Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Llnqzqy8CgohrJHWfPX46vVjxnE.roa
File: Llnqzqy8CgohrJHWfPX46vVjxnE.roa (raw, json)
Hash identifier: gLFQm4E0OTpsnFoU1s/n8O0BVh3QvLbQA4uMC2AP3eY=
Subject key identifier: 2E:59:EA:CE:AC:BC:0A:0A:21:AC:91:D6:7C:F5:F8:EA:F5:63:C6:71
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0AE8
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Llnqzqy8CgohrJHWfPX46vVjxnE.roa
Signing time: Thu 15 Sep 2022 02:40:54 +0000
ROA not before: Thu 15 Sep 2022 02:40:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9416
IP address blocks: 123.252.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2792 (0xae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 15 02:40:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2E59EACEACBC0A0A21AC91D67CF5F8EAF563C671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cf:ca:e4:32:d1:3a:66:75:29:2e:32:21:40:
a9:70:eb:fb:2a:13:96:5c:ad:b1:a9:8a:58:8f:52:
2a:5f:ab:01:3f:65:89:97:00:24:6c:d1:bd:55:ed:
30:a5:27:04:dd:3c:94:dc:28:ef:95:7b:a4:51:10:
65:58:85:c3:14:7a:d8:c0:c2:f2:ba:5c:fb:76:88:
02:7f:0f:fb:2b:f4:76:0b:70:87:ea:7e:74:ae:ba:
97:cf:6c:cc:00:1b:d4:f3:7e:9a:e3:b7:3d:e9:0e:
20:bd:19:71:8a:38:b4:8f:0c:19:92:7d:b3:34:a0:
e9:f1:50:60:cd:cb:a3:4f:15:63:c4:cf:1c:3d:96:
88:4a:8d:f3:d7:45:5c:e2:82:ae:32:8f:0b:80:2d:
aa:a7:19:3f:15:e4:7e:ab:6d:73:f2:d9:80:0b:63:
3a:e4:51:2c:f5:af:2c:25:fe:0e:4e:44:ca:f4:bb:
1f:f0:c8:1b:26:dd:1d:62:1b:57:13:0c:47:d6:d5:
5f:a7:5b:1c:02:e0:de:a4:bd:b3:ce:97:97:c5:bb:
59:2c:a5:5d:d0:18:bc:f5:b1:39:bd:fe:06:36:44:
1f:77:12:bd:99:b3:f6:d6:48:30:f8:f6:1a:d3:3f:
c5:4f:e4:91:56:6a:b8:47:40:75:54:d5:51:90:ad:
cb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:59:EA:CE:AC:BC:0A:0A:21:AC:91:D6:7C:F5:F8:EA:F5:63:C6:71
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Llnqzqy8CgohrJHWfPX46vVjxnE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.252.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1c:63:ad:81:79:e9:05:9f:c9:1e:0f:e2:a5:06:e9:a2:3a:9f:
d1:3f:c5:b5:cb:97:8e:7a:cc:d2:b6:7c:59:a8:b1:28:6f:c0:
3d:83:c2:b9:e1:6e:56:18:bc:6d:cf:21:83:f7:64:3a:7f:b5:
b0:9d:5b:e2:50:32:1c:1d:08:b7:16:26:e1:5e:81:e2:a2:6f:
72:fa:40:97:bf:e7:57:94:dd:7f:7e:a4:9a:4a:20:2d:98:37:
80:fb:2e:6e:63:ff:e7:2d:20:87:35:8b:f2:a0:e3:8d:c0:f7:
07:60:7f:cf:a7:ef:8d:7a:fa:b7:9f:9c:54:fa:e9:c1:8a:78:
ab:9c:de:6b:09:83:b2:f2:7a:0e:fc:66:37:f7:06:54:ed:85:
a3:9c:45:5a:cc:46:52:c1:e1:60:8d:ca:3b:6f:77:4b:b8:e4:
6e:10:85:a8:e9:00:dc:c3:42:de:c7:c7:72:6e:bb:48:12:aa:
6e:04:e1:e2:d6:bc:49:6e:52:7e:1c:6c:74:3e:55:16:ec:67:
19:ba:71:aa:31:59:e7:b9:68:7e:7c:93:33:55:00:46:44:a3:
e8:3d:8c:3c:8f:ce:85:49:53:01:a8:94:a4:1c:39:d4:87:1e:
c1:a3:cd:fd:7e:01:8c:5e:31:ce:ef:44:6f:db:9b:b2:95:c1:
7b:c1:06:67
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCugwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5
QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yMjA5MTUw
MjQwNTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJFNTlFQUNFQUNCQzBB
MEEyMUFDOTFENjdDRjVGOEVBRjU2M0M2NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdz8rkMtE6ZnUpLjIhQKlw6/sqE5ZcrbGpiliPUipfqwE/ZYmX
ACRs0b1V7TClJwTdPJTcKO+Ve6RREGVYhcMUetjAwvK6XPt2iAJ/D/sr9HYLcIfq
fnSuupfPbMwAG9Tzfprjtz3pDiC9GXGKOLSPDBmSfbM0oOnxUGDNy6NPFWPEzxw9
lohKjfPXRVzigq4yjwuALaqnGT8V5H6rbXPy2YALYzrkUSz1rywl/g5ORMr0ux/w
yBsm3R1iG1cTDEfW1V+nWxwC4N6kvbPOl5fFu1kspV3QGLz1sTm9/gY2RB93Er2Z
s/bWSDD49hrTP8VP5JFWarhHQHVU1VGQrctpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULlnqzqy8CgohrJHWfPX46vVjxnEwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM
T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H
L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL0xsbnF6cXk4Q2dvaHJKSFdm
UFg0NnZWanhuRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ7
/EAwDQYJKoZIhvcNAQELBQADggEBABxjrYF56QWfyR4P4qUG6aI6n9E/xbXLl456
zNK2fFmosShvwD2DwrnhblYYvG3PIYP3ZDp/tbCdW+JQMhwdCLcWJuFegeKib3L6
QJe/51eU3X9+pJpKIC2YN4D7Lm5j/+ctIIc1i/Kg443A9wdgf8+n7416+refnFT6
6cGKeKuc3msJg7Lyeg78Zjf3BlTthaOcRVrMRlLB4WCNyjtvd0u45G4QhajpANzD
Qt7Hx3Juu0gSqm4E4eLWvEluUn4cbHQ+VRbsZxm6caoxWee5aH58kzNVAEZEo+g9
jDyPzoVJUwGolKQcOdSHHsGjzf1+AYxeMc7vRG/bm7KVwXvBBmc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org