Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/44VMYn179f2dRO_oiOPg3Hd-zQc.roa
File: 44VMYn179f2dRO_oiOPg3Hd-zQc.roa (raw, json)
Hash identifier: NkeOMYmLUao4/otxcxJPDZd/mMzB663qVqpttC1BBfE=
Subject key identifier: E3:85:4C:62:7D:7B:F5:FD:9D:44:EF:E8:88:E3:E0:DC:77:7E:CD:07
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0B04
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/44VMYn179f2dRO_oiOPg3Hd-zQc.roa
Signing time: Thu 16 Dec 2021 06:40:14 +0000
ROA not before: Thu 16 Dec 2021 06:40:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17809
IP address blocks: 121.254.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2820 (0xb04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 16 06:40:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E3854C627D7BF5FD9D44EFE888E3E0DC777ECD07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:36:03:f9:9c:ae:f6:23:b6:a7:34:d4:f0:
5c:7a:9e:d7:b9:37:dd:98:76:74:5c:60:77:79:3b:
0e:71:af:a9:21:34:4c:0e:33:49:70:33:64:69:58:
85:d4:37:6c:c9:5f:a2:04:3b:6d:1c:a5:92:83:15:
58:c9:d9:1e:0d:28:76:67:d5:05:08:f2:db:26:38:
df:d7:7f:a1:55:e9:f6:ef:ef:8e:e5:6b:24:ab:56:
17:d4:f8:3e:47:93:f7:44:7b:95:ec:16:75:f6:b4:
c8:4e:6e:9a:3f:ae:8b:0b:90:4a:0d:ce:42:c3:af:
c4:75:f4:22:d1:be:90:76:2a:ae:06:e1:d3:33:8d:
05:ea:3d:a0:22:4c:61:71:d2:73:1f:0e:ed:c1:45:
a8:bb:58:56:37:cd:7c:ca:72:42:86:72:b4:4e:db:
00:bd:17:0c:fb:31:7b:6c:0a:24:90:81:66:de:b4:
d6:14:35:e6:a0:af:7d:fb:c4:73:d5:34:1e:07:35:
b5:a6:b2:62:21:60:79:e0:dd:20:7c:b5:98:3d:3c:
56:b6:e0:17:76:cf:a2:b7:70:be:e1:18:79:7c:f3:
9b:ab:b2:ca:b7:32:fa:ce:17:da:fc:03:4b:84:ec:
ab:92:2b:4c:4b:a0:4e:cf:da:90:8b:0a:65:6c:b5:
be:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:85:4C:62:7D:7B:F5:FD:9D:44:EF:E8:88:E3:E0:DC:77:7E:CD:07
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/44VMYn179f2dRO_oiOPg3Hd-zQc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.112.0/21
Signature Algorithm: sha256WithRSAEncryption
19:71:c2:85:7b:33:0f:20:65:c9:ae:db:cc:8f:e1:5b:17:3a:
cb:73:60:1e:dd:1b:5f:55:61:d0:37:0e:30:3f:46:50:cf:ea:
6c:34:e3:c5:d0:14:62:e4:2c:1b:54:be:f4:ea:ad:b8:e6:76:
df:2b:3d:ef:31:3e:76:9a:84:d6:a9:b0:90:6b:42:2b:89:0a:
52:92:80:47:b9:41:34:f1:c3:6d:58:d8:89:3f:10:08:4f:97:
d4:5c:1b:12:7c:c1:b0:e1:09:f5:57:82:0d:c2:d0:75:5c:8c:
65:4a:56:73:99:bb:38:e7:c8:8e:65:6d:46:63:f8:b3:ba:1e:
fb:75:91:02:21:f6:8c:b2:3b:0c:3c:0c:07:b3:be:15:6d:bc:
32:98:c8:a2:fb:a0:15:7a:0b:c5:ca:e7:60:ec:a7:10:0f:8a:
38:81:03:58:07:25:d5:0a:e2:5a:ac:9b:c3:61:b2:32:db:bf:
2a:7c:ca:6b:a6:66:3a:d5:86:a1:e5:64:a3:c7:73:bf:09:b9:
2b:07:d9:7b:b0:9f:6c:43:39:ae:3a:d0:bf:3d:cb:6c:cb:b1:
17:ad:e5:4b:bf:57:16:64:53:ef:40:d5:db:f6:a4:da:0b:6c:
f0:09:28:4f:27:e3:16:77:30:82:2d:54:ef:a8:35:b8:07:48:
80:56:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org