Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/pNyfPTXuEPPKIl0jr6TvAsR9Dxc.roa
File: pNyfPTXuEPPKIl0jr6TvAsR9Dxc.roa (raw, json)
Hash identifier: VcgsvhCw9NhKAJS75Jne1/0hpRWkIM2NprKpw3mwP6U=
Subject key identifier: A4:DC:9F:3D:35:EE:10:F3:CA:22:5D:23:AF:A4:EF:02:C4:7D:0F:17
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0BF8
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/pNyfPTXuEPPKIl0jr6TvAsR9Dxc.roa
Signing time: Fri 01 Sep 2023 09:11:49 +0000
ROA not before: Fri 01 Sep 2023 09:11:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9416
IP address blocks: 123.252.0.0/17 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3064 (0xbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 1 09:11:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A4DC9F3D35EE10F3CA225D23AFA4EF02C47D0F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:d1:8d:b5:66:f4:e6:c3:52:35:3d:21:07:
80:70:5b:22:ca:71:24:f7:ca:5d:b7:6a:4b:89:c9:
56:4f:3a:b4:82:54:dc:a9:b7:99:18:43:0e:7d:6a:
c8:58:51:db:fa:55:d2:c4:78:74:39:59:ed:b3:f8:
b8:f7:45:74:fa:8c:6c:14:0b:c7:6e:c2:55:0e:87:
a2:e7:38:f8:f3:72:e1:90:7d:50:fa:b9:26:6a:f4:
d3:f1:9e:0d:82:8a:f9:29:50:ba:20:9d:6d:86:4d:
39:f0:be:c1:0a:cd:15:e5:10:8f:3d:06:2e:8a:27:
5a:2f:c8:75:c9:1a:d0:a5:2c:10:e0:4e:09:18:5a:
5c:1c:c9:0e:8f:19:7f:07:a2:c2:6b:51:6e:bc:23:
b7:f8:af:ac:7e:67:32:57:e6:4d:f3:68:2d:7e:7a:
4a:c4:2b:3b:bb:1e:78:60:57:3d:17:b8:3c:ed:d1:
a5:1d:19:b4:e2:8f:be:9b:05:bf:e7:d2:d7:5f:af:
d9:49:53:31:8a:4b:16:eb:03:9c:b6:30:00:c5:af:
a4:2d:d3:5e:7a:7e:5a:af:77:01:3c:0e:69:5c:c8:
c9:91:92:58:b9:a4:f5:68:8e:bd:11:bc:f5:e0:96:
7e:29:cb:1c:7c:d2:14:4c:88:1b:5c:c5:9a:9e:14:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DC:9F:3D:35:EE:10:F3:CA:22:5D:23:AF:A4:EF:02:C4:7D:0F:17
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/pNyfPTXuEPPKIl0jr6TvAsR9Dxc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.252.0.0/17
Signature Algorithm: sha256WithRSAEncryption
1c:ab:ac:75:82:bb:47:8f:37:b4:87:d5:39:90:a1:f3:c0:7e:
1d:d6:d4:c7:c7:84:d8:6f:7f:e1:28:5b:7f:20:39:c8:19:ed:
94:a5:6d:c1:53:85:6e:99:a3:d8:10:58:ec:33:60:0b:f7:13:
3c:3f:d6:9b:c5:c6:d8:86:15:ed:29:71:b1:dd:a5:2e:01:31:
47:83:ea:14:d8:6d:9c:d4:3f:bf:98:31:d7:f6:b1:25:45:8a:
ba:1e:e6:c0:9c:f3:9a:b2:76:e9:c0:24:59:d4:90:8a:99:82:
07:d4:01:d2:ac:54:f5:62:97:8d:39:06:0f:4a:5a:89:bf:fb:
c5:53:6c:74:b9:2b:db:ff:fd:e8:db:6e:b9:5a:da:5a:e2:10:
7c:bc:ea:78:4c:e1:a6:00:ac:13:55:50:96:d8:d7:4c:66:d4:
63:43:d1:af:23:9e:b2:5b:7b:1a:22:3f:a3:04:2e:5a:af:97:
ae:e8:1d:eb:f9:82:9e:83:f3:9c:3e:da:80:92:c9:91:83:4f:
4a:cc:77:d7:e2:0e:14:4a:e8:14:a7:f4:65:fd:a7:5d:2a:fc:
d1:b6:b3:78:7b:15:14:89:da:8c:f8:b4:d8:4f:68:bc:79:95:
5b:92:be:2e:6b:ef:97:cd:b4:fa:d5:29:1a:a0:84:e7:4b:f9:
3f:1d:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:57 2025 by rpki-client