Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/GBmLIR4MDX1_5vqhdVlhfRu_ink.roa
File: GBmLIR4MDX1_5vqhdVlhfRu_ink.roa (raw, json)
Hash identifier: x4063gx+r9JimnZeTnIJEC7/JrPc0vqsWvRi2IDCgTA=
Subject key identifier: 18:19:8B:21:1E:0C:0D:7D:7F:E6:FA:A1:75:59:61:7D:1B:BF:8A:79
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0938
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/GBmLIR4MDX1_5vqhdVlhfRu_ink.roa
Signing time: Wed 03 Mar 2021 01:02:47 +0000
ROA not before: Wed 03 Mar 2021 01:02:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 123.252.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2360 (0x938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Mar 3 01:02:47 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=18198B211E0C0D7D7FE6FAA17559617D1BBF8A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:09:bd:bf:cb:39:d4:19:d1:46:53:d6:3a:
ae:d7:5d:45:97:f5:85:50:a5:4c:b2:29:01:3a:36:
f3:55:ac:97:8f:bf:02:dc:e7:ce:c2:6d:b7:d8:11:
73:81:6f:21:e9:32:10:f8:b4:32:a3:1a:e5:96:86:
e9:d7:73:cc:f2:4b:82:60:fe:d8:96:5f:de:cb:27:
b6:e0:4c:58:89:46:08:fb:33:a8:f0:ed:df:7d:ee:
aa:83:cb:f8:84:53:f8:a3:c8:61:8a:e0:52:90:6e:
d9:33:80:4c:a7:99:36:82:31:73:23:30:72:40:80:
cb:a8:e4:a9:32:a6:90:4f:3d:01:7c:1c:48:f0:15:
c6:be:ea:f6:50:f8:ba:da:5d:e1:03:29:22:5e:72:
7d:79:1e:3c:8a:57:a8:d3:da:ce:39:a0:d0:06:15:
6b:76:af:29:22:ce:f6:1a:d1:6f:e8:02:ed:ab:69:
b1:b3:24:f1:03:d6:31:08:55:76:a2:05:c0:d0:5e:
00:ad:06:0b:36:30:90:8b:12:0c:55:d1:d7:84:6e:
4d:76:0b:f5:33:da:4a:46:67:1e:b0:2a:00:df:61:
1a:b3:67:c8:78:3b:9e:37:f7:6a:df:a7:72:ad:8e:
0c:3e:6b:b4:3a:b1:5b:ac:5b:5d:bf:21:98:df:cd:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:19:8B:21:1E:0C:0D:7D:7F:E6:FA:A1:75:59:61:7D:1B:BF:8A:79
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/GBmLIR4MDX1_5vqhdVlhfRu_ink.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.252.64.0/18
Signature Algorithm: sha256WithRSAEncryption
09:12:eb:8c:d9:6e:73:85:06:e0:12:7e:6a:76:4d:71:fa:15:
d9:1a:58:54:31:4b:3d:6f:ad:9c:71:5d:54:de:b0:f3:e8:eb:
55:57:35:a4:90:29:9d:e1:2a:d2:7b:28:36:44:d4:e2:97:45:
bc:33:3e:41:07:3b:b1:f6:a5:99:7f:50:97:c7:68:74:31:c6:
7d:b5:8c:20:44:ff:0e:44:32:bb:11:c9:1c:88:a9:f5:01:c9:
e9:73:7d:92:80:95:57:58:92:36:a5:ef:cf:76:3d:72:96:a6:
ff:5a:c8:23:ec:4a:4f:db:ff:79:33:43:9d:4a:2b:a7:cf:67:
80:fe:8f:42:6a:64:95:7f:4c:33:74:f5:8c:fb:19:1f:db:7d:
45:dd:51:65:c2:01:86:00:09:7d:7f:a0:d5:0e:a6:65:da:42:
c2:a7:40:9f:e6:cf:73:d3:aa:0d:d2:d5:ff:cd:c0:9b:9f:3f:
99:60:e5:4a:9b:8d:b5:a5:68:0f:04:9b:3a:0b:79:62:a0:e9:
17:3c:28:13:b0:d6:8f:e9:6e:7e:83:63:21:2c:92:5a:0f:93:
2f:e5:3f:6a:bf:3f:19:20:dc:22:7d:4c:ba:4d:93:de:37:19:
f1:b6:ef:14:7a:71:e7:38:eb:55:33:67:3a:c6:9e:10:64:79:
0b:2c:6d:44
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCTgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5
QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yMTAzMDMw
MTAyNDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE4MTk4QjIxMUUwQzBE
N0Q3RkU2RkFBMTc1NTk2MTdEMUJCRjhBNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC24Am9v8s51BnRRlPWOq7XXUWX9YVQpUyyKQE6NvNVrJePvwLc
587CbbfYEXOBbyHpMhD4tDKjGuWWhunXc8zyS4Jg/tiWX97LJ7bgTFiJRgj7M6jw
7d997qqDy/iEU/ijyGGK4FKQbtkzgEynmTaCMXMjMHJAgMuo5KkyppBPPQF8HEjw
Fca+6vZQ+LraXeEDKSJecn15HjyKV6jT2s45oNAGFWt2rykizvYa0W/oAu2rabGz
JPED1jEIVXaiBcDQXgCtBgs2MJCLEgxV0deEbk12C/Uz2kpGZx6wKgDfYRqzZ8h4
O54392rfp3Ktjgw+a7Q6sVusW12/IZjfzdvHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGBmLIR4MDX1/5vqhdVlhfRu/inkwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM
T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H
L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL0dCbUxJUjRNRFgxXzV2cWhk
VmxoZlJ1X2luay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ7
/EAwDQYJKoZIhvcNAQELBQADggEBAAkS64zZbnOFBuASfmp2TXH6FdkaWFQxSz1v
rZxxXVTesPPo61VXNaSQKZ3hKtJ7KDZE1OKXRbwzPkEHO7H2pZl/UJfHaHQxxn21
jCBE/w5EMrsRyRyIqfUByelzfZKAlVdYkjal7892PXKWpv9ayCPsSk/b/3kzQ51K
K6fPZ4D+j0JqZJV/TDN09Yz7GR/bfUXdUWXCAYYACX1/oNUOpmXaQsKnQJ/mz3PT
qg3S1f/NwJufP5lg5UqbjbWlaA8EmzoLeWKg6Rc8KBOw1o/pbn6DYyEskloPky/l
P2q/Pxkg3CJ9TLpNk943GfG27xR6cec461UzZzrGnhBkeQssbUQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:21 2025 by rpki-client