Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/-SAW2ZzIgAxadYcQirQA62uO3FA.roa
File: -SAW2ZzIgAxadYcQirQA62uO3FA.roa (raw, json)
Hash identifier: 9zxYZQsP2m40FJo5K6ZyK5dnHXKVid/MVsqMNQo2uIE=
Subject key identifier: F9:20:16:D9:9C:C8:80:0C:5A:75:87:10:8A:B4:00:EB:6B:8E:DC:50
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E21
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/-SAW2ZzIgAxadYcQirQA62uO3FA.roa
Signing time: Fri 01 Sep 2023 08:49:19 +0000
ROA not before: Fri 01 Sep 2023 08:49:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 121.254.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3617 (0xe21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F92016D99CC8800C5A7587108AB400EB6B8EDC50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:cd:ca:2c:97:85:05:e2:d2:2e:cb:a6:4d:
2a:96:34:0c:6d:e1:06:62:af:44:be:ef:b9:ab:27:
92:c0:2e:15:61:da:bd:09:81:79:04:4a:2d:60:2d:
0e:eb:b1:c8:c4:0c:2e:16:81:f5:c8:75:7f:74:1e:
1b:de:88:a5:b0:da:c2:e9:3a:3c:4a:b5:5a:d5:c6:
b1:c5:41:6a:75:20:0e:ac:8c:3a:1e:0d:ba:16:94:
af:05:c9:79:e9:08:8e:15:46:9e:9a:e0:e1:ec:9e:
88:23:93:f6:6f:1f:a0:48:ca:40:5c:9b:9c:35:1e:
ef:57:01:6a:49:c4:5e:09:a5:9a:44:f4:7f:af:c0:
94:dd:91:e6:4e:a8:61:86:0a:56:4f:e9:27:53:3c:
a8:bf:e1:97:cb:20:f1:92:8c:a7:a9:ff:fc:a9:4e:
d5:b2:aa:62:ef:ef:7d:56:c3:8d:41:18:b2:7a:f8:
c6:00:6f:61:59:64:39:69:0b:2f:40:11:12:58:2e:
75:a4:fd:2b:3a:b6:7b:8e:35:e1:c9:20:ae:6c:c1:
e6:2d:8f:55:8d:38:7e:b2:8d:63:6f:ca:5c:53:31:
f5:25:dd:06:42:7b:f3:d3:aa:af:e2:ff:3c:5f:5d:
e2:33:86:63:96:28:fc:57:4b:ec:08:49:24:6c:a4:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:20:16:D9:9C:C8:80:0C:5A:75:87:10:8A:B4:00:EB:6B:8E:DC:50
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/-SAW2ZzIgAxadYcQirQA62uO3FA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.104.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:cd:cc:75:8e:cc:5e:db:bd:05:e1:97:7d:d4:41:c3:a1:11:
27:73:20:8e:e5:01:87:8d:77:67:d2:45:ce:d0:0c:77:0d:67:
8c:60:d7:3a:36:b4:86:ed:cd:ac:77:69:67:ec:93:f8:03:33:
48:96:87:8b:9d:b7:dc:78:7e:dc:7b:98:cc:26:6e:a2:81:b0:
6d:57:0c:f6:50:2c:93:ca:5b:ed:81:f2:db:fa:2d:b9:89:9a:
d8:82:da:34:e7:89:9b:20:41:c5:2f:95:a0:16:fd:e7:fe:57:
3a:13:59:fd:b3:ad:60:cc:a8:a7:c8:c1:b8:21:80:67:5b:ee:
fb:7d:5f:81:d9:25:4c:3e:4b:3c:3c:d4:e0:c1:6f:ae:3b:9c:
52:1c:3a:ab:4a:d4:54:70:12:13:57:da:a0:95:ec:36:78:f7:
21:e5:27:ea:d9:12:74:58:96:55:b5:03:47:2c:b7:f2:bf:b6:
21:59:f8:87:2e:2b:d8:27:ac:26:4e:ad:59:d4:5e:04:08:7e:
c0:c7:34:73:b4:be:11:9c:65:17:43:a0:fa:05:03:b0:ee:2d:
75:20:6d:48:58:18:ac:ff:4f:35:db:07:48:09:86:8e:fd:a0:
19:af:3e:15:f1:c3:6e:f8:db:9c:62:fd:2b:ee:6c:91:2a:25:
ef:78:b2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:52 2025 by rpki-client