Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/joTOyD4ApZ3TbvJIFVhL5wvpFaY.roa
File: joTOyD4ApZ3TbvJIFVhL5wvpFaY.roa (raw, json)
Hash identifier: /nvMiy3gKuLPLTWvofyWUP1FL3ohJD9m6XvQX/oXh/o=
Subject key identifier: 8E:84:CE:C8:3E:00:A5:9D:D3:6E:F2:48:15:58:4B:E7:0B:E9:15:A6
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 09F4
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/joTOyD4ApZ3TbvJIFVhL5wvpFaY.roa
Signing time: Wed 29 Sep 2021 02:40:36 +0000
ROA not before: Wed 29 Sep 2021 02:40:36 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9416
IP address blocks: 123.252.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2548 (0x9f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 02:40:36 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8E84CEC83E00A59DD36EF24815584BE70BE915A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:d5:e5:f0:3f:61:2c:cd:60:a6:8f:48:86:
3a:69:8b:45:0e:37:c1:a7:4e:ea:85:fd:2c:5d:16:
1a:a5:b1:f9:bf:5e:14:dc:b3:92:41:fb:d1:27:e7:
d4:66:c2:2a:b6:69:5e:19:b4:5d:65:5c:81:7a:7d:
34:b4:7f:94:23:b0:c7:75:b2:94:ad:cd:56:56:28:
8a:37:fb:a6:41:4d:51:f9:00:c3:d5:be:26:03:1b:
b3:14:c5:b2:2d:02:98:cb:ba:44:3d:32:bd:75:01:
16:54:18:b5:c9:86:9f:4c:39:d6:cc:d9:07:d9:75:
fb:05:27:1e:9e:bf:46:16:82:87:73:8d:be:8c:44:
e3:60:90:e7:63:d4:f5:11:68:83:1b:0b:ca:b4:d8:
22:d2:10:84:cc:5f:3c:44:03:b5:a4:77:f3:06:de:
6e:7a:2b:ec:75:f8:b1:f8:ca:4c:fc:12:84:94:f2:
6c:c3:de:25:9f:07:7e:a2:a1:62:8f:9a:2d:cf:cf:
c5:0d:4e:19:a4:68:2f:dd:93:00:4e:79:5e:14:b7:
91:6e:03:b9:89:b7:1d:ad:0e:d5:8e:d1:97:07:bf:
15:27:36:7d:39:8a:eb:6f:d6:c8:c0:9f:86:c7:2f:
ca:c8:d9:11:7f:1f:23:b8:cf:a0:8b:ca:7f:e8:13:
a8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:84:CE:C8:3E:00:A5:9D:D3:6E:F2:48:15:58:4B:E7:0B:E9:15:A6
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/joTOyD4ApZ3TbvJIFVhL5wvpFaY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.252.64.0/18
Signature Algorithm: sha256WithRSAEncryption
88:88:3d:38:40:3d:80:2b:4b:85:92:b6:92:f2:92:1c:d3:8d:
b8:a8:8b:22:ee:a2:13:40:3c:05:ca:06:fe:c4:4a:7c:f0:e8:
48:55:5f:f8:14:db:eb:6a:9d:f6:eb:ea:82:d9:6d:34:01:0a:
58:c9:ba:8b:81:49:66:53:8a:f3:cb:2d:d9:cb:12:41:8e:40:
de:ed:45:6f:ab:d1:0b:9d:aa:5b:25:02:1e:80:2e:c8:84:de:
cd:2d:c8:6e:a3:8a:f0:a3:5f:bc:79:be:29:b1:b1:ef:8a:87:
66:56:e7:49:65:0f:57:1d:f8:55:8b:b5:e1:cd:20:27:af:26:
9d:db:e6:1f:66:86:4f:d9:a0:16:4f:f7:5f:f9:9a:b1:db:39:
aa:c3:1e:68:54:90:fa:c9:4a:8a:9f:cb:2b:72:4b:30:ee:9e:
cf:2f:62:32:a9:03:63:31:b5:cf:21:4c:b1:a3:bd:72:be:4e:
10:5c:73:d5:48:67:ac:6e:e1:b5:77:48:89:f8:24:cc:4d:d1:
e8:34:89:da:fd:b4:86:0e:02:d8:cd:3b:f3:9c:d6:e7:fb:33:
70:ab:39:a0:e5:9d:cf:dc:e8:29:dc:04:6b:2d:69:08:9b:b5:
bf:e6:a3:04:6b:42:da:fc:05:f6:a0:f5:4d:2d:fe:03:97:f7:
7c:69:4c:83
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCfQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5
QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yMTA5Mjkw
MjQwMzZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDhFODRDRUM4M0UwMEE1
OUREMzZFRjI0ODE1NTg0QkU3MEJFOTE1QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLUdXl8D9hLM1gpo9Ihjppi0UON8GnTuqF/SxdFhqlsfm/XhTc
s5JB+9En59Rmwiq2aV4ZtF1lXIF6fTS0f5QjsMd1spStzVZWKIo3+6ZBTVH5AMPV
viYDG7MUxbItApjLukQ9Mr11ARZUGLXJhp9MOdbM2QfZdfsFJx6ev0YWgodzjb6M
RONgkOdj1PURaIMbC8q02CLSEITMXzxEA7Wkd/MG3m56K+x1+LH4ykz8EoSU8mzD
3iWfB36ioWKPmi3Pz8UNThmkaC/dkwBOeV4Ut5FuA7mJtx2tDtWO0ZcHvxUnNn05
iutv1sjAn4bHL8rI2RF/HyO4z6CLyn/oE6gpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjoTOyD4ApZ3TbvJIFVhL5wvpFaYwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM
T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H
L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL2pvVE95RDRBcFozVGJ2SklG
VmhMNXd2cEZhWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ7
/EAwDQYJKoZIhvcNAQELBQADggEBAIiIPThAPYArS4WStpLykhzTjbioiyLuohNA
PAXKBv7ESnzw6EhVX/gU2+tqnfbr6oLZbTQBCljJuouBSWZTivPLLdnLEkGOQN7t
RW+r0QudqlslAh6ALsiE3s0tyG6jivCjX7x5vimxse+Kh2ZW50llD1cd+FWLteHN
ICevJp3b5h9mhk/ZoBZP91/5mrHbOarDHmhUkPrJSoqfyytySzDuns8vYjKpA2Mx
tc8hTLGjvXK+ThBcc9VIZ6xu4bV3SIn4JMxN0eg0idr9tIYOAtjNO/Oc1uf7M3Cr
OaDlnc/c6CncBGstaQibtb/mowRrQtr8Bfag9U0t/gOX93xpTIM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org