Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/lBJZzVfI7bSZqM3KOsCcBHzuv7o.roa
File: lBJZzVfI7bSZqM3KOsCcBHzuv7o.roa (raw, json)
Hash identifier: 8e0/NQZGrd4h4HBkd6cDCqjWHdik22gtc7RNvdUyBAE=
Subject key identifier: 94:12:59:CD:57:C8:ED:B4:99:A8:CD:CA:3A:C0:9C:04:7C:EE:BF:BA
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 09F9
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/lBJZzVfI7bSZqM3KOsCcBHzuv7o.roa
Signing time: Wed 29 Sep 2021 02:40:37 +0000
ROA not before: Wed 29 Sep 2021 02:40:37 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18042
IP address blocks: 115.43.0.0/17 maxlen: 17
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2553 (0x9f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 02:40:37 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=941259CD57C8EDB499A8CDCA3AC09C047CEEBFBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:36:87:b4:16:d6:e4:cb:48:1e:35:55:99:
a0:29:01:aa:c9:f8:05:0d:d7:6a:e5:5a:cf:52:2c:
74:87:09:18:15:04:63:93:e5:a4:19:17:99:df:16:
61:08:43:76:99:cd:83:38:70:7f:e4:39:08:5d:a9:
90:c7:42:81:a3:be:84:1e:d2:75:15:e3:28:0c:53:
70:ac:77:0f:0f:57:2f:16:c9:29:6d:f0:ef:49:f8:
1e:0d:c2:8f:63:8e:9e:f2:72:20:c7:32:19:f8:82:
5e:10:59:18:77:b5:4d:35:44:a1:29:7d:80:a0:5d:
a5:25:73:ae:e4:ba:25:47:06:eb:8a:10:c2:1c:b8:
2a:c5:af:cf:38:40:b3:a2:30:bf:b3:93:a3:d7:c4:
86:28:8c:5e:87:27:8a:40:6b:f9:f7:6e:e4:0a:54:
40:1d:b7:f2:5a:40:1b:c4:c9:f6:fb:80:8d:e1:05:
7f:c9:9d:ba:db:6e:1b:55:f3:8f:37:22:fd:9f:c8:
c7:a0:d9:57:71:da:27:0f:a2:5d:c5:74:8e:53:b2:
df:fc:c6:7f:a0:05:64:ef:fb:5c:df:b6:c5:1a:b5:
02:d8:9a:36:c5:38:e4:e8:57:c4:1b:fe:59:7d:15:
59:80:0f:b1:05:f8:ef:d0:20:e9:fb:d3:f5:b3:bf:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:12:59:CD:57:C8:ED:B4:99:A8:CD:CA:3A:C0:9C:04:7C:EE:BF:BA
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/lBJZzVfI7bSZqM3KOsCcBHzuv7o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/17
Signature Algorithm: sha256WithRSAEncryption
33:39:f0:94:82:2e:85:35:54:18:ed:d7:3c:34:6f:23:8d:fb:
dc:be:80:d4:b4:6b:5e:bf:02:5d:78:e4:2b:f0:f3:88:fe:97:
15:94:ee:dd:f5:bf:d2:32:fb:ef:d7:a8:14:45:a8:ce:7d:25:
33:2c:38:d7:7e:ae:82:3f:fa:d0:22:35:21:bf:8f:c1:48:f3:
38:b8:b0:ab:2f:6d:29:cf:25:d3:8a:aa:f9:16:39:44:85:8d:
c6:8d:af:51:fa:5b:d6:f6:41:da:cd:1d:66:cf:dc:f0:da:6c:
ba:10:80:f6:2e:70:61:e3:6b:e2:9e:e3:ad:a8:0b:61:b5:ca:
fa:0b:47:be:04:42:da:37:45:99:15:a5:0d:89:e5:d2:d5:a5:
e0:24:2e:a6:6d:d5:b6:ae:a9:aa:14:97:43:28:57:a5:bc:8c:
c3:d6:9b:b1:76:d1:e5:d8:26:4b:f8:ff:65:a0:38:63:d0:d7:
1b:b4:64:30:e2:b1:63:05:08:42:b3:61:ec:cb:16:44:95:5e:
a0:dd:ec:27:59:ca:5c:04:eb:94:cf:8e:ed:ea:b3:d1:67:70:
df:88:b1:a9:26:5c:b1:81:f3:b1:28:fd:7e:2e:4d:37:6a:1c:
56:a7:b6:2e:ce:70:5e:77:14:5d:a9:77:30:ae:d7:04:44:9a:
e8:67:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:38 2025 by rpki-client