Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/bHPj76os6AqEfhj5uhOCbkKeeaM.roa
File: bHPj76os6AqEfhj5uhOCbkKeeaM.roa (raw, json)
Hash identifier: kOLpvlhsl3aNCgV2RfdRtrMwMwgmSfdiaNsdArBXur8=
Subject key identifier: 6C:73:E3:EF:AA:2C:E8:0A:84:7E:18:F9:BA:13:82:6E:42:9E:79:A3
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 078A
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/bHPj76os6AqEfhj5uhOCbkKeeaM.roa
Signing time: Tue 29 Sep 2020 10:04:31 +0000
ROA not before: Tue 29 Sep 2020 10:04:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9416
IP address blocks: 119.14.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1930 (0x78a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 10:04:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6C73E3EFAA2CE80A847E18F9BA13826E429E79A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:a0:3b:65:32:f0:91:0f:30:1f:52:27:fc:
78:dc:a8:d0:f1:52:a4:8f:d2:3e:51:eb:3d:94:30:
7b:4d:d5:56:01:e2:77:4e:97:6f:a4:cb:e1:e2:75:
95:f2:34:ee:c0:dc:00:bf:93:78:99:db:cb:e1:07:
35:ed:46:51:95:a5:7c:d5:65:fb:de:a2:b6:59:c3:
35:ed:ba:af:c5:fc:0d:dd:dd:e3:52:e9:47:3a:41:
4a:f7:b6:a1:05:d1:d5:0f:08:8d:d6:a9:93:ae:48:
33:a3:6c:cb:1f:20:02:12:f2:0b:75:e9:8f:61:40:
7b:b6:80:7f:1d:43:7f:1d:7f:71:13:8a:59:24:92:
e3:f7:8e:59:0d:cd:70:2e:c7:ef:ed:4a:ea:5c:dc:
48:11:91:56:0a:a4:4f:bc:02:1a:79:8d:64:e3:10:
da:af:54:b9:c1:bd:e8:18:99:c3:bd:4b:84:f5:5f:
74:d5:ad:12:dc:32:61:90:7e:9a:18:72:6c:6f:d9:
31:20:cf:1a:34:be:fe:02:7c:72:fc:67:77:42:3b:
01:63:46:09:a9:47:af:e4:6d:8c:d6:ee:14:d0:2d:
fa:10:d0:35:12:c7:a1:12:02:e7:fd:73:b1:51:e0:
e9:7a:fd:31:8a:24:47:f6:a1:25:11:74:9d:ff:30:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:E3:EF:AA:2C:E8:0A:84:7E:18:F9:BA:13:82:6E:42:9E:79:A3
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/bHPj76os6AqEfhj5uhOCbkKeeaM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.14.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5e:d6:ff:69:5a:d6:c6:fb:1c:99:7c:71:c1:ce:b3:c8:78:6c:
22:82:2e:d9:81:c8:c7:0e:dd:8e:c0:3c:b7:df:66:b7:a3:fc:
48:27:6a:e3:bc:ee:7c:fe:f3:f9:83:d1:36:b2:77:24:cf:fa:
dd:21:cc:c7:83:f8:33:0b:1a:23:92:c8:38:5b:6e:70:be:f2:
1a:d9:bb:2d:fa:7b:1b:fb:c9:17:75:8b:31:79:ff:de:58:11:
c3:09:1d:31:36:c6:52:e6:9f:cb:55:c4:40:91:c6:78:97:b7:
6c:45:0f:28:b1:a5:82:2a:c5:ac:7d:f0:3c:46:41:9e:60:00:
12:ea:55:53:1a:ec:ff:fe:85:e3:f2:f6:94:a6:bf:3b:2d:0d:
cc:75:20:5e:0d:92:87:4f:ba:17:a0:9c:90:5f:08:42:34:df:
90:43:ef:c8:f8:27:14:63:74:a7:ef:30:2a:34:ad:35:89:a0:
c6:dc:78:0a:ed:2a:b2:d7:a4:63:3f:4c:ce:0c:e9:87:a6:93:
c3:b7:3c:a0:58:23:2f:5b:75:82:f3:53:05:1e:76:19:e9:61:
d8:47:d1:0d:d4:88:13:9c:7c:13:b6:fb:8d:af:73:da:93:0c:
c1:4b:72:e6:bf:ec:fb:9d:0a:f1:26:52:05:85:76:c4:58:87:
22:70:0d:b0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5
QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yMDA5Mjkx
MDA0MzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZDNzNFM0VGQUEyQ0U4
MEE4NDdFMThGOUJBMTM4MjZFNDI5RTc5QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5FKA7ZTLwkQ8wH1In/HjcqNDxUqSP0j5R6z2UMHtN1VYB4ndO
l2+ky+HidZXyNO7A3AC/k3iZ28vhBzXtRlGVpXzVZfveorZZwzXtuq/F/A3d3eNS
6Uc6QUr3tqEF0dUPCI3WqZOuSDOjbMsfIAIS8gt16Y9hQHu2gH8dQ38df3ETilkk
kuP3jlkNzXAux+/tSupc3EgRkVYKpE+8Ahp5jWTjENqvVLnBvegYmcO9S4T1X3TV
rRLcMmGQfpoYcmxv2TEgzxo0vv4CfHL8Z3dCOwFjRgmpR6/kbYzW7hTQLfoQ0DUS
x6ESAuf9c7FR4Ol6/TGKJEf2oSURdJ3/MJ4NAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUbHPj76os6AqEfhj5uhOCbkKeeaMwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM
T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H
L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL2JIUGo3Nm9zNkFxRWZoajV1
aE9DYmtLZWVhTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3
DoAwDQYJKoZIhvcNAQELBQADggEBAF7W/2la1sb7HJl8ccHOs8h4bCKCLtmByMcO
3Y7APLffZrej/EgnauO87nz+8/mD0TaydyTP+t0hzMeD+DMLGiOSyDhbbnC+8hrZ
uy36exv7yRd1izF5/95YEcMJHTE2xlLmn8tVxECRxniXt2xFDyixpYIqxax98DxG
QZ5gABLqVVMa7P/+hePy9pSmvzstDcx1IF4NkodPuhegnJBfCEI035BD78j4JxRj
dKfvMCo0rTWJoMbceArtKrLXpGM/TM4M6Yemk8O3PKBYIy9bdYLzUwUedhnpYdhH
0Q3UiBOcfBO2+42vc9qTDMFLcua/7PudCvEmUgWFdsRYhyJwDbA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:53 2025 by rpki-client