Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/6YlOdwMH0Kzusu1IpmjCyQSvpwk.roa
File: 6YlOdwMH0Kzusu1IpmjCyQSvpwk.roa (raw, json)
Hash identifier: YzsTq3QuE3CJf3vw59aYz0l4qY/TnZXNDfLrd4uRiV4=
Subject key identifier: E9:89:4E:77:03:07:D0:AC:EE:B2:ED:48:A6:68:C2:C9:04:AF:A7:09
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D11
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/6YlOdwMH0Kzusu1IpmjCyQSvpwk.roa
Signing time: Wed 26 Apr 2023 10:31:30 +0000
ROA not before: Wed 26 Apr 2023 10:31:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 121.254.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3345 (0xd11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:30 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E9894E770307D0ACEEB2ED48A668C2C904AFA709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:92:90:e9:c4:12:ec:c3:c6:23:37:e8:cb:
a0:71:57:a5:cf:c1:23:43:73:4e:0a:18:ff:df:db:
35:b6:e4:95:2b:4d:f3:56:33:81:99:0d:ec:92:3f:
0c:80:14:17:09:58:41:f6:ce:8a:34:f4:66:5d:0b:
d4:2c:f0:35:65:f5:4e:ce:51:91:61:2b:0a:fe:09:
11:c0:0a:11:dc:fa:53:4d:62:35:87:25:08:ee:23:
fe:16:dd:b7:86:85:46:86:af:8f:26:dc:df:ac:da:
7d:91:7e:89:1f:ab:37:ed:36:5d:0c:30:97:3e:9c:
1d:74:fc:76:6d:1c:61:81:ff:9a:f6:f2:b6:d3:66:
0d:97:ad:ce:b7:c1:c4:11:c8:27:02:a6:20:b2:22:
74:52:c6:b7:2e:77:c6:16:20:c3:f8:d7:64:63:2c:
90:d7:2e:66:70:c3:25:89:8d:9f:19:f8:f8:58:15:
95:a7:2b:16:49:ba:93:4f:c0:1c:8e:5e:98:4e:5d:
6b:f2:1f:6d:dd:1f:2a:37:58:e7:ce:46:2f:0c:ad:
08:05:28:ef:e3:14:29:24:04:75:80:99:c2:3b:75:
01:f2:ae:66:33:25:a0:65:2c:69:0e:05:18:28:a1:
f1:f2:96:06:f2:97:b1:02:26:20:f0:7a:c4:98:df:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:89:4E:77:03:07:D0:AC:EE:B2:ED:48:A6:68:C2:C9:04:AF:A7:09
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/6YlOdwMH0Kzusu1IpmjCyQSvpwk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.64.0/18
Signature Algorithm: sha256WithRSAEncryption
72:ab:18:74:e0:37:d4:5b:10:e0:b2:e7:fd:1d:d6:3f:a2:3a:
47:d7:40:ce:dd:ad:50:81:77:55:74:f9:6b:49:1b:9d:49:c6:
ea:b6:14:bc:83:0e:26:f6:e7:79:d5:bf:b4:fd:01:d4:98:b9:
94:14:24:8b:e9:55:a7:48:b6:1f:a7:1c:de:c6:c8:d1:52:1e:
e1:fe:d9:66:97:b1:11:05:8b:15:90:b2:76:0d:21:f7:af:10:
dd:f0:69:42:80:de:ff:9d:ed:1f:d8:c4:56:ff:4f:82:7e:aa:
0b:89:06:61:6c:37:74:93:c8:74:2b:99:e0:34:d7:54:e3:cb:
e5:7a:a3:9b:29:db:ec:41:d9:00:13:fc:b4:dc:f0:af:ba:29:
6f:0c:cc:b3:d0:9e:1f:1a:9c:b5:6f:7d:23:a0:23:41:ff:a5:
aa:54:22:ba:03:29:aa:3c:08:47:28:39:98:ef:29:56:36:9f:
48:fc:eb:02:75:f9:5f:26:bb:47:07:f1:0a:8f:87:90:be:a6:
d9:6e:06:ef:ae:5f:dd:fb:fb:33:df:44:42:a4:f4:ff:85:9b:
65:94:45:e5:ef:b6:69:61:85:9a:4d:f6:6b:2c:55:68:04:11:
31:9b:5c:c9:d9:8f:29:2e:fb:18:aa:6e:74:b7:89:47:68:d9:
ed:d9:2a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org