Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/MWDmV16IVcpZFyuj3x-_ItqgNlk.roa
File: MWDmV16IVcpZFyuj3x-_ItqgNlk.roa (raw, json)
Hash identifier: Y6WPmobcvQ6G5oup6IIXQBjndnGIe4sJs2RCUW0Ru3c=
Subject key identifier: 31:60:E6:57:5E:88:55:CA:59:17:2B:A3:DF:1F:BF:22:DA:A0:36:59
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0AE8
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/MWDmV16IVcpZFyuj3x-_ItqgNlk.roa
Signing time: Thu 15 Sep 2022 02:40:51 +0000
ROA not before: Thu 15 Sep 2022 02:40:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9416
IP address blocks: 123.252.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2792 (0xae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 15 02:40:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3160E6575E8855CA59172BA3DF1FBF22DAA03659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:dd:51:f4:09:65:88:d1:c0:e1:de:5c:1e:
86:1f:4a:5c:bf:d3:67:55:75:73:fb:82:b4:33:4a:
f5:ee:db:38:ed:f7:8b:8c:eb:10:78:66:a8:db:c9:
a3:ec:a3:3e:39:97:60:98:52:59:f4:12:32:13:16:
69:ca:30:2b:5c:17:57:c0:f5:b2:e8:c5:67:b4:73:
2c:dd:1b:2f:6f:45:4e:c6:b3:7a:2d:b0:12:69:36:
84:bd:4d:68:35:24:f4:3b:37:f5:44:93:16:ee:bf:
69:77:5c:ac:53:b5:fe:07:6c:02:f1:12:2c:1a:53:
4c:60:84:e5:04:12:c7:d5:cb:cc:3d:0c:cb:e0:12:
74:c7:11:d6:96:54:4a:74:c4:bf:ca:03:91:8f:b1:
05:cf:24:07:d5:37:3c:47:84:f6:a3:ec:b7:bc:05:
90:10:72:28:c1:68:74:20:07:dc:b4:01:e9:d5:a4:
ef:3b:4c:c3:4c:f4:28:ff:1f:92:d1:7e:39:a9:a4:
15:96:45:8a:db:b0:b7:08:47:cd:a5:a4:10:5a:e6:
63:88:f1:c4:e8:75:06:2b:b6:dd:59:bf:20:5a:47:
67:1a:9e:1e:86:2e:eb:f8:49:2c:d2:55:d9:9f:a1:
7e:a3:a7:c5:61:e9:be:7c:80:12:11:45:d2:87:97:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:60:E6:57:5E:88:55:CA:59:17:2B:A3:DF:1F:BF:22:DA:A0:36:59
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/MWDmV16IVcpZFyuj3x-_ItqgNlk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.252.0.0/17
Signature Algorithm: sha256WithRSAEncryption
1b:de:80:f6:f8:48:69:f3:12:86:54:bc:e6:27:ef:52:90:22:
93:6b:9e:a5:70:d0:f1:ee:a0:6b:9e:f7:89:be:40:bb:56:64:
aa:c3:78:a2:4b:c1:a9:2f:8c:d0:45:97:8c:77:c2:26:c7:bd:
88:48:c1:1b:e3:d9:8c:b2:73:00:ce:87:fa:c5:68:85:43:9f:
66:35:e0:69:a2:97:b1:11:5d:ad:30:55:b5:ea:bd:9b:2b:e1:
f3:db:e2:aa:c5:d0:0d:f9:f1:d6:b4:88:83:3d:33:ef:bc:3d:
fc:91:82:e4:db:4f:6d:11:9e:3b:d0:4a:3c:c9:04:aa:18:50:
18:f7:2d:51:00:16:a7:55:55:49:fc:2e:1c:5c:af:f6:07:c3:
89:fb:17:ff:01:a5:e9:27:e3:a8:0f:03:1f:ec:46:f0:82:21:
9e:1e:09:bf:fc:d8:4e:c5:80:2f:11:b5:8e:b2:15:43:59:f5:
3a:7a:b0:dc:95:f5:30:6f:1b:d6:07:ec:9f:d2:6a:dd:df:4b:
7d:75:2e:7f:d3:a1:77:70:ad:03:5e:d5:20:ed:28:c8:f2:bd:
05:9d:ee:cd:bb:d5:16:bb:d0:99:05:ab:bd:b5:3d:11:6e:9f:
c5:ad:00:20:09:28:e7:29:ed:67:da:ed:84:59:87:df:68:4f:
ca:6c:29:e0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCugwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5
QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yMjA5MTUw
MjQwNTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDMxNjBFNjU3NUU4ODU1
Q0E1OTE3MkJBM0RGMUZCRjIyREFBMDM2NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHJN1R9AlliNHA4d5cHoYfSly/02dVdXP7grQzSvXu2zjt94uM
6xB4ZqjbyaPsoz45l2CYUln0EjITFmnKMCtcF1fA9bLoxWe0cyzdGy9vRU7Gs3ot
sBJpNoS9TWg1JPQ7N/VEkxbuv2l3XKxTtf4HbALxEiwaU0xghOUEEsfVy8w9DMvg
EnTHEdaWVEp0xL/KA5GPsQXPJAfVNzxHhPaj7Le8BZAQcijBaHQgB9y0AenVpO87
TMNM9Cj/H5LRfjmppBWWRYrbsLcIR82lpBBa5mOI8cTodQYrtt1ZvyBaR2canh6G
Luv4SSzSVdmfoX6jp8Vh6b58gBIRRdKHl3zFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUMWDmV16IVcpZFyuj3x+/ItqgNlkwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM
T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H
L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL01XRG1WMTZJVmNwWkZ5dWoz
eC1fSXRxZ05say5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd7
/AAwDQYJKoZIhvcNAQELBQADggEBABvegPb4SGnzEoZUvOYn71KQIpNrnqVw0PHu
oGue94m+QLtWZKrDeKJLwakvjNBFl4x3wibHvYhIwRvj2YyycwDOh/rFaIVDn2Y1
4Gmil7ERXa0wVbXqvZsr4fPb4qrF0A358da0iIM9M++8PfyRguTbT20RnjvQSjzJ
BKoYUBj3LVEAFqdVVUn8Lhxcr/YHw4n7F/8Bpekn46gPAx/sRvCCIZ4eCb/82E7F
gC8RtY6yFUNZ9Tp6sNyV9TBvG9YH7J/Sat3fS311Ln/ToXdwrQNe1SDtKMjyvQWd
7s271Ra70JkFq721PRFun8WtACAJKOcp7Wfa7YRZh99oT8psKeA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org