8:
d8:3f:25:01:91:db:d2:a0:69:06:72:21:91:9e:f7:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6B:7A:1B:EF:DC:87:14:E7:14:74:BD:FB:D6:21:72:DE:11:4F:2F
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/yWt6G-_chxTnFHS9-9Yhct4RTy8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.128.0/19
Signature Algorithm: sha256WithRSAEncryption
09:6f:60:f8:5e:3a:fc:fd:2b:6f:5f:9a:95:ac:4d:74:92:d9:
21:9d:1b:9d:24:e3:2a:49:4e:23:7e:78:80:4a:2b:eb:6e:62:
2a:f3:17:ec:33:44:a3:4a:76:1b:91:cb:99:87:d7:70:ce:e6:
1c:a7:1d:41:bd:d5:8c:64:59:42:c6:70:18:26:91:ca:5c:b0:
77:d9:0c:e7:18:79:6a:88:4b:e1:aa:22:d1:f5:12:7b:b7:44:
b8:ec:5e:d6:51:6b:af:34:52:5c:2a:06:68:41:39:36:58:b4:
a3:4a:ad:c4:fa:be:64:4f:d3:df:fc:80:60:b8:d8:51:6c:c2:
5f:f0:49:5a:ec:3e:30:6f:44:86:66:c7:e5:ea:94:d5:f2:4a:
5a:78:14:68:48:27:bb:77:24:83:48:94:03:14:53:12:35:c2:
2b:5c:c8:ac:17:aa:7c:60:1c:72:75:fa:48:20:e3:dd:a1:58:
2c:63:b3:0a:c2:1e:45:82:9a:86:27:13:6d:f4:76:92:3d:c7:
fd:0d:bd:fa:7f:08:49:c7:9b:ba:77:29:bf:be:21:54:20:af:
ab:e1:46:56:9e:ab:f4:92:18:9f:76:05:65:e9:29:4a:eb:7d:
09:09:6e:ad:1a:46:0d:dc:56:09:3e:c4:3a:10:51:9e:37:f1:
8b:71:76:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org