Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/tksm9xEiv5it6TgLcP2Z8Oqd97Q.roa
File: tksm9xEiv5it6TgLcP2Z8Oqd97Q.roa (raw, json)
Hash identifier: 7BnqgwQm9zabfm3gMxwFTYCRhX/iA5jjtQTIJzwsirA=
Subject key identifier: B6:4B:26:F7:11:22:BF:98:AD:E9:38:0B:70:FD:99:F0:EA:9D:F7:B4
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 09F1
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/tksm9xEiv5it6TgLcP2Z8Oqd97Q.roa
Signing time: Wed 29 Sep 2021 02:40:36 +0000
ROA not before: Wed 29 Sep 2021 02:40:36 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18042
IP address blocks: 115.43.0.0/16 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2545 (0x9f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 29 02:40:36 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B64B26F71122BF98ADE9380B70FD99F0EA9DF7B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:a8:02:3d:de:a2:e9:7f:9e:bf:80:88:ae:
cb:95:7d:e4:84:e9:af:ea:6b:71:6e:d8:36:b2:ff:
4d:65:ba:90:66:92:f5:1e:d2:b2:bf:01:1f:ae:18:
16:b3:d8:c4:86:27:40:66:02:02:52:9f:ed:40:46:
96:20:5d:69:19:83:54:68:c8:56:4c:f4:bf:e6:94:
84:4d:7d:c2:60:d7:b3:fb:c5:f8:03:73:7d:5b:18:
b2:29:9b:e3:80:8f:76:f0:ee:86:20:1f:5b:71:6d:
79:43:d2:56:fa:c9:ba:9e:06:7e:91:cf:d5:28:1a:
f5:b9:51:52:00:90:34:d8:7a:5c:cc:ea:85:2e:b4:
59:06:88:97:03:83:27:0a:2d:ae:99:80:8a:78:3f:
12:ea:70:98:4f:ac:83:02:3f:01:2f:3b:67:f3:8e:
a6:4a:85:5b:b9:69:f3:63:cf:cc:c3:c1:bd:ff:c4:
df:a3:31:f9:0c:02:af:09:6f:d8:4c:03:b4:4d:70:
02:90:98:22:c5:c3:a7:09:f6:44:3c:b7:16:11:15:
e1:b1:6b:d2:17:ac:81:19:a6:8f:85:4a:da:05:81:
89:e4:24:9b:dd:47:8b:16:1c:93:38:80:62:b6:5b:
c1:ec:29:8e:b7:11:e0:8c:6b:18:d2:b4:06:c7:57:
f4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4B:26:F7:11:22:BF:98:AD:E9:38:0B:70:FD:99:F0:EA:9D:F7:B4
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/tksm9xEiv5it6TgLcP2Z8Oqd97Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:fb:0f:4d:f4:05:07:10:03:80:07:43:ee:14:2d:fa:0e:01:
98:ea:bc:e9:14:2c:7f:62:cb:16:fc:0b:87:99:5e:b9:4a:19:
02:39:49:5c:f7:a4:89:5a:d1:01:4f:d6:2e:2f:01:64:1c:16:
e7:8d:85:8b:20:e5:a8:a2:20:f5:46:86:e9:0a:0a:51:7b:d7:
1e:a4:40:f9:e2:8b:c1:eb:90:da:d5:5a:a6:87:37:8a:c7:63:
75:61:62:cd:4f:26:58:59:5c:52:19:8c:c5:22:2b:cc:cf:35:
fd:e0:ef:27:4b:1b:88:c0:90:52:42:c7:cf:17:18:da:3d:28:
e8:53:9c:8b:8a:88:38:52:8c:ad:51:0b:ff:e2:79:3e:5c:f9:
94:c9:0b:ac:02:e3:2e:3b:cb:c5:76:39:df:0a:1e:e2:bc:0e:
a1:62:84:da:df:43:dd:77:85:50:32:ce:4a:a3:db:ff:4f:2a:
0d:16:43:e3:dd:1b:b0:7e:58:fd:4b:16:da:08:d2:f2:8b:a6:
42:93:08:53:1a:95:13:47:40:6a:ad:84:71:91:63:23:62:6d:
48:81:c0:fb:c2:7a:a9:05:12:bb:82:07:46:b0:ab:94:4d:41:
ed:6a:28:51:c8:4f:fe:00:be:eb:ad:4c:d5:02:77:0e:6e:b3:
a7:12:0c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:40 2025 by rpki-client