Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/3YfqYmaZRpY6MILWp4zInkv7RM4.roa
File: 3YfqYmaZRpY6MILWp4zInkv7RM4.roa (raw, json)
Hash identifier: n7Az/GmFgq3c6Fq5ygPhibZkr2ltdraLQec4FCFyhPo=
Subject key identifier: DD:87:EA:62:66:99:46:96:3A:30:82:D6:A7:8C:C8:9E:4B:FB:44:CE
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0B20
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/3YfqYmaZRpY6MILWp4zInkv7RM4.roa
Signing time: Thu 16 Dec 2021 06:49:45 +0000
ROA not before: Thu 16 Dec 2021 06:49:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17809
IP address blocks: 203.222.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2848 (0xb20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 16 06:49:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DD87EA62669946963A3082D6A78CC89E4BFB44CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:27:2b:fa:22:41:6e:d7:70:d9:85:c6:86:
25:6e:ab:a3:5d:f8:7c:00:20:93:6f:96:af:ec:9c:
d2:63:86:63:f5:74:14:9e:a9:64:4d:70:dd:d6:7d:
f3:8f:07:06:c9:ae:6c:2f:68:a1:47:e0:e2:5e:d2:
63:2d:52:5b:ed:de:88:bf:c6:18:60:56:53:21:b7:
30:91:5a:48:15:c7:87:ad:bc:a2:ae:ef:5e:26:c3:
61:79:f6:77:c4:28:66:63:48:57:4f:fc:02:51:31:
66:97:6d:81:96:f5:15:fd:8c:82:39:40:3b:74:7f:
d1:32:4e:67:c9:8c:20:06:3b:9f:b8:d5:19:56:13:
99:95:7c:36:1e:1b:fc:19:9b:3b:32:fb:4b:c0:90:
8b:53:68:b4:7e:ea:f2:7c:f0:d1:d7:25:ca:d7:1c:
c0:b9:75:ea:e9:7f:b1:f6:3c:d5:a8:52:cf:a2:84:
8a:c5:dc:63:c7:13:f7:82:26:f9:0f:6f:aa:b9:82:
99:58:6e:14:3c:97:de:22:40:40:b7:9b:4f:60:9b:
a2:e0:80:3f:ab:b3:63:cc:b6:06:14:79:e2:79:bb:
54:2e:a7:db:bc:3b:01:74:c2:85:40:34:34:98:13:
6a:58:17:ec:f2:c0:5c:c5:13:b6:43:78:90:74:ae:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:87:EA:62:66:99:46:96:3A:30:82:D6:A7:8C:C8:9E:4B:FB:44:CE
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/3YfqYmaZRpY6MILWp4zInkv7RM4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.0.0/22
Signature Algorithm: sha256WithRSAEncryption
30:21:eb:44:0c:67:ae:68:09:53:10:05:48:3b:95:7a:b0:95:
1d:d9:ee:56:64:78:b0:06:ea:d7:88:62:d3:6b:2a:11:93:6c:
3a:a1:2d:8a:33:4c:a1:fb:d4:a0:a2:ac:7a:3d:de:de:2c:57:
66:a1:81:e0:12:75:5f:d3:12:31:2a:78:c1:39:61:d4:ca:66:
3e:68:ee:52:ba:cf:de:d0:8a:7d:17:3f:48:a4:95:1b:a8:dc:
56:11:70:00:ad:dd:89:12:e1:39:c1:d0:d0:9d:fe:f5:75:6a:
2e:21:77:08:65:aa:e6:ad:16:5c:a0:43:b3:2a:6b:79:1c:b6:
c0:c9:85:b3:1e:c9:6f:96:25:4b:84:62:0d:92:0b:02:c4:fe:
8f:3b:a6:df:57:24:64:7d:c5:ea:73:e5:79:fe:f8:84:50:e9:
dc:fb:bc:f5:e0:3b:b7:55:d6:e1:65:47:0e:06:51:b7:6a:1f:
a9:dd:25:68:0d:2e:df:49:c3:b3:16:13:1d:cd:93:c3:19:a5:
57:45:09:df:09:63:c1:33:a5:6c:4f:5f:02:d2:5f:1c:b0:b2:
0e:31:d3:15:22:3a:68:dc:d7:35:eb:d3:3f:1d:b5:5b:ad:c8:
85:25:2f:eb:36:a5:63:82:0f:1c:bd:9b:2e:f3:34:b9:c7:79:
23:dc:33:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org