Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/l9yWYnZ8todFzQ3dcNX6Gk4e0oM.roa
File: l9yWYnZ8todFzQ3dcNX6Gk4e0oM.roa (raw, json)
Hash identifier: 9VI3lTWC+ge6ZBHmTQZ+riSF7HYOS7RAtJC70RkBhF4=
Subject key identifier: 97:DC:96:62:76:7C:B6:87:45:CD:0D:DD:70:D5:FA:1A:4E:1E:D2:83
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 092B
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/l9yWYnZ8todFzQ3dcNX6Gk4e0oM.roa
Signing time: Mon 22 Feb 2021 14:10:23 +0000
ROA not before: Mon 22 Feb 2021 14:10:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 123.252.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2347 (0x92b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 22 14:10:23 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=97DC9662767CB68745CD0DDD70D5FA1A4E1ED283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:5e:a0:b2:bb:6e:27:7e:01:63:6d:0b:6b:
14:c4:bc:63:2a:56:8e:1e:14:6d:da:99:8e:96:10:
d9:b9:b8:85:80:6c:4f:b4:b8:6a:b0:da:3e:31:39:
bf:1a:8f:eb:10:8e:97:89:17:3d:8a:83:49:5a:fa:
14:b6:91:c3:fa:7d:e8:80:8f:ed:1d:08:82:04:63:
1a:12:60:72:68:82:58:d2:4e:7a:76:89:48:0f:7e:
c2:68:e2:1d:58:d0:44:3a:e3:f9:04:e1:75:5a:bc:
e8:60:67:c5:93:3c:3e:e1:2e:c0:6f:2d:9b:da:0a:
3b:1c:77:50:d0:f2:4f:1f:b9:dc:5f:0a:15:2a:70:
47:6c:5a:77:39:3b:3b:bf:0a:23:20:ba:c4:0f:00:
19:83:d5:06:46:1b:8b:9a:5d:93:3d:e6:14:ac:ca:
17:06:d7:82:78:03:08:87:1c:66:63:07:79:fa:35:
e8:f8:1d:93:44:03:38:13:68:f0:24:c1:72:22:08:
62:06:6b:07:c5:b2:83:50:af:ae:3c:8e:ad:04:72:
6e:72:6e:97:2c:08:52:7d:5d:3d:09:dc:9c:7c:8d:
f9:d0:9d:d2:e7:65:1e:b2:12:1a:0b:aa:f4:ee:92:
bb:3f:e6:03:0d:5c:0a:e6:98:de:49:85:5c:62:e1:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DC:96:62:76:7C:B6:87:45:CD:0D:DD:70:D5:FA:1A:4E:1E:D2:83
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/l9yWYnZ8todFzQ3dcNX6Gk4e0oM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.252.0.0/17
Signature Algorithm: sha256WithRSAEncryption
86:06:af:b7:e7:c9:1c:bb:3b:b0:2c:2c:d9:6b:56:cd:d1:83:
8c:f6:a5:4b:a2:5d:61:63:20:06:13:f2:a0:36:ae:fc:85:65:
f7:66:93:54:f5:f8:83:f8:4e:f2:92:b8:2f:c9:65:15:96:95:
bf:4c:fb:df:2b:e9:38:ab:1e:94:c0:82:93:74:90:26:6e:c3:
ab:24:e6:8f:e0:35:ee:7d:cd:4b:28:94:54:32:ce:2d:b7:41:
80:a5:25:fb:27:65:44:16:cf:ce:4a:4a:ce:8b:69:93:ac:76:
20:a5:3b:86:fe:ec:84:9f:1a:26:f5:e5:a1:cd:0c:fd:a2:57:
2d:be:66:5a:ac:60:28:24:38:91:8e:b2:d6:d9:c6:99:16:b9:
b4:86:44:c3:fe:c3:6a:f1:4b:c3:e4:46:a6:ed:fc:aa:50:05:
e9:78:76:5e:a9:3c:c9:de:86:3a:7a:99:a8:ae:51:fb:ab:f7:
44:f1:0f:8a:b8:cd:b3:7e:0c:62:8b:9c:37:07:c5:8e:67:36:
2f:1c:16:e2:68:84:bd:a4:96:48:8e:f2:94:4b:55:ca:50:b2:
5d:85:39:d6:04:ec:5e:8a:c9:9f:86:f8:6a:e1:f6:6a:68:8e:
d8:c5:f2:a6:c5:0d:f0:37:be:ce:77:fc:de:bc:7f:58:b4:2a:
b5:ea:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:44 2025 by rpki-client