Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/5hwPqwfAKGPXfFHTgMAihoaU8zo.roa
File: 5hwPqwfAKGPXfFHTgMAihoaU8zo.roa (raw, json)
Hash identifier: d5KrYFDQUVMeQSBANvBkoCt+Ve50BhBlq+4/xCWyVvc=
Subject key identifier: E6:1C:0F:AB:07:C0:28:63:D7:7C:51:D3:80:C0:22:86:86:94:F3:3A
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0964
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/5hwPqwfAKGPXfFHTgMAihoaU8zo.roa
Signing time: Thu 21 Jan 2021 10:18:29 +0000
ROA not before: Thu 21 Jan 2021 10:18:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17809
IP address blocks: 113.61.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2404 (0x964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Jan 21 10:18:29 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E61C0FAB07C02863D77C51D380C022868694F33A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:0e:82:0c:f0:d3:2a:b1:9e:29:2f:e0:e6:
42:14:9e:8a:6e:cd:56:9c:5d:db:b0:98:43:98:2a:
d2:10:a5:22:44:a1:71:19:ba:e4:26:ee:2c:09:e8:
58:d8:fd:b5:ba:36:40:65:54:21:02:ac:6c:b8:aa:
2b:7a:96:ba:51:e2:1c:58:8c:dd:c2:1d:93:63:54:
c3:84:00:e6:6e:66:b3:1d:ff:73:de:6a:07:46:43:
65:38:7e:85:3d:d6:d4:33:78:f2:2b:a5:5e:6c:d4:
e8:04:f5:38:6b:08:6a:51:cf:0c:7d:d1:99:7e:42:
5a:7e:db:c9:c4:94:3c:53:ad:50:db:73:11:9a:ac:
02:53:2b:0a:4f:a6:4d:72:5d:58:13:40:e8:b4:65:
55:5b:d9:3b:6c:66:b0:6e:f4:6e:6a:ec:7d:50:7d:
09:e7:41:40:73:2a:f5:1f:79:a9:46:99:c5:6f:80:
a8:23:df:21:8a:52:d1:08:17:92:ba:0f:6b:49:10:
c3:76:a4:41:85:4c:bf:11:40:6d:b0:64:05:d5:fb:
02:f6:d6:8f:49:2f:2b:16:60:cf:33:a1:0f:9c:8e:
e5:45:e2:1a:27:c3:86:d0:ea:20:7e:69:6d:00:cb:
c6:a4:50:ff:49:22:0a:8d:a1:c0:5a:23:f8:f2:70:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1C:0F:AB:07:C0:28:63:D7:7C:51:D3:80:C0:22:86:86:94:F3:3A
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/5hwPqwfAKGPXfFHTgMAihoaU8zo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4f:34:97:06:b6:f4:3d:31:30:4c:6a:95:c9:a7:be:a7:61:26:
d2:fb:43:90:81:b4:26:d8:30:ab:cc:46:af:8f:be:a1:03:51:
f8:44:c3:b1:07:79:0a:ff:d8:85:33:09:ef:7c:18:d3:61:6f:
33:a7:52:f7:5d:2a:45:57:51:56:d1:3c:55:52:22:06:67:9c:
16:39:4b:04:2f:ac:ce:04:44:b2:42:73:fb:72:54:5b:ec:0f:
66:0d:39:81:db:bd:81:8b:72:ab:cc:46:67:18:97:b3:f8:83:
a6:98:89:52:7a:86:ad:72:34:2d:c3:3c:52:9a:04:c0:57:09:
17:03:49:43:01:4e:70:3a:58:78:fb:61:39:15:26:36:6c:17:
f9:9d:48:82:63:d5:17:4a:26:df:b0:a4:f4:ce:02:94:32:3e:
de:3e:dd:5a:1b:29:25:d8:b9:cd:37:72:cf:7c:97:26:68:37:
c4:76:25:b7:50:18:96:79:ad:a8:5f:e5:6d:72:1e:2e:49:ca:
51:7d:bd:ca:b2:84:3b:f9:39:3e:1c:12:6b:cd:aa:28:32:68:
ad:35:99:62:5d:25:15:77:c8:24:8f:5b:11:e1:a4:ac:05:cb:
bd:72:0d:0a:00:56:57:e2:b7:b1:60:ea:1c:d0:64:74:1e:6a:
79:f9:99:4b
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMTAxMjEx
MDE4MjlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEU2MUMwRkFCMDdDMDI4
NjNENzdDNTFEMzgwQzAyMjg2ODY5NEYzM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxhQ6CDPDTKrGeKS/g5kIUnopuzVacXduwmEOYKtIQpSJEoXEZ
uuQm7iwJ6FjY/bW6NkBlVCECrGy4qit6lrpR4hxYjN3CHZNjVMOEAOZuZrMd/3Pe
agdGQ2U4foU91tQzePIrpV5s1OgE9ThrCGpRzwx90Zl+Qlp+28nElDxTrVDbcxGa
rAJTKwpPpk1yXVgTQOi0ZVVb2TtsZrBu9G5q7H1QfQnnQUBzKvUfealGmcVvgKgj
3yGKUtEIF5K6D2tJEMN2pEGFTL8RQG2wZAXV+wL21o9JLysWYM8zoQ+cjuVF4hon
w4bQ6iB+aW0Ay8akUP9JIgqNocBaI/jycNJLAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU5hwPqwfAKGPXfFHTgMAihoaU8zowHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvNWh3UHF3ZkFLR1BYZkZIVGdNQWlo
b2FVOHpvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3E9gDAN
BgkqhkiG9w0BAQsFAAOCAQEATzSXBrb0PTEwTGqVyae+p2Em0vtDkIG0Jtgwq8xG
r4++oQNR+ETDsQd5Cv/YhTMJ73wY02FvM6dS910qRVdRVtE8VVIiBmecFjlLBC+s
zgREskJz+3JUW+wPZg05gdu9gYtyq8xGZxiXs/iDppiJUnqGrXI0LcM8UpoEwFcJ
FwNJQwFOcDpYePthORUmNmwX+Z1IgmPVF0om37Ck9M4ClDI+3j7dWhspJdi5zTdy
z3yXJmg3xHYlt1AYlnmtqF/lbXIeLknKUX29yrKEO/k5PhwSa82qKDJorTWZYl0l
FXfIJI9bEeGkrAXLvXINCgBWV+K3sWDqHNBkdB5qefmZSw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org