Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/6phPV-3CKBRLBUM5NMXrwr3BvZI.roa
File: 6phPV-3CKBRLBUM5NMXrwr3BvZI.roa (raw, json)
Hash identifier: 1kqOtPYJPMkTTlYfX3Z/2GG8vFcjJRjjG0qKjM2y9+8=
Subject key identifier: EA:98:4F:57:ED:C2:28:14:4B:05:43:39:34:C5:EB:C2:BD:C1:BD:92
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0AEE
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/6phPV-3CKBRLBUM5NMXrwr3BvZI.roa
Signing time: Thu 16 Dec 2021 06:34:58 +0000
ROA not before: Thu 16 Dec 2021 06:34:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17809
IP address blocks: 113.61.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2798 (0xaee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 16 06:34:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=EA984F57EDC228144B05433934C5EBC2BDC1BD92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:85:b2:07:f8:a9:0b:2e:09:e8:71:82:f6:
3d:ff:6c:b9:69:5a:c1:c1:9e:37:33:e6:01:c0:90:
5e:ed:d0:48:d3:56:2a:af:d9:54:9f:9f:57:99:ee:
92:92:f1:c4:01:e8:a1:b9:41:0f:eb:aa:e2:38:04:
79:e0:76:ba:47:b4:1b:88:ee:b0:4d:9d:e9:af:81:
cb:11:00:40:67:f7:20:1e:a4:17:87:21:3f:2d:62:
d0:35:cd:92:0d:f0:ed:c7:b1:fb:60:28:58:4d:ac:
03:d0:6a:9d:44:c0:54:58:38:50:f8:af:8c:61:1e:
c3:49:a8:f1:ba:8a:cf:12:e4:46:d7:f9:49:de:28:
a3:06:03:5d:c9:3a:ce:7c:1c:2b:81:a0:43:66:72:
0d:11:a0:26:97:89:1b:aa:13:71:d3:91:78:0b:34:
c0:bf:b8:be:68:d7:c5:66:60:cd:76:7c:5a:be:a0:
f2:97:f6:65:5c:d5:b1:fa:84:4c:70:21:c2:0c:1c:
33:4e:1a:bb:98:47:5f:96:fd:de:f1:4b:1a:d7:d6:
f1:52:ce:67:4e:8e:33:1f:7a:c8:c9:ff:44:9f:85:
f5:4b:64:13:c9:a5:d6:07:7b:d3:55:45:8b:9c:5c:
92:1a:5c:d1:02:f8:73:74:0a:a3:ad:cc:2b:e8:45:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:98:4F:57:ED:C2:28:14:4B:05:43:39:34:C5:EB:C2:BD:C1:BD:92
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/6phPV-3CKBRLBUM5NMXrwr3BvZI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.192.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:de:92:39:66:09:fb:53:45:07:a2:05:ca:69:5e:cc:bc:d2:
ed:33:9b:02:ec:0f:9c:c7:4d:a1:39:5d:79:c3:83:bb:ea:c4:
14:60:8b:63:8b:8d:18:22:0d:c4:5f:85:87:c9:c6:44:70:52:
88:d3:7b:19:d6:52:2f:65:f4:ce:4d:0c:08:49:c0:b8:ac:34:
68:89:5f:65:4c:6e:18:47:8a:f3:16:b4:5a:54:57:aa:00:20:
ab:38:6a:7e:53:79:1e:a3:5d:c2:6c:da:4c:99:70:fb:14:1f:
c9:f0:9e:0b:3f:17:5d:dc:a7:97:7e:f0:b2:7a:0c:01:e1:76:
27:a5:18:a1:39:aa:3e:ac:b1:2c:f5:55:98:ed:d8:c9:68:33:
6a:f9:fc:ee:d9:f1:98:e7:67:ef:37:fb:8b:b7:ed:82:b6:dc:
3c:02:a5:a9:1f:b1:c9:3b:f7:c3:74:2e:7a:24:fe:2f:f7:70:
02:f6:f8:35:f5:72:53:0c:f4:71:8f:74:0e:71:78:47:bf:e8:
8e:b6:ac:46:52:12:ba:67:0f:fe:7c:dc:01:fb:7c:39:76:f0:
bb:a0:8a:5b:45:4a:9b:c6:50:51:2b:80:91:8a:5d:18:d5:ea:
40:3d:a0:06:45:31:7b:c5:b4:6e:8e:3a:09:01:ac:0e:e7:ce:
32:02:57:8a
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMTEyMTYw
NjM0NThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEVBOTg0RjU3RURDMjI4
MTQ0QjA1NDMzOTM0QzVFQkMyQkRDMUJEOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1bYWyB/ipCy4J6HGC9j3/bLlpWsHBnjcz5gHAkF7t0EjTViqv
2VSfn1eZ7pKS8cQB6KG5QQ/rquI4BHngdrpHtBuI7rBNnemvgcsRAEBn9yAepBeH
IT8tYtA1zZIN8O3HsftgKFhNrAPQap1EwFRYOFD4r4xhHsNJqPG6is8S5EbX+Une
KKMGA13JOs58HCuBoENmcg0RoCaXiRuqE3HTkXgLNMC/uL5o18VmYM12fFq+oPKX
9mVc1bH6hExwIcIMHDNOGruYR1+W/d7xSxrX1vFSzmdOjjMfesjJ/0SfhfVLZBPJ
pdYHe9NVRYucXJIaXNEC+HN0CqOtzCvoRdu/AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU6phPV+3CKBRLBUM5NMXrwr3BvZIwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvNnBoUFYtM0NLQlJMQlVNNU5NWHJ3
cjNCdlpJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHE9wDAN
BgkqhkiG9w0BAQsFAAOCAQEAGt6SOWYJ+1NFB6IFymlezLzS7TObAuwPnMdNoTld
ecODu+rEFGCLY4uNGCINxF+Fh8nGRHBSiNN7GdZSL2X0zk0MCEnAuKw0aIlfZUxu
GEeK8xa0WlRXqgAgqzhqflN5HqNdwmzaTJlw+xQfyfCeCz8XXdynl37wsnoMAeF2
J6UYoTmqPqyxLPVVmO3YyWgzavn87tnxmOdn7zf7i7ftgrbcPAKlqR+xyTv3w3Qu
eiT+L/dwAvb4NfVyUwz0cY90DnF4R7/ojrasRlISumcP/nzcAft8OXbwu6CKW0VK
m8ZQUSuAkYpdGNXqQD2gBkUxe8W0bo46CQGsDufOMgJXig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org