Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/-3oATlpFrCsiWWVnwFwddWo9H7w.roa
File: -3oATlpFrCsiWWVnwFwddWo9H7w.roa (raw, json)
Hash identifier: d9rxKAH8V3zXNUaJbgSidH+ntlKaxQ0UOCN/REbmq14=
Subject key identifier: FB:7A:00:4E:5A:45:AC:2B:22:59:65:67:C0:5C:1D:75:6A:3D:1F:BC
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0AEC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/-3oATlpFrCsiWWVnwFwddWo9H7w.roa
Signing time: Thu 16 Dec 2021 06:34:39 +0000
ROA not before: Thu 16 Dec 2021 06:34:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17809
IP address blocks: 113.61.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2796 (0xaec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 16 06:34:39 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FB7A004E5A45AC2B22596567C05C1D756A3D1FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:69:94:aa:3d:4b:70:03:51:52:89:56:11:
42:85:09:37:79:5f:2c:cc:ff:df:e0:50:9e:4c:36:
79:88:8f:d4:07:bd:64:51:8a:82:39:6c:5c:4a:c8:
b9:1f:3b:12:9e:d3:14:ef:90:6b:7e:85:d1:ea:76:
aa:9a:b4:31:73:ac:00:1f:32:42:33:ad:5d:e6:d3:
4d:d9:f8:d0:3d:1b:7b:c8:3e:1b:50:49:4e:c3:6e:
b3:c8:01:43:77:61:ad:4f:12:56:65:ac:52:c6:f9:
d7:ac:d3:c4:13:0b:8a:b3:7a:92:bc:89:b0:df:30:
98:24:a4:b6:81:e3:ab:64:58:8e:2c:f0:13:7a:73:
a8:d9:3b:4d:06:db:5e:f0:64:bc:90:a3:37:a4:45:
0c:41:87:b7:26:ec:83:b3:c0:b4:7b:8b:f0:2c:a6:
a4:56:9b:38:b8:5e:bf:43:0f:61:bd:9c:84:07:52:
2c:14:11:22:0c:24:54:55:94:32:f9:9e:e8:b2:8f:
25:cc:e7:f3:90:47:02:02:db:2e:a9:ce:2d:2d:48:
4c:b0:8a:e4:56:e2:c1:ee:f8:b9:60:c4:ba:71:05:
3c:c7:07:29:ca:5d:70:92:1c:d8:69:f7:f8:6f:21:
6a:b4:9c:d0:ea:61:88:45:d8:85:49:15:dd:f9:c8:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7A:00:4E:5A:45:AC:2B:22:59:65:67:C0:5C:1D:75:6A:3D:1F:BC
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/-3oATlpFrCsiWWVnwFwddWo9H7w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.192.0/19
Signature Algorithm: sha256WithRSAEncryption
64:57:50:61:a4:74:a2:22:64:5d:ee:b1:a7:5d:8e:55:df:60:
a4:e0:e4:44:58:c8:d0:e1:6a:08:a1:06:25:8a:c2:a6:3a:aa:
80:9a:9e:d4:27:45:2e:51:bd:8a:b1:04:b1:75:dd:01:99:20:
a9:90:67:cd:21:19:f1:f2:2b:fb:da:47:12:ca:78:94:d3:2b:
53:6a:09:7a:94:d2:34:f2:57:f1:7d:90:14:11:01:54:c9:9f:
00:71:90:19:5a:38:9e:53:49:5a:56:83:ee:87:cc:83:71:8b:
3e:34:2d:bb:b4:f5:1a:c2:3a:ab:3b:46:49:09:69:92:5a:e4:
b8:87:13:ac:4d:af:9d:d8:6e:40:b6:ab:ef:9e:f1:67:89:1d:
4c:f7:ff:b5:53:38:04:0c:64:4f:85:04:bd:4b:03:b9:af:af:
26:df:f4:cf:37:0b:e3:1e:09:f1:2b:7f:33:c6:7f:d8:f8:c2:
06:f5:6a:02:47:a3:bb:15:b0:28:61:a1:7e:69:2f:8b:d1:4a:
09:f1:08:57:31:b3:b6:55:02:9c:1f:4f:4b:86:65:ac:af:a3:
a1:fe:4b:f9:20:bf:92:c9:fc:4e:37:1d:97:eb:e5:40:44:2c:
27:c4:75:06:57:68:31:ba:48:51:cc:7d:ea:9f:96:42:fc:78:
34:a5:62:1e
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMTEyMTYw
NjM0MzlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEZCN0EwMDRFNUE0NUFD
MkIyMjU5NjU2N0MwNUMxRDc1NkEzRDFGQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjtGmUqj1LcANRUolWEUKFCTd5XyzM/9/gUJ5MNnmIj9QHvWRR
ioI5bFxKyLkfOxKe0xTvkGt+hdHqdqqatDFzrAAfMkIzrV3m003Z+NA9G3vIPhtQ
SU7DbrPIAUN3Ya1PElZlrFLG+des08QTC4qzepK8ibDfMJgkpLaB46tkWI4s8BN6
c6jZO00G217wZLyQozekRQxBh7cm7IOzwLR7i/AspqRWmzi4Xr9DD2G9nIQHUiwU
ESIMJFRVlDL5nuiyjyXM5/OQRwIC2y6pzi0tSEywiuRW4sHu+LlgxLpxBTzHBynK
XXCSHNhp9/hvIWq0nNDqYYhF2IVJFd35yMM1AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU+3oATlpFrCsiWWVnwFwddWo9H7wwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvLTNvQVRscEZyQ3NpV1dWbndGd2Rk
V285SDd3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXE9wDAN
BgkqhkiG9w0BAQsFAAOCAQEAZFdQYaR0oiJkXe6xp12OVd9gpODkRFjI0OFqCKEG
JYrCpjqqgJqe1CdFLlG9irEEsXXdAZkgqZBnzSEZ8fIr+9pHEsp4lNMrU2oJepTS
NPJX8X2QFBEBVMmfAHGQGVo4nlNJWlaD7ofMg3GLPjQtu7T1GsI6qztGSQlpklrk
uIcTrE2vndhuQLar757xZ4kdTPf/tVM4BAxkT4UEvUsDua+vJt/0zzcL4x4J8St/
M8Z/2PjCBvVqAkejuxWwKGGhfmkvi9FKCfEIVzGztlUCnB9PS4ZlrK+jof5L+SC/
ksn8Tjcdl+vlQEQsJ8R1BldoMbpIUcx96p+WQvx4NKViHg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org