Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/3KT7Pmd5aOXgvY6ZIkfRGl7wILU.roa
File: 3KT7Pmd5aOXgvY6ZIkfRGl7wILU.roa (raw, json)
Hash identifier: eRiZlBYTdeIuPR/OyCBSVt6B67CA4vz/eQEvTQdCutI=
Subject key identifier: DC:A4:FB:3E:67:79:68:E5:E0:BD:8E:99:22:47:D1:1A:5E:F0:20:B5
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0AE0
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/3KT7Pmd5aOXgvY6ZIkfRGl7wILU.roa
Signing time: Thu 16 Dec 2021 06:32:49 +0000
ROA not before: Thu 16 Dec 2021 06:32:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17809
IP address blocks: 113.61.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2784 (0xae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 16 06:32:49 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DCA4FB3E677968E5E0BD8E992247D11A5EF020B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:87:46:4b:57:39:a5:b8:2e:5c:16:9d:fc:
ba:03:4f:b2:d8:5a:f8:a5:cc:3c:d2:74:ee:27:b7:
b5:34:7a:e7:53:fe:02:e5:1b:95:0d:36:2a:e9:e9:
cd:2c:90:07:35:8f:63:22:46:36:34:c4:2a:bc:87:
9f:7d:86:ea:2e:f5:dc:48:af:ef:06:b1:0b:c6:4b:
74:9d:45:68:50:29:02:a1:e6:e3:15:05:e4:f6:46:
54:64:d8:ca:df:e8:c6:47:17:30:51:f7:2f:72:0c:
e2:9d:d9:ce:83:db:d9:a3:64:08:2e:fb:08:99:32:
02:a2:e7:fe:75:bf:9d:7d:f9:d9:5b:e3:e0:2c:54:
81:83:c9:9c:75:48:19:97:9a:84:13:2a:6b:da:5d:
9a:c1:fa:f2:d3:5d:a1:33:d1:21:3a:89:83:7c:14:
d6:65:9f:dd:b3:84:30:e1:15:07:8f:f4:fa:b4:8c:
c3:f5:14:13:ed:59:02:c9:f5:e3:ae:80:80:9f:a2:
ed:35:26:9b:53:1f:ed:53:79:96:ca:24:a5:cc:ef:
f9:19:73:ee:f3:c8:1f:ea:01:a5:df:2f:15:76:29:
67:bf:8a:3f:ce:7b:a5:e1:e9:df:9f:52:ce:97:8a:
29:6b:1b:1b:e7:5c:87:f9:5e:8a:6e:5b:9c:a1:95:
d3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A4:FB:3E:67:79:68:E5:E0:BD:8E:99:22:47:D1:1A:5E:F0:20:B5
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/3KT7Pmd5aOXgvY6ZIkfRGl7wILU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.128.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:dc:23:19:16:3b:08:18:b5:13:ea:35:b1:31:db:46:bf:9b:
b3:01:f2:a9:63:ea:a6:73:b7:eb:a0:52:6d:21:81:6f:07:97:
48:79:43:d5:26:01:c5:1c:3b:8d:d6:4e:b1:dd:cc:a9:dc:79:
80:29:60:ea:ab:fe:11:0a:69:dd:f5:81:e0:5e:4d:63:50:3a:
6b:ff:0d:f6:ee:fe:03:78:74:e4:09:68:e4:c4:62:d6:68:30:
08:a2:7f:7a:83:f0:d3:80:e7:87:f5:36:85:b2:22:8f:95:1a:
6f:04:b6:d8:95:16:f5:e5:69:71:95:d6:df:7f:bf:88:6b:05:
67:7f:ca:ba:f2:5d:a1:0f:e2:c0:d3:7c:10:1d:8e:b8:f2:4a:
b1:65:a4:47:5c:f7:0c:1b:95:ef:92:76:43:26:dd:ff:0c:3f:
1c:08:72:e0:08:54:80:3e:c1:5b:97:32:d0:7c:10:01:78:d6:
46:9c:42:e5:cb:4c:c7:3d:c5:2b:eb:b0:47:56:66:bc:e4:b8:
9e:6a:d1:a5:be:ca:1f:3b:15:0c:b4:d1:2e:93:7d:c7:ab:3f:
9d:d5:a7:fc:3f:00:67:5a:34:c8:fe:e3:05:6a:ce:7d:4d:3e:
6f:40:c2:9e:73:86:65:73:63:f2:c4:53:ce:7c:68:7b:4f:6c:
12:fe:0f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org