Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/PUJFCE87lBWZJBh_Tr5R5k6k1K4.roa
File: PUJFCE87lBWZJBh_Tr5R5k6k1K4.roa (raw, json)
Hash identifier: 8S2oZKZ4x7/mMJdT4I+fuxzhieYFbW51b3jlQmpg2Zg=
Subject key identifier: 3D:42:45:08:4F:3B:94:15:99:24:18:7F:4E:BE:51:E6:4E:A4:D4:AE
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0AE8
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/PUJFCE87lBWZJBh_Tr5R5k6k1K4.roa
Signing time: Thu 15 Sep 2022 02:40:51 +0000
ROA not before: Thu 15 Sep 2022 02:40:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9416
IP address blocks: 122.99.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2792 (0xae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 15 02:40:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3D4245084F3B94159924187F4EBE51E64EA4D4AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:7d:4d:fb:2f:ee:ec:4f:0d:5d:e3:88:90:21:
26:a0:36:ae:97:d3:8c:ed:66:39:8d:c4:ce:65:54:
7c:c6:e5:37:55:0c:e7:f7:76:09:88:a7:7f:af:88:
f1:85:fd:a7:da:fa:e3:e4:60:2b:10:55:da:a7:2c:
76:79:b1:3b:cf:e0:ba:5d:ed:5d:00:de:f5:f9:fa:
4f:f5:45:ed:60:68:fc:8b:b5:af:81:1a:9b:b3:f5:
39:61:04:b8:47:0e:fe:0c:a0:42:53:55:cb:fe:c7:
0e:29:be:ed:f2:c9:8c:d5:11:98:9e:2d:fa:2e:99:
ad:57:e5:28:41:00:a8:ec:bb:57:de:ed:6e:49:0b:
e5:d0:71:5e:58:6d:64:d9:1b:95:9a:b5:96:2d:c2:
35:9f:60:6e:38:5c:84:61:e2:fd:b3:0c:4c:b1:ce:
ff:b9:96:66:27:28:46:d6:90:90:7c:a1:ff:2b:ef:
9f:27:87:7f:60:d0:5b:d7:04:c0:71:17:c1:e6:e5:
93:4a:9c:4a:bf:67:cf:5d:9d:29:ef:e4:e5:5e:5a:
c0:dc:52:53:87:09:11:6c:f0:40:d5:33:07:e9:ba:
72:83:38:58:03:da:37:95:13:54:0f:53:11:39:af:
85:af:3b:fe:ce:60:fa:bf:eb:7b:f0:b4:a2:43:12:
62:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:42:45:08:4F:3B:94:15:99:24:18:7F:4E:BE:51:E6:4E:A4:D4:AE
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/PUJFCE87lBWZJBh_Tr5R5k6k1K4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.99.0.0/18
Signature Algorithm: sha256WithRSAEncryption
4e:4d:bf:8f:9c:da:20:ed:62:2a:28:d1:84:f0:c4:c2:4c:19:
f9:c0:21:8e:45:68:10:28:25:dc:9c:f0:f0:54:f2:71:36:09:
97:66:7d:21:da:9b:cb:c4:19:a8:d5:dd:e1:da:2f:3c:17:7b:
90:fd:52:af:3d:a9:bb:6d:3e:ce:ba:02:27:1f:f4:79:fa:a7:
00:0e:7c:a4:f8:df:f8:f3:d0:1a:5a:08:1e:fc:fe:97:af:26:
bc:e4:59:ea:1f:c6:f1:79:5a:3a:d1:31:92:b9:59:e7:57:3a:
81:2f:b9:1b:b6:f6:cb:9f:26:19:77:5b:ec:ca:d5:05:2c:f0:
d4:63:e2:74:e3:72:7a:18:a6:65:d9:9a:ca:ff:ff:99:71:d8:
f4:60:69:30:90:58:42:76:dd:fd:2c:6d:87:c9:c0:02:d2:8a:
77:5c:69:76:0f:ba:2c:ae:af:8b:09:18:2f:cd:91:1f:a6:05:
59:1c:2b:5b:fb:c5:27:b4:c7:cf:c6:69:e5:d8:9c:27:8f:e5:
92:c1:23:57:48:7f:fa:c1:dc:84:3d:46:e0:3f:be:23:b4:f7:
4d:7f:29:6c:57:0a:45:a2:d6:8d:4d:29:cc:c1:33:8f:dc:c7:
09:d3:3f:de:7a:8f:df:d2:6d:aa:5d:a2:9d:51:bf:09:5c:7c:
c7:b7:dc:77
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCugwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5
QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yMjA5MTUw
MjQwNTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDNENDI0NTA4NEYzQjk0
MTU5OTI0MTg3RjRFQkU1MUU2NEVBNEQ0QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4fU37L+7sTw1d44iQISagNq6X04ztZjmNxM5lVHzG5TdVDOf3
dgmIp3+viPGF/afa+uPkYCsQVdqnLHZ5sTvP4Lpd7V0A3vX5+k/1Re1gaPyLta+B
Gpuz9TlhBLhHDv4MoEJTVcv+xw4pvu3yyYzVEZieLfouma1X5ShBAKjsu1fe7W5J
C+XQcV5YbWTZG5WatZYtwjWfYG44XIRh4v2zDEyxzv+5lmYnKEbWkJB8of8r758n
h39g0FvXBMBxF8Hm5ZNKnEq/Z89dnSnv5OVeWsDcUlOHCRFs8EDVMwfpunKDOFgD
2jeVE1QPUxE5r4WvO/7OYPq/63vwtKJDEmIrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPUJFCE87lBWZJBh/Tr5R5k6k1K4wHwYDVR0jBBgwFoAUmZu+Ex3100bydifM
T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H
L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL1BVSkZDRTg3bEJXWkpCaF9U
cjVSNWs2azFLNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6
YwAwDQYJKoZIhvcNAQELBQADggEBAE5Nv4+c2iDtYioo0YTwxMJMGfnAIY5FaBAo
Jdyc8PBU8nE2CZdmfSHam8vEGajV3eHaLzwXe5D9Uq89qbttPs66Aicf9Hn6pwAO
fKT43/jz0BpaCB78/pevJrzkWeofxvF5WjrRMZK5WedXOoEvuRu29sufJhl3W+zK
1QUs8NRj4nTjcnoYpmXZmsr//5lx2PRgaTCQWEJ23f0sbYfJwALSindcaXYPuiyu
r4sJGC/NkR+mBVkcK1v7xSe0x8/GaeXYnCeP5ZLBI1dIf/rB3IQ9RuA/viO0901/
KWxXCkWi1o1NKczBM4/cxwnTP956j9/Sbapdop1RvwlcfMe33Hc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org