Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/VHedvZfDYSBE6o7zgoEMYCk_x08.roa
File: VHedvZfDYSBE6o7zgoEMYCk_x08.roa (raw, json)
Hash identifier: 0digZCy8w+Ulr+DrUZbikP+ZmB1YHH6E39KvuKoYPwU=
Subject key identifier: 54:77:9D:BD:97:C3:61:20:44:EA:8E:F3:82:81:0C:60:29:3F:C7:4F
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 078D
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/VHedvZfDYSBE6o7zgoEMYCk_x08.roa
Signing time: Tue 29 Sep 2020 10:04:32 +0000
ROA not before: Tue 29 Sep 2020 10:04:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 119.14.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1933 (0x78d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 10:04:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=54779DBD97C3612044EA8EF382810C60293FC74F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:d5:0e:8d:a8:5a:ba:41:35:82:21:03:e2:
fb:d3:b3:c3:b9:28:ac:22:57:b2:58:3d:8c:74:8f:
6f:14:62:81:71:fa:0b:33:4a:3f:b7:3b:58:e5:fb:
d1:d7:1d:b4:ff:61:f2:ca:60:74:88:7c:06:59:63:
29:20:ff:bd:2e:90:48:af:9f:c2:1f:04:80:d2:5c:
5c:11:16:6f:2b:0a:3d:4d:81:11:7d:50:f4:e6:e8:
07:d0:ef:05:63:a4:d6:ae:93:9a:35:98:d1:9e:ee:
36:55:84:3c:95:f4:5d:12:ae:e0:72:04:74:28:9f:
bf:69:09:d8:80:d2:14:43:41:9c:46:e8:8a:8d:a3:
a6:a5:05:04:f8:e8:5b:4f:23:7a:a5:38:eb:c6:92:
63:1b:83:bb:53:cb:31:c1:c0:3b:82:1b:2b:b4:01:
be:9d:e5:62:45:b8:90:78:7f:57:d4:48:10:60:25:
71:1b:7e:4f:15:b5:58:1d:d5:3b:48:b1:9a:44:aa:
ee:89:9d:91:09:05:07:0d:ca:71:a3:25:b5:2a:18:
8b:c4:28:48:57:4b:73:41:58:e5:08:4c:37:fb:b7:
75:80:98:b6:3e:da:dc:e5:79:34:68:36:60:50:c1:
56:a0:90:55:0b:03:45:3e:9e:d9:58:7c:be:61:05:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:77:9D:BD:97:C3:61:20:44:EA:8E:F3:82:81:0C:60:29:3F:C7:4F
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/VHedvZfDYSBE6o7zgoEMYCk_x08.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.14.0.0/17
Signature Algorithm: sha256WithRSAEncryption
4e:b6:88:b0:45:5a:bd:ec:07:04:47:62:70:6b:dc:1c:8e:97:
53:b3:1f:75:99:79:26:2c:7b:87:7e:49:c1:02:41:a5:dd:53:
5e:9f:6e:9f:3a:f0:83:f1:86:db:a2:f8:96:b3:25:cf:25:1c:
3a:98:ac:9a:2f:ef:59:71:17:70:1e:bc:15:87:29:87:f4:69:
be:45:27:fc:87:c3:3d:8f:54:d0:09:fe:72:64:a8:f5:90:02:
7d:b2:b4:44:64:23:72:71:f5:97:45:bd:de:a3:3b:4a:05:ac:
52:98:fb:4b:89:60:22:51:be:65:78:fb:3d:38:2f:0d:d2:f1:
69:ba:af:0b:d7:85:66:77:1f:73:28:3b:9a:72:8c:7e:f7:3d:
bc:86:67:8e:e8:6f:86:5b:fc:59:02:9f:0f:0c:31:7d:78:9c:
ac:6d:84:c6:ec:d0:58:dd:40:bc:61:72:7a:e3:24:a6:ff:27:
80:c0:27:d6:23:ed:f0:3f:27:73:f0:be:07:8e:c9:7e:e3:3c:
d6:44:94:c2:fd:6a:e8:49:e4:cf:6c:4f:f9:2b:63:26:85:a6:
d1:7f:5e:c4:b7:74:65:17:21:5a:a2:10:c0:d6:2e:e8:fb:86:
45:89:01:9f:69:8c:56:4e:a5:73:99:6f:4b:db:d6:7a:76:eb:
19:d6:96:df
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5
QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yMDA5Mjkx
MDA0MzJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU0Nzc5REJEOTdDMzYx
MjA0NEVBOEVGMzgyODEwQzYwMjkzRkM3NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkvtUOjahaukE1giED4vvTs8O5KKwiV7JYPYx0j28UYoFx+gsz
Sj+3O1jl+9HXHbT/YfLKYHSIfAZZYykg/70ukEivn8IfBIDSXFwRFm8rCj1NgRF9
UPTm6AfQ7wVjpNauk5o1mNGe7jZVhDyV9F0SruByBHQon79pCdiA0hRDQZxG6IqN
o6alBQT46FtPI3qlOOvGkmMbg7tTyzHBwDuCGyu0Ab6d5WJFuJB4f1fUSBBgJXEb
fk8VtVgd1TtIsZpEqu6JnZEJBQcNynGjJbUqGIvEKEhXS3NBWOUITDf7t3WAmLY+
2tzleTRoNmBQwVagkFULA0U+ntlYfL5hBes9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVHedvZfDYSBE6o7zgoEMYCk/x08wHwYDVR0jBBgwFoAUmZu+Ex3100bydifM
T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H
L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL1ZIZWR2WmZEWVNCRTZvN3pn
b0VNWUNrX3gwOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3
DgAwDQYJKoZIhvcNAQELBQADggEBAE62iLBFWr3sBwRHYnBr3ByOl1OzH3WZeSYs
e4d+ScECQaXdU16fbp868IPxhtui+JazJc8lHDqYrJov71lxF3AevBWHKYf0ab5F
J/yHwz2PVNAJ/nJkqPWQAn2ytERkI3Jx9ZdFvd6jO0oFrFKY+0uJYCJRvmV4+z04
Lw3S8Wm6rwvXhWZ3H3MoO5pyjH73PbyGZ47ob4Zb/FkCnw8MMX14nKxthMbs0Fjd
QLxhcnrjJKb/J4DAJ9Yj7fA/J3PwvgeOyX7jPNZElML9auhJ5M9sT/krYyaFptF/
XsS3dGUXIVqiEMDWLuj7hkWJAZ9pjFZOpXOZb0vb1np26xnWlt8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:09 2025 by rpki-client