Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/2yVQ5VqE_Dh5-bgcTeW6EFdECl4.roa
File: 2yVQ5VqE_Dh5-bgcTeW6EFdECl4.roa (raw, json)
Hash identifier: M9Cf1sEnHAS+KuobryuWNYLd29/V4RpZXYLRItVedTY=
Subject key identifier: DB:25:50:E5:5A:84:FC:38:79:F9:B8:1C:4D:E5:BA:10:57:44:0A:5E
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D32
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/2yVQ5VqE_Dh5-bgcTeW6EFdECl4.roa
Signing time: Wed 26 Apr 2023 10:31:39 +0000
ROA not before: Wed 26 Apr 2023 10:31:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 203.222.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3378 (0xd32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:39 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DB2550E55A84FC3879F9B81C4DE5BA1057440A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:0f:af:c9:e9:7d:fe:2b:07:23:3a:ca:1a:
00:94:18:ac:3e:21:f3:fc:88:38:8f:aa:2a:d8:71:
70:9e:1c:df:06:7d:98:8b:f2:62:a2:df:3b:84:fa:
a0:6b:46:b9:c5:fa:8f:3c:5e:1a:bc:f7:7e:b8:15:
ec:86:23:84:fc:2e:96:43:9b:b5:34:08:ed:59:c2:
7b:09:20:05:77:30:88:ac:7c:80:42:0c:3d:99:35:
fa:5c:e3:f0:fb:3a:09:8c:69:cd:a8:ae:1a:02:65:
f0:23:7e:f7:a2:6e:74:6f:64:3f:12:32:9d:bd:0f:
ae:34:27:a5:26:02:0d:4a:bd:03:43:4c:d9:01:45:
c2:bd:6a:cd:80:16:b9:5b:a6:5e:47:8d:75:1f:8d:
9d:ca:51:24:f4:47:e3:cd:9e:74:77:b9:41:f0:7e:
f0:7b:b0:d6:80:8c:83:cf:67:5f:2b:57:83:17:78:
42:57:72:50:10:14:3f:d2:f7:02:34:dc:b3:90:95:
51:e7:78:3c:c6:b4:b0:af:fe:e5:d8:64:c0:d6:eb:
fa:cc:4b:99:87:bd:e1:ee:9e:1c:1b:11:c8:8b:ee:
b7:a0:8b:a4:d1:bd:3b:ce:bb:01:84:e9:15:bf:14:
0f:2d:fb:59:a0:ce:fd:c5:7f:ef:24:fb:ff:41:49:
99:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:25:50:E5:5A:84:FC:38:79:F9:B8:1C:4D:E5:BA:10:57:44:0A:5E
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/2yVQ5VqE_Dh5-bgcTeW6EFdECl4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.28.0/22
Signature Algorithm: sha256WithRSAEncryption
12:7d:8e:93:37:bb:50:84:c5:58:73:07:9b:88:6d:d3:19:8d:
08:c3:a3:42:2e:05:ec:70:27:98:c0:40:08:94:f0:fc:24:ea:
6a:eb:d6:9a:14:7b:3b:20:15:64:ed:da:1b:66:1e:cb:23:4e:
a2:65:c4:f3:3e:0a:90:74:aa:57:b4:45:c2:ff:0b:7f:96:bf:
4d:cd:ac:9a:54:e3:e6:51:14:db:53:39:a6:2f:05:2a:90:38:
f8:1b:e8:7f:bc:4a:14:5b:a4:4c:27:0b:5a:1f:d8:93:e0:80:
1c:70:6f:13:88:12:53:e3:c6:9e:f8:fd:3c:37:f6:ab:01:31:
5b:24:fa:81:d1:c6:93:87:d0:a6:0f:23:61:c6:51:ca:77:71:
aa:89:bb:46:b9:b0:17:74:e8:3d:e7:96:bf:72:1b:69:c3:93:
b7:7b:12:06:f6:20:bb:da:bc:9c:20:1b:60:93:90:b1:2d:80:
7c:d0:14:fd:56:e8:7b:58:bf:32:19:18:88:ff:d1:2a:c2:fb:
49:a4:2f:a5:52:47:97:d1:3a:43:66:87:c5:1f:eb:c7:de:2f:
af:fe:a0:c4:22:cc:56:c5:50:92:59:82:f7:40:a8:31:63:10:
7d:d8:dd:09:be:f5:4a:22:60:78:62:09:77:e2:67:8f:11:8c:
d5:0b:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org