Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/YJdutf5ymKYWPs8ZCb4XtKDj9nM.roa
File: YJdutf5ymKYWPs8ZCb4XtKDj9nM.roa (raw, json)
Hash identifier: PsnXniCeu43JTQT+n7CGPwEp6yQupGvt/6N4YkgY2tw=
Subject key identifier: 60:97:6E:B5:FE:72:98:A6:16:3E:CF:19:09:BE:17:B4:A0:E3:F6:73
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0957
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/YJdutf5ymKYWPs8ZCb4XtKDj9nM.roa
Signing time: Wed 03 Mar 2021 02:07:51 +0000
ROA not before: Wed 03 Mar 2021 02:07:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 220.157.112.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2391 (0x957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Mar 3 02:07:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=60976EB5FE7298A6163ECF1909BE17B4A0E3F673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:f9:ed:65:e8:74:99:e6:14:13:df:d6:de:
e2:ea:13:fb:66:8e:cb:00:99:82:24:91:28:a3:74:
11:d0:34:da:2d:5f:d2:76:22:b8:1c:55:c9:7d:ef:
4a:1e:4c:62:21:6d:91:83:68:e3:7d:6c:35:de:94:
e7:53:ec:71:7e:0d:43:a2:e0:1d:da:1a:75:c1:51:
1c:8c:b1:40:d0:6c:4d:c7:32:f3:97:fe:9c:ab:4b:
60:ac:1c:73:31:ff:61:cb:8c:cb:00:55:70:f9:8d:
d3:ee:10:89:d9:eb:bc:3b:c2:8a:f4:db:05:3f:2d:
66:31:e7:cb:37:36:a0:9d:e8:cd:be:88:e8:b5:e1:
47:34:93:e4:df:b2:e3:49:32:79:69:7c:6a:e6:9f:
a7:e0:0d:db:a3:31:95:fe:50:1c:06:41:a7:4c:14:
2e:15:be:0c:44:b0:c5:98:7e:8f:7e:16:eb:0b:c8:
74:a1:08:01:49:e9:8e:02:e4:71:3d:f3:34:09:1f:
a7:b2:11:05:d6:0a:e0:5f:90:a1:06:00:d3:4e:25:
2f:70:2e:39:68:32:1f:6e:a4:8a:41:53:fb:af:b5:
3c:95:07:f7:05:9e:01:ae:01:b2:cb:ef:59:d1:62:
69:96:b8:16:b0:ec:49:e4:21:37:c9:42:31:a0:58:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:97:6E:B5:FE:72:98:A6:16:3E:CF:19:09:BE:17:B4:A0:E3:F6:73
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/YJdutf5ymKYWPs8ZCb4XtKDj9nM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.157.112.0/20
Signature Algorithm: sha256WithRSAEncryption
76:d2:a1:3c:b4:fd:34:2f:24:5d:f6:3e:45:09:41:e5:26:01:
f5:68:fb:43:f9:84:f5:8f:cc:7b:58:ee:b0:6d:05:4f:21:7d:
f5:fd:76:29:c0:91:a4:ef:a5:fa:93:3b:08:97:6a:d0:36:12:
92:a7:8e:67:35:33:7c:9f:f6:fd:e0:66:f8:1e:c0:dd:18:f2:
0a:6b:ba:17:ac:71:f6:95:b9:7e:93:bb:84:02:a0:1c:b6:bc:
38:59:44:57:ff:cd:26:ed:d1:b1:49:0b:ee:af:7c:f3:a1:c2:
cb:67:f0:ef:5d:91:2c:42:90:b3:70:63:cc:08:85:a1:0b:6a:
8c:52:7b:cf:e7:8d:93:0a:b8:e0:31:80:07:d3:24:90:f6:65:
4c:5b:20:44:9e:f7:69:c2:a8:eb:3e:95:4f:86:a5:6a:50:50:
a7:0f:71:db:11:3b:b0:3d:4a:18:82:5b:a8:e5:ef:96:43:95:
c1:7e:4c:60:ff:98:56:53:f8:76:20:71:7d:a1:7f:4f:b2:01:
46:65:0e:db:15:e1:88:78:a9:3a:f8:8c:d4:ed:2b:53:9f:89:
ab:bd:87:a0:b1:21:28:e1:8e:d9:03:32:e4:81:51:7c:61:bd:
31:fe:b6:4d:79:83:7a:b2:d0:5f:31:43:27:1f:7f:af:8c:19:
cd:a6:02:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:48 2025 by rpki-client