Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/2DF2tfVhjL_xiU9voYk0zbcYBs0.roa
File: 2DF2tfVhjL_xiU9voYk0zbcYBs0.roa (raw, json)
Hash identifier: 9a3nOPoB2T8p6ITStr4mswwZ4g9mANKcC5+e5uJBpAE=
Subject key identifier: D8:31:76:B5:F5:61:8C:BF:F1:89:4F:6F:A1:89:34:CD:B7:18:06:CD
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 08DE
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/2DF2tfVhjL_xiU9voYk0zbcYBs0.roa
Signing time: Wed 18 Nov 2020 08:01:23 +0000
ROA not before: Wed 18 Nov 2020 08:01:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 119.15.200.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2270 (0x8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Nov 18 08:01:23 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D83176B5F5618CBFF1894F6FA18934CDB71806CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bb:ca:5d:93:6d:cb:13:c8:c5:fd:d2:3c:fc:
bd:68:0a:a9:ac:0c:12:a5:18:78:9b:7f:00:94:90:
d0:64:27:be:65:c1:6a:57:3b:09:f1:2e:86:d4:c6:
de:61:53:ff:74:f4:b9:77:45:fb:6c:9d:c3:8a:f0:
1e:aa:d6:66:2a:49:77:9f:8b:12:8f:cc:b8:ea:fe:
77:37:df:c5:23:20:82:70:ea:92:53:3b:92:12:07:
25:cc:7c:9c:6c:f5:74:6d:73:94:99:0f:b2:c4:8f:
99:98:73:7c:8d:af:e6:f0:37:54:df:97:e9:c6:e9:
22:60:75:e2:30:19:05:73:64:6e:db:d7:4b:0c:c9:
4f:1b:ca:a6:41:32:c9:5c:ad:b6:21:16:7d:1d:95:
b3:91:bb:7d:26:68:a7:3a:04:0e:fe:5a:0c:84:50:
1e:d5:f3:ed:83:cf:a7:0c:d4:a9:75:a4:d1:20:a5:
8e:e7:fd:ef:a9:b6:a3:76:37:5d:9f:13:5c:2c:bd:
45:6b:12:6f:20:bf:ac:e8:f7:a0:06:a8:9d:63:ee:
53:51:fd:85:27:cc:cb:17:a3:8b:0c:82:f0:39:4f:
17:1b:cc:67:0f:23:69:0c:15:6d:8d:02:3a:88:77:
fa:b8:ac:e3:88:d0:6a:9e:20:e0:59:0a:92:2b:98:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:31:76:B5:F5:61:8C:BF:F1:89:4F:6F:A1:89:34:CD:B7:18:06:CD
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/2DF2tfVhjL_xiU9voYk0zbcYBs0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.200.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:15:ca:b1:cf:a9:38:f8:c3:52:de:0b:03:f3:c1:61:db:c4:
ba:8e:c4:4a:2a:b1:19:89:8c:0b:27:ed:f1:ec:5a:62:d5:38:
94:44:46:13:a4:d3:13:69:e3:7d:67:f7:b6:5d:80:40:f1:80:
f9:a5:05:14:06:5f:cb:af:0c:45:c2:ca:44:30:86:cc:41:b0:
15:83:df:77:76:02:eb:07:87:8d:43:b2:4c:c1:65:67:8b:ab:
11:02:55:8a:c4:dc:6c:a2:26:f4:59:bf:5d:db:58:0d:64:9c:
c2:08:31:24:ad:cd:3c:d4:c7:5d:2c:71:f4:ab:12:19:3d:b3:
44:ea:e6:54:1d:5f:a0:be:53:51:b4:fa:a9:fa:f7:2c:47:b8:
6d:17:3f:45:f5:f8:fc:2c:d4:e7:92:ac:74:55:f8:cf:03:1b:
2d:38:56:94:34:8e:a9:b7:9d:7d:8f:fa:b2:e0:b3:db:70:b0:
a6:6a:f4:9e:55:9a:a0:c0:e1:b6:7f:3c:7b:e7:7c:ac:ed:ad:
23:8c:a8:a5:91:ae:d4:cb:d4:35:55:bc:48:87:8d:36:61:a5:
0b:56:08:28:8a:b7:c6:21:04:8f:17:0c:08:f2:de:9f:4b:30:
20:cc:25:17:67:91:4d:2b:5a:03:92:c9:74:ea:29:72:93:62:
e6:d1:dd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:05 2025 by rpki-client