Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/ABLfNcoThzGkPvSoLq31LComwN4.roa
File: ABLfNcoThzGkPvSoLq31LComwN4.roa (raw, json)
Hash identifier: QClpya9DU3YsT179pr1DBENTKzEe+5nqGV4ZQ9/TplU=
Subject key identifier: 00:12:DF:35:CA:13:87:31:A4:3E:F4:A8:2E:AD:F5:2C:2A:26:C0:DE
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0789
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/ABLfNcoThzGkPvSoLq31LComwN4.roa
Signing time: Tue 29 Sep 2020 10:04:31 +0000
ROA not before: Tue 29 Sep 2020 10:04:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.252.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1929 (0x789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 10:04:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0012DF35CA138731A43EF4A82EADF52C2A26C0DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:24:e1:6a:9a:6d:08:6c:cc:18:d3:25:15:
99:57:17:42:3f:45:35:09:7d:68:06:57:1d:57:9f:
79:c7:93:3f:07:48:55:9e:ad:f5:61:2c:c0:47:1b:
c6:58:c4:bb:b4:b0:92:f4:14:7c:19:24:d2:75:e4:
7f:b3:bc:81:4d:48:71:0e:5c:b1:16:84:10:60:1d:
57:6e:e8:fb:ac:43:39:4c:24:2b:de:1a:4e:d9:82:
3a:02:55:dd:9b:99:01:11:41:71:f2:40:8f:99:f8:
4c:6c:4e:5b:40:63:56:07:21:f5:6d:94:6a:13:d9:
bb:f0:df:2a:f5:74:42:0f:f5:a6:af:96:02:0f:de:
a3:d6:45:8c:c3:cf:bd:93:e5:c0:07:92:c8:e1:21:
1e:5e:3e:5e:ce:46:21:1c:5b:cc:99:f4:b8:a9:e2:
4d:06:43:fe:00:ff:5b:e0:54:cd:ee:6e:5d:bf:90:
e8:43:6a:f3:ba:67:a9:01:36:db:71:d9:3e:bd:97:
1d:8d:95:d6:cc:70:9d:3e:35:6f:ef:f3:6d:4d:f4:
a8:ea:e6:d1:38:d0:71:10:03:da:9a:9b:b0:ba:b3:
4a:a0:26:4c:09:6e:ba:dd:61:9a:31:f2:ca:1b:79:
0c:51:7f:72:68:f9:4a:c4:37:04:a1:68:8b:72:96:
47:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:12:DF:35:CA:13:87:31:A4:3E:F4:A8:2E:AD:F5:2C:2A:26:C0:DE
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/ABLfNcoThzGkPvSoLq31LComwN4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.252.0.0/17
Signature Algorithm: sha256WithRSAEncryption
50:8c:f4:3e:a9:ff:e5:3b:3c:2a:61:a5:f4:40:3a:4b:bc:39:
4c:8b:1d:88:74:ff:08:4e:4a:09:4a:ec:59:4d:47:aa:32:e6:
35:94:47:83:2b:47:d1:76:35:fe:f7:2b:52:a0:c1:bd:50:b8:
1f:aa:18:d0:d6:37:b7:f9:71:24:49:ef:53:df:76:3a:b1:7e:
3e:a4:fc:d2:03:77:3f:f1:08:95:ef:c1:1e:48:8a:6f:04:a1:
a3:e5:9d:e2:7d:fb:98:09:c9:76:dc:09:5f:d6:76:b5:89:30:
4e:7c:16:59:ec:92:6e:45:89:ff:56:86:98:95:fc:50:8e:19:
c9:4f:ff:1d:7f:11:e3:82:90:fe:f3:77:0c:7b:89:68:bd:54:
8d:4a:55:01:5d:7c:fa:6f:fc:54:16:15:50:b7:e0:0a:df:b9:
1e:ad:3c:ef:03:0e:04:32:cc:58:e1:c0:cf:e8:7e:80:20:67:
4b:38:d0:62:f7:f6:c0:b1:1e:bb:69:a0:37:d4:54:14:ab:6c:
9f:d0:40:92:f7:07:4e:65:c9:fa:32:83:c2:00:f9:88:6c:79:
0a:33:5e:41:0f:5d:c7:da:b4:97:92:f0:3c:3a:7f:d4:b8:9e:
58:6c:aa:c4:af:3c:43:50:41:62:98:f8:dc:74:72:a6:00:d4:
24:8a:4b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:54 2025 by rpki-client