Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/rCyiYpqbccZTw1NtHZt-KXtQX0U.roa
File: rCyiYpqbccZTw1NtHZt-KXtQX0U.roa (raw, json)
Hash identifier: wG8+WXDBnFbZAiOdp20kxco8tqI8DoRS6LyDjVPI7pI=
Subject key identifier: AC:2C:A2:62:9A:9B:71:C6:53:C3:53:6D:1D:9B:7E:29:7B:50:5F:45
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0798
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/rCyiYpqbccZTw1NtHZt-KXtQX0U.roa
Signing time: Tue 29 Sep 2020 10:04:35 +0000
ROA not before: Tue 29 Sep 2020 10:04:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 202.151.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1944 (0x798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 10:04:35 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AC2CA2629A9B71C653C3536D1D9B7E297B505F45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:d9:95:08:a4:df:d1:6f:a1:89:06:53:c6:
76:d4:a5:97:aa:97:65:79:60:62:7d:a4:b6:ed:11:
df:69:94:49:9d:c0:55:d4:1c:8f:32:f0:96:76:d0:
de:95:d1:13:19:d0:57:a1:63:38:61:eb:a1:12:f5:
7f:83:31:8d:98:64:9d:f9:32:ab:36:09:87:f9:35:
a8:05:ae:83:a8:e3:0d:ed:91:67:4d:63:27:4e:6f:
5c:a7:97:0d:42:2e:81:e6:fd:cc:6a:9f:bb:2d:8f:
e7:d4:f7:1b:00:69:d9:66:11:d6:86:48:1d:ab:81:
37:4e:74:3d:1d:cf:e3:ad:ce:6a:81:44:33:65:06:
4c:2c:1d:27:6f:29:0a:0d:14:0a:90:58:15:b3:03:
c1:7b:b9:63:19:29:ab:d3:38:6e:a6:12:98:99:51:
c4:cb:e8:86:5f:2d:8b:10:80:4e:3f:c3:a7:ad:4c:
64:c1:c2:e8:b5:43:65:a1:32:32:3c:35:2e:dd:d4:
66:4a:3f:eb:09:12:83:47:8b:77:92:58:60:89:db:
27:31:b2:1b:e9:db:bb:27:1a:91:20:56:e3:3d:48:
c6:ec:9c:0a:9c:e1:a7:2e:24:f0:2c:bd:f6:0e:0a:
4d:c5:fa:b2:71:b3:5a:57:65:96:d4:f1:ba:7c:32:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2C:A2:62:9A:9B:71:C6:53:C3:53:6D:1D:9B:7E:29:7B:50:5F:45
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/rCyiYpqbccZTw1NtHZt-KXtQX0U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.151.48.0/20
Signature Algorithm: sha256WithRSAEncryption
48:c6:28:37:03:36:df:9c:e4:f9:ce:f7:de:4e:00:e3:e3:d2:
ed:bd:eb:b2:51:88:ed:82:cb:37:5c:65:64:9e:35:e9:ee:cc:
ac:56:4e:46:0b:e4:79:0a:88:a7:dc:4f:43:55:f2:ff:3e:86:
ef:21:34:e0:af:80:a0:fd:1a:48:da:60:e7:81:37:f6:c7:b2:
92:19:36:85:ed:29:23:49:3a:95:a7:69:e9:78:bd:c2:37:6a:
be:1d:18:99:48:b4:11:ef:f8:18:e0:dc:5d:f6:3d:4e:2b:ce:
1d:68:5e:54:4f:e7:e0:3d:15:0b:4d:68:45:ae:45:7d:ef:b4:
ff:98:21:00:d6:3b:ec:22:78:01:da:04:c1:b4:ac:3f:23:4d:
dd:68:79:02:74:8c:fd:17:e7:2a:2d:66:04:3c:b1:f9:50:f9:
45:bf:89:28:f3:29:67:a1:d1:71:09:e0:e8:a5:00:45:f3:bf:
15:5c:bd:20:13:ea:85:0b:22:e4:28:fb:24:41:ac:90:98:ff:
a4:1b:5a:42:bb:29:7c:2b:8f:04:43:7c:8e:b5:cd:ae:66:2c:
ce:33:5d:89:25:4d:b0:0e:3f:e0:73:fa:7f:21:00:96:64:05:
db:63:24:08:92:5c:b1:86:6b:a4:fd:d3:31:06:8c:64:24:ff:
49:c9:f4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:16 2025 by rpki-client