Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/6qdUJn6Xh9FeA6jhZqksZoJiiYQ.roa
File: 6qdUJn6Xh9FeA6jhZqksZoJiiYQ.roa (raw, json)
Hash identifier: AvQPhVMIezA2eTzJ3vNu7bLRXRQCclipsYGz5TyBvBM=
Subject key identifier: EA:A7:54:26:7E:97:87:D1:5E:03:A8:E1:66:A9:2C:66:82:62:89:84
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0901
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/6qdUJn6Xh9FeA6jhZqksZoJiiYQ.roa
Signing time: Sun 07 Feb 2021 12:41:00 +0000
ROA not before: Sun 07 Feb 2021 12:41:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 220.157.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2305 (0x901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 7 12:41:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EAA754267E9787D15E03A8E166A92C6682628984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d8:fa:b1:c0:c8:34:d0:c7:58:c8:4f:98:ed:
f9:df:52:3b:89:83:71:02:5f:61:63:3f:8b:c1:82:
08:a6:5a:f4:9e:88:b1:7a:b2:90:fc:9c:22:a3:e2:
56:88:c3:6f:16:44:0d:84:9a:c6:94:54:91:d2:4b:
a5:03:74:97:eb:2f:3f:4e:a2:df:e9:ab:a3:f3:6f:
d6:d8:ab:98:a8:1d:da:3c:9f:0c:61:56:5d:6d:11:
d0:b8:43:29:96:29:02:23:96:c8:70:b5:4d:7f:e0:
2b:96:65:64:67:c4:2c:d3:fd:ee:b9:5a:01:14:48:
e8:35:bb:20:ae:bc:ff:97:16:79:d9:af:2f:08:53:
7a:f9:13:bc:d4:4c:2b:8a:78:cf:b5:d8:cd:41:38:
9e:46:12:aa:f7:c1:61:6e:69:f6:bb:d8:64:a8:cd:
c8:d1:77:fe:48:c9:63:10:a5:16:f8:bc:98:57:e2:
01:c7:2e:4e:65:88:3f:fb:0c:52:c7:54:51:90:e7:
af:73:dd:a5:00:d3:55:3a:e7:99:55:81:bf:ec:6a:
2d:d2:66:6e:41:93:83:4d:5a:2a:b6:98:a3:6a:bd:
cf:b3:6c:1b:d5:44:48:a0:76:23:e0:79:7d:81:1c:
52:8a:5c:32:a6:a2:3a:a5:28:52:fc:a4:f3:7b:03:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A7:54:26:7E:97:87:D1:5E:03:A8:E1:66:A9:2C:66:82:62:89:84
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/6qdUJn6Xh9FeA6jhZqksZoJiiYQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.157.112.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:0f:8e:2c:3d:e9:91:bd:86:c3:e0:ed:e8:2b:50:bc:23:11:
1e:00:59:23:a8:ff:06:2d:fe:d2:e5:25:5f:01:9c:10:7f:9c:
4f:b5:68:da:94:eb:42:75:e2:62:5a:45:d9:0e:33:24:01:0e:
cf:9c:63:a6:6b:89:ea:78:aa:1b:ee:7f:6b:63:42:00:65:a7:
8a:80:49:34:dd:dd:66:46:74:5a:56:9c:96:60:fb:5e:be:70:
88:d3:89:5a:b1:3a:62:f5:42:81:e3:6c:11:1b:f3:cc:9e:a8:
e3:85:f8:cb:e8:19:1c:46:69:34:c4:93:ec:bc:82:29:50:10:
41:0f:4b:5c:a1:e2:52:f9:53:51:41:47:44:be:d9:17:f0:6a:
39:a8:dc:70:47:15:88:60:63:a1:e8:27:69:6d:9c:68:35:17:
08:b1:21:5d:aa:a7:db:60:1e:2a:3e:da:de:1c:26:54:45:eb:
ac:e7:91:41:98:63:09:5c:49:ad:4f:76:b4:98:f9:32:bd:b9:
a9:8b:9c:54:f1:2f:40:2f:76:ac:96:3b:09:2a:63:0c:63:47:
4f:20:b0:86:8e:19:9e:1a:28:a4:98:ac:77:93:e6:29:9d:19:
52:e9:2a:e6:21:d8:23:d9:48:d5:8c:cb:14:b3:ec:4a:3a:ed:
32:99:84:b1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5
QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yMTAyMDcx
MjQxMDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEVBQTc1NDI2N0U5Nzg3
RDE1RTAzQThFMTY2QTkyQzY2ODI2Mjg5ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDm2PqxwMg00MdYyE+Y7fnfUjuJg3ECX2FjP4vBggimWvSeiLF6
spD8nCKj4laIw28WRA2EmsaUVJHSS6UDdJfrLz9Oot/pq6Pzb9bYq5ioHdo8nwxh
Vl1tEdC4QymWKQIjlshwtU1/4CuWZWRnxCzT/e65WgEUSOg1uyCuvP+XFnnZry8I
U3r5E7zUTCuKeM+12M1BOJ5GEqr3wWFuafa72GSozcjRd/5IyWMQpRb4vJhX4gHH
Lk5liD/7DFLHVFGQ569z3aUA01U655lVgb/sai3SZm5Bk4NNWiq2mKNqvc+zbBvV
REigdiPgeX2BHFKKXDKmojqlKFL8pPN7A9XrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6qdUJn6Xh9FeA6jhZqksZoJiiYQwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM
T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H
L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HLzZxZFVKbjZYaDlGZUE2amha
cWtzWm9KaWlZUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATc
nXAwDQYJKoZIhvcNAQELBQADggEBAKEPjiw96ZG9hsPg7egrULwjER4AWSOo/wYt
/tLlJV8BnBB/nE+1aNqU60J14mJaRdkOMyQBDs+cY6Zriep4qhvuf2tjQgBlp4qA
STTd3WZGdFpWnJZg+16+cIjTiVqxOmL1QoHjbBEb88yeqOOF+MvoGRxGaTTEk+y8
gilQEEEPS1yh4lL5U1FBR0S+2Rfwajmo3HBHFYhgY6HoJ2ltnGg1FwixIV2qp9tg
Hio+2t4cJlRF66znkUGYYwlcSa1PdrSY+TK9uamLnFTxL0AvdqyWOwkqYwxjR08g
sIaOGZ4aKKSYrHeT5imdGVLpKuYh2CPZSNWMyxSz7Eo67TKZhLE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:04 2025 by rpki-client