Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/LhDiDqoa349zoRRTlC-LW7MjOyI.roa
File: LhDiDqoa349zoRRTlC-LW7MjOyI.roa (raw, json)
Hash identifier: C0uYTtb8ajFkMo820bYEIJ++vqXdhgWhHZxh762ASq4=
Subject key identifier: 2E:10:E2:0E:AA:1A:DF:8F:73:A1:14:53:94:2F:8B:5B:B3:23:3B:22
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0915
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/LhDiDqoa349zoRRTlC-LW7MjOyI.roa
Signing time: Sun 07 Feb 2021 13:07:45 +0000
ROA not before: Sun 07 Feb 2021 13:07:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.252.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2325 (0x915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 7 13:07:45 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2E10E20EAA1ADF8F73A11453942F8B5BB3233B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:8b:16:f3:16:bb:bd:37:40:51:4d:0f:ef:
fd:a9:45:43:c1:93:8a:fc:39:97:28:c4:35:fb:45:
4e:c0:d6:a4:ce:e1:cc:df:02:f4:8e:85:77:8d:24:
46:98:7f:5c:99:c4:67:72:41:f4:10:c5:59:88:c8:
47:fa:1d:37:f9:d4:3f:a1:3e:fd:8a:7e:52:20:ad:
ec:5b:9a:bf:94:6e:eb:b6:db:bf:89:3c:8c:3a:b2:
0b:af:58:02:0f:8a:db:d8:e3:e9:99:47:77:f6:6f:
57:e3:be:da:77:92:a2:b4:da:68:68:3c:95:00:57:
c9:d5:2f:59:a8:41:7d:eb:64:0e:b5:d4:ee:4c:e1:
28:15:92:1b:84:0b:1b:0b:ec:05:8c:c8:09:a5:15:
40:c0:a2:ea:66:f5:ab:42:b7:61:36:c3:8b:20:d0:
da:63:c7:a2:dc:b9:fc:30:da:19:c6:c5:55:a3:85:
bc:af:05:01:1c:85:38:18:58:55:c9:08:8b:1a:21:
26:7e:58:9e:6e:4c:ba:5b:30:de:cc:12:20:5e:89:
4a:ca:a4:d4:91:56:1c:d7:26:04:c7:42:e2:e5:26:
5d:56:a8:23:80:e7:f1:ea:24:91:6f:c3:13:5b:77:
3b:2a:ca:b1:bb:b1:d6:04:02:21:61:a7:6d:dc:aa:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:10:E2:0E:AA:1A:DF:8F:73:A1:14:53:94:2F:8B:5B:B3:23:3B:22
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/LhDiDqoa349zoRRTlC-LW7MjOyI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.252.64.0/18
Signature Algorithm: sha256WithRSAEncryption
94:be:78:ee:15:fb:3e:7d:26:b3:fe:83:07:4d:f2:36:9d:40:
49:01:a3:30:a7:d9:db:46:3f:5f:da:9e:46:a1:bc:f7:1d:47:
c1:3f:ed:fa:d8:6c:47:ec:38:40:d4:67:0e:e6:45:8e:e3:21:
cb:9d:10:28:58:16:77:bc:c8:53:63:29:61:a6:22:2f:ad:16:
c3:aa:9a:28:c5:68:fc:16:b9:36:9b:0c:fe:85:b2:e7:b5:b7:
f8:8c:5b:af:c3:b9:35:cd:60:bc:22:aa:ed:af:d3:a5:c5:b4:
5e:6b:ef:50:06:a3:a3:34:17:30:e3:48:71:cf:04:40:9a:99:
60:13:8c:9b:e8:03:65:12:06:ce:4b:4a:01:93:67:d5:2c:3c:
b9:d0:02:5a:ba:4b:27:6f:07:91:2e:b6:c5:65:12:60:40:5c:
cd:bc:58:82:e8:9c:a1:94:67:65:24:99:b0:ed:1c:87:6e:a7:
e5:8e:8d:a2:bc:e8:e5:92:bc:f2:23:ff:83:04:58:2a:2e:8c:
7a:50:75:1a:52:0e:41:4e:a0:57:8d:3d:3b:40:00:a2:d2:1e:
fe:ef:fd:14:42:91:0a:db:d4:31:0f:b0:dd:47:68:d1:12:92:
dc:cd:97:62:cf:a7:50:9f:87:92:ed:3f:f9:fa:16:df:cc:ab:
48:1d:de:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:58 2025 by rpki-client