Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/ZWCvm-U9RHRcYtHTv4O7iq-alco.roa
File: ZWCvm-U9RHRcYtHTv4O7iq-alco.roa (raw, json)
Hash identifier: 4gDo1DS9xBX97kRPe+F1U16ZyqrOD+iC9jKauuxpQPo=
Subject key identifier: 65:60:AF:9B:E5:3D:44:74:5C:62:D1:D3:BF:83:BB:8A:AF:9A:95:CA
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 09FA
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/ZWCvm-U9RHRcYtHTv4O7iq-alco.roa
Signing time: Wed 29 Sep 2021 02:40:38 +0000
ROA not before: Wed 29 Sep 2021 02:40:38 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.252.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2554 (0x9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 02:40:38 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6560AF9BE53D44745C62D1D3BF83BB8AAF9A95CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:2f:40:d4:d8:e7:8d:4a:ac:31:d7:24:66:
a4:81:f4:d3:cf:70:62:32:46:bb:61:6c:08:27:2f:
82:06:9e:e8:9c:f4:28:63:15:77:a3:2e:22:6e:b6:
4f:26:31:13:b1:11:3a:fa:87:ee:0c:bb:42:0a:c9:
5e:0a:3f:6f:8d:2c:4b:ae:22:3c:e3:1c:eb:9d:a2:
7f:b1:15:9b:0d:7d:43:64:7b:ee:cb:50:bd:2c:6d:
5e:58:e0:6f:df:6f:0c:93:7e:ce:7a:1a:71:1c:ca:
df:ab:50:27:39:7f:14:34:38:f1:b9:ec:fb:d0:92:
ea:73:f3:82:02:66:c5:95:5f:be:11:c4:2f:24:3b:
a9:f9:40:f2:51:35:bb:f9:e1:14:af:04:6c:7a:45:
57:ec:b6:b3:87:d7:07:11:16:f6:39:d1:db:89:8e:
ad:5f:27:ed:fd:1c:3f:d4:fd:dd:bb:72:51:45:c9:
6f:53:ed:cd:1f:d6:4a:48:d2:82:74:47:4c:00:c4:
f7:58:38:47:23:f8:46:48:21:b6:05:4c:3a:a7:00:
9b:df:ef:64:30:24:a3:19:32:db:c0:2f:9e:73:3c:
fa:20:1e:38:a2:91:3e:c5:77:08:d7:f9:41:ac:7f:
93:84:6c:d7:a0:79:16:29:d1:ef:6a:63:ab:d4:c2:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:60:AF:9B:E5:3D:44:74:5C:62:D1:D3:BF:83:BB:8A:AF:9A:95:CA
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/ZWCvm-U9RHRcYtHTv4O7iq-alco.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.252.64.0/18
Signature Algorithm: sha256WithRSAEncryption
24:88:e8:06:c0:7a:df:9b:56:17:74:55:5b:73:c1:af:1a:83:
62:b8:3a:55:c6:0f:e8:0f:ba:c7:13:dc:51:2e:ba:29:f6:55:
78:ce:e2:de:a9:73:3b:b7:32:b8:59:64:ea:82:53:d0:16:6a:
aa:24:38:c2:da:b6:17:3c:62:f0:0f:01:d0:ee:df:14:79:fd:
ab:a2:61:b3:42:99:bf:f1:e0:d0:85:a5:2b:a3:49:41:19:3c:
5a:52:c2:6d:1b:73:ee:de:1f:f8:28:e6:6d:24:2c:db:7d:89:
3a:ab:42:37:49:8a:84:76:75:79:9c:0f:b6:54:8e:f0:6b:af:
39:8e:34:3c:b2:da:ae:ab:f1:2c:d4:d3:ba:56:5c:da:df:c5:
1d:66:63:40:f8:c7:28:49:6f:1b:e8:ff:91:0b:1f:e5:c5:1c:
a6:b3:70:7a:0c:08:d3:84:7d:f1:4b:ea:ca:fe:67:90:8e:b2:
3f:4a:a8:1f:ba:76:df:80:52:b0:6a:a2:31:e4:9f:39:3b:51:
b5:b9:43:d1:ca:85:90:b3:4e:02:32:fa:f5:49:ea:f2:5c:3c:
59:a6:97:f0:f3:e4:29:4d:6c:5b:58:b8:fe:04:19:e4:5d:9a:
42:b6:a1:d5:82:1a:f2:22:2f:dc:e6:67:0b:28:b2:9d:e6:6a:
2b:a5:22:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:12 2025 by rpki-client