Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/gT1LbuVEufRpCRy6k8MH-WEBQCA.roa
File: gT1LbuVEufRpCRy6k8MH-WEBQCA.roa (raw, json)
Hash identifier: P+V0M0XITtzDW0PU3VwzXqAti4OytMaFG+JMvKwqXA4=
Subject key identifier: 81:3D:4B:6E:E5:44:B9:F4:69:09:1C:BA:93:C3:07:F9:61:01:40:20
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 08A6
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/gT1LbuVEufRpCRy6k8MH-WEBQCA.roa
Signing time: Fri 27 Nov 2020 00:49:59 +0000
ROA not before: Fri 27 Nov 2020 00:49:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.252.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2214 (0x8a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Nov 27 00:49:59 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=813D4B6EE544B9F469091CBA93C307F961014020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:98:6c:f0:10:92:2b:99:2a:3f:d8:2b:55:af:
4a:98:6f:c7:d8:36:4b:16:f8:2b:bf:c8:b0:48:57:
dc:ec:86:33:55:3f:a0:6b:8d:06:26:29:ed:d9:a7:
bb:b8:01:ed:60:9b:b4:f9:bb:e1:fb:80:2f:80:f0:
34:69:8a:e9:b5:2e:5d:3c:7c:de:dc:a0:17:5f:d6:
d1:4c:19:a8:ab:5f:a0:23:d3:a8:03:8c:fd:5c:3a:
8e:ac:c3:0d:43:91:34:33:29:bb:f6:c9:ef:37:b1:
69:0f:c6:f3:09:64:c6:73:b1:2d:e3:d2:14:50:65:
1a:bd:e8:78:2a:be:4c:31:11:dc:54:bc:6c:98:51:
42:c6:6d:63:49:69:1f:c5:2e:7c:24:8c:1a:3c:1e:
79:eb:56:fe:51:59:a4:52:e5:40:a5:a7:e0:95:87:
32:28:0a:62:2f:75:cb:fe:34:32:5c:4f:d2:9e:db:
32:8b:33:0a:ae:f0:1d:3d:44:ce:d0:6a:7d:2e:09:
43:08:54:6a:07:c8:85:dc:b6:57:1b:16:2a:ce:d8:
5b:0c:b8:7b:15:c4:10:9f:8a:db:1a:e3:1b:3d:97:
2a:23:33:af:28:bc:d9:a0:b5:da:c9:19:f4:e1:fe:
97:0a:95:63:f6:8e:1b:67:fe:e8:b1:6d:fd:87:9b:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3D:4B:6E:E5:44:B9:F4:69:09:1C:BA:93:C3:07:F9:61:01:40:20
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/gT1LbuVEufRpCRy6k8MH-WEBQCA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.252.0.0/19
Signature Algorithm: sha256WithRSAEncryption
37:a6:2d:f3:a0:2f:0e:5b:d5:7d:bf:e8:aa:c0:70:85:67:52:
27:a0:00:21:bb:6a:a6:26:70:69:85:90:ec:24:c8:b7:3e:c1:
54:8d:2c:6a:a0:79:c2:9d:63:bd:23:31:4d:1a:79:ea:a1:b2:
f0:28:a9:e5:b3:07:ca:c3:cb:c5:1d:2f:e4:71:a0:0b:0d:08:
24:36:b9:e0:24:3c:76:a5:82:49:b7:f4:a0:ad:32:ad:3b:ae:
95:8c:be:ed:84:46:82:df:f2:99:bc:7e:fb:b8:4c:5b:b2:a3:
8b:93:9f:58:e9:6b:cf:ef:25:e5:5a:f6:db:da:cb:4b:64:7f:
03:3d:0f:43:88:2a:c7:28:22:30:9a:07:38:a5:0d:be:9e:45:
37:04:71:a9:af:e8:bd:5f:7f:2d:b5:6f:d2:27:87:ca:f6:9e:
23:74:3c:69:a0:12:6d:e8:de:25:dc:f1:69:2d:f5:54:ea:cc:
11:7d:1e:f2:45:78:95:50:95:a7:5a:06:cb:ce:9d:1e:df:fa:
08:42:f2:6f:42:c0:4c:56:35:61:98:a1:8a:92:cb:b1:27:bf:
68:26:e3:7d:fc:2e:40:50:94:89:5a:cc:ff:00:85:e9:36:b2:
bf:4a:ea:10:04:88:c6:84:9a:58:cf:db:c6:fc:0f:98:25:db:
aa:e5:27:cd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5
QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yMDExMjcw
MDQ5NTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDgxM0Q0QjZFRTU0NEI5
RjQ2OTA5MUNCQTkzQzMwN0Y5NjEwMTQwMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDzmGzwEJIrmSo/2CtVr0qYb8fYNksW+Cu/yLBIV9zshjNVP6Br
jQYmKe3Zp7u4Ae1gm7T5u+H7gC+A8DRpium1Ll08fN7coBdf1tFMGairX6Aj06gD
jP1cOo6sww1DkTQzKbv2ye83sWkPxvMJZMZzsS3j0hRQZRq96HgqvkwxEdxUvGyY
UULGbWNJaR/FLnwkjBo8HnnrVv5RWaRS5UClp+CVhzIoCmIvdcv+NDJcT9Ke2zKL
Mwqu8B09RM7Qan0uCUMIVGoHyIXctlcbFirO2FsMuHsVxBCfitsa4xs9lyojM68o
vNmgtdrJGfTh/pcKlWP2jhtn/uixbf2Hm8YjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUgT1LbuVEufRpCRy6k8MH+WEBQCAwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM
T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H
L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL2dUMUxidVZFdWZScENSeTZr
OE1ILVdFQlFDQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
/AAwDQYJKoZIhvcNAQELBQADggEBADemLfOgLw5b1X2/6KrAcIVnUiegACG7aqYm
cGmFkOwkyLc+wVSNLGqgecKdY70jMU0aeeqhsvAoqeWzB8rDy8UdL+RxoAsNCCQ2
ueAkPHalgkm39KCtMq07rpWMvu2ERoLf8pm8fvu4TFuyo4uTn1jpa8/vJeVa9tva
y0tkfwM9D0OIKscoIjCaBzilDb6eRTcEcamv6L1ffy21b9Inh8r2niN0PGmgEm3o
3iXc8Wkt9VTqzBF9HvJFeJVQladaBsvOnR7f+ghC8m9CwExWNWGYoYqSy7Env2gm
4338LkBQlIlazP8Ahek2sr9K6hAEiMaEmljP28b8D5gl26rlJ80=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org