Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/CeY5qpy6G_w2o3JLamQTcK3sq4Q.roa
File: CeY5qpy6G_w2o3JLamQTcK3sq4Q.roa (raw, json)
Hash identifier: 6coDpjVQH3BuAjr7TKj9EaJDo0CoBE1RcSrrw+UDB08=
Subject key identifier: 09:E6:39:AA:9C:BA:1B:FC:36:A3:72:4B:6A:64:13:70:AD:EC:AB:84
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0948
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/CeY5qpy6G_w2o3JLamQTcK3sq4Q.roa
Signing time: Wed 03 Mar 2021 02:00:10 +0000
ROA not before: Wed 03 Mar 2021 02:00:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.252.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376 (0x948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Mar 3 02:00:10 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=09E639AA9CBA1BFC36A3724B6A641370ADECAB84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:77:d3:24:93:c7:03:19:59:9e:01:44:0d:
24:37:9d:62:de:12:9f:4b:ad:f7:7c:59:3a:c7:dd:
2e:c5:78:aa:fb:8c:5a:68:b7:d9:f0:09:56:c2:06:
38:55:60:d9:bb:cc:6d:30:33:56:a5:ca:ab:5a:d9:
90:9b:44:88:c0:e4:bc:ad:6e:63:43:38:d0:2e:8d:
a9:97:0c:3b:3d:95:83:d1:60:00:6d:86:83:5a:3c:
68:b8:fa:85:45:3d:7f:6c:79:96:25:3c:70:30:9e:
11:69:38:9a:37:18:cf:4e:74:d6:17:cc:e4:40:f0:
17:d0:64:60:6d:e0:e2:c0:74:37:b0:5c:20:1e:5b:
47:98:49:08:4e:bd:73:53:4c:c3:12:eb:ad:7c:ce:
6a:24:f2:8f:fb:43:b3:ed:30:3e:49:d9:e6:45:ed:
fe:05:34:94:a6:33:0a:dc:dd:ac:8e:f0:f8:e1:48:
66:ed:73:01:7b:30:5a:58:07:18:09:a2:06:c7:d5:
fb:1b:fc:de:74:bb:d0:78:4d:74:76:aa:f0:6c:a2:
e4:92:02:c0:ef:16:55:92:dd:1c:78:88:0e:b5:48:
cb:61:f7:6a:ec:55:b7:8a:02:b0:40:cc:0b:c4:b7:
24:b9:b2:96:c9:cc:68:21:08:c0:5a:ba:e0:d9:1e:
36:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E6:39:AA:9C:BA:1B:FC:36:A3:72:4B:6A:64:13:70:AD:EC:AB:84
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/CeY5qpy6G_w2o3JLamQTcK3sq4Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.252.0.0/17
Signature Algorithm: sha256WithRSAEncryption
46:68:4e:f1:f9:44:66:61:92:14:24:7c:0a:ea:94:26:ba:d6:
ea:c1:30:9a:9a:da:19:b4:f6:bc:1b:5b:00:77:80:3e:39:6e:
ea:3a:cf:cb:76:57:08:c3:b2:d0:58:11:e8:31:43:6b:ae:58:
61:9b:89:33:00:f1:94:1d:61:25:99:3e:94:11:41:12:f1:f6:
9f:3a:9d:67:82:80:f7:02:58:cf:c4:fb:e4:9a:27:98:6c:37:
33:8b:cd:49:df:01:59:12:e7:75:b8:d5:f4:23:d9:cc:41:d2:
c6:60:46:70:a8:b2:ad:31:7b:d2:0e:1a:8c:6c:9b:d6:49:af:
08:55:39:16:5d:91:f8:75:72:2f:58:5d:27:cd:0a:de:9a:58:
b0:c8:b2:9f:99:c4:0f:f9:50:de:e8:11:1f:94:c6:41:54:4b:
a4:e6:61:91:83:fa:4d:1d:56:b1:6e:2a:c9:00:4c:c0:41:bd:
42:a2:8c:15:0b:96:70:fc:44:ba:10:c9:be:cf:85:6d:13:24:
55:43:6a:58:52:5e:a6:2f:96:a2:23:de:71:99:73:ff:63:37:
f9:ef:b8:42:90:08:03:23:66:a6:5b:b9:f9:09:4b:45:5b:b6:
fd:bc:87:31:cc:b6:88:9a:d0:42:e8:5f:4a:ff:ea:7e:2e:2a:
5b:ab:76:3c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCUgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5
QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yMTAzMDMw
MjAwMTBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDA5RTYzOUFBOUNCQTFC
RkMzNkEzNzI0QjZBNjQxMzcwQURFQ0FCODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCylHfTJJPHAxlZngFEDSQ3nWLeEp9Lrfd8WTrH3S7FeKr7jFpo
t9nwCVbCBjhVYNm7zG0wM1alyqta2ZCbRIjA5LytbmNDONAujamXDDs9lYPRYABt
hoNaPGi4+oVFPX9seZYlPHAwnhFpOJo3GM9OdNYXzORA8BfQZGBt4OLAdDewXCAe
W0eYSQhOvXNTTMMS6618zmok8o/7Q7PtMD5J2eZF7f4FNJSmMwrc3ayO8PjhSGbt
cwF7MFpYBxgJogbH1fsb/N50u9B4TXR2qvBsouSSAsDvFlWS3Rx4iA61SMth92rs
VbeKArBAzAvEtyS5spbJzGghCMBauuDZHjYtAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUCeY5qpy6G/w2o3JLamQTcK3sq4QwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM
T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H
L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL0NlWTVxcHk2R193Mm8zSkxh
bVFUY0szc3E0US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd7
/AAwDQYJKoZIhvcNAQELBQADggEBAEZoTvH5RGZhkhQkfArqlCa61urBMJqa2hm0
9rwbWwB3gD45buo6z8t2VwjDstBYEegxQ2uuWGGbiTMA8ZQdYSWZPpQRQRLx9p86
nWeCgPcCWM/E++SaJ5hsNzOLzUnfAVkS53W41fQj2cxB0sZgRnCosq0xe9IOGoxs
m9ZJrwhVORZdkfh1ci9YXSfNCt6aWLDIsp+ZxA/5UN7oER+UxkFUS6TmYZGD+k0d
VrFuKskATMBBvUKijBULlnD8RLoQyb7PhW0TJFVDalhSXqYvlqIj3nGZc/9jN/nv
uEKQCAMjZqZbufkJS0Vbtv28hzHMtoia0ELoX0r/6n4uKlurdjw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:13 2025 by rpki-client