Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/4-7Rkn8f1ulnYaU_VWevHjSsz0k.roa
File: 4-7Rkn8f1ulnYaU_VWevHjSsz0k.roa (raw, json)
Hash identifier: 36OC5S+s2E4Um9EcjS+9CZMW+J81zhpV2oW4nf02/XA=
Subject key identifier: E3:EE:D1:92:7F:1F:D6:E9:67:61:A5:3F:55:67:AF:1E:34:AC:CF:49
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/4-7Rkn8f1ulnYaU_VWevHjSsz0k.roa
Signing time: Thu 15 Sep 2022 02:37:20 +0000
ROA not before: Thu 15 Sep 2022 02:37:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 113.61.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E3EED1927F1FD6E96761A53F5567AF1E34ACCF49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:33:6a:21:5e:b3:0a:0b:0b:97:8b:30:dd:17:
fb:dc:59:99:26:d5:b2:a8:2c:93:63:57:bf:14:ed:
ad:0e:ca:f7:b6:e7:66:77:f1:67:c5:46:cb:5c:a6:
f2:63:8c:fa:9c:95:2f:fa:29:d3:7b:11:f7:58:3e:
43:4c:09:21:7d:04:eb:28:e1:ea:c3:e1:86:b7:4f:
f7:fc:0e:fc:ee:f5:f8:82:45:3d:14:22:50:82:c3:
80:ae:6c:71:89:66:dc:d5:78:10:ac:9b:6d:62:fe:
c9:f9:14:b9:8e:a7:7a:96:df:50:0c:2d:41:b8:c3:
c6:66:03:7a:60:92:4f:ae:95:9b:f9:13:3f:9e:4c:
e2:9a:96:0f:6d:31:d0:55:14:12:cc:02:b8:7d:67:
a9:88:5d:42:f2:b8:d2:c8:f7:aa:2a:bf:f0:b3:01:
f5:30:23:ed:e6:62:43:44:3e:24:05:14:77:06:45:
26:2f:52:19:7e:8e:a6:08:23:b8:1b:2f:2c:b5:39:
f0:c9:7e:07:49:15:0b:26:2c:fb:39:a9:e3:b1:df:
9d:fa:42:e8:2c:6f:9a:54:c1:b0:cf:f4:8a:68:26:
46:21:c7:c9:e2:43:83:6e:0c:08:70:70:e4:55:44:
59:96:4d:39:c9:6f:60:38:c7:0b:ff:c7:ff:23:cf:
f1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EE:D1:92:7F:1F:D6:E9:67:61:A5:3F:55:67:AF:1E:34:AC:CF:49
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/4-7Rkn8f1ulnYaU_VWevHjSsz0k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.128.0/19
Signature Algorithm: sha256WithRSAEncryption
21:68:e6:44:f6:70:4d:d5:01:20:b9:c1:99:6b:cb:6e:7a:e0:
fd:f5:5c:b2:81:06:04:54:aa:d4:2e:11:98:03:be:66:36:0d:
13:75:19:dc:d9:e2:0e:ff:63:f1:ec:1e:67:59:e8:1a:2d:4b:
9d:5b:ab:fa:c0:15:ac:ed:0b:ce:7a:01:be:01:bd:bd:ae:43:
e7:ab:31:51:8f:fc:ea:a2:c4:ab:da:e2:91:7a:8d:fc:9a:66:
39:20:c6:4d:03:6f:d2:93:b9:67:ca:45:bf:0f:6c:9b:b8:dd:
30:78:46:7e:a1:9c:67:09:c1:c0:b0:14:49:87:3c:5f:75:86:
35:f6:cf:83:83:fc:0e:77:df:f9:b8:bb:98:f2:68:ca:09:cf:
dc:13:34:9d:4f:4c:bf:84:bb:d7:35:8c:67:3e:6c:5a:a5:ee:
bf:e8:7c:a7:50:b3:90:41:b7:30:42:5f:f0:b9:c3:2a:ac:80:
a1:fa:02:d1:3f:30:ac:7d:3a:00:65:67:12:90:eb:f2:4c:d2:
4c:d1:00:86:46:1d:5c:52:a2:4b:17:e0:21:10:3e:92:38:cb:
0f:92:b1:bc:ae:67:b6:ee:58:28:b0:6b:00:aa:39:76:0d:24:
07:67:78:88:1e:a1:94:94:11:21:5c:ce:23:e3:df:e8:7d:96:
ae:c1:58:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org