Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/7cn3fR9Q-QNmqTtt2lila-GwLqk.roa
File: 7cn3fR9Q-QNmqTtt2lila-GwLqk.roa (raw, json)
Hash identifier: 47wZDaZqA6pDKo7/MDUOly29JgY7M8gKAAek7Th8Mjk=
Subject key identifier: ED:C9:F7:7D:1F:50:F9:03:66:A9:3B:6D:DA:58:A5:6B:E1:B0:2E:A9
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0AE6
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/7cn3fR9Q-QNmqTtt2lila-GwLqk.roa
Signing time: Thu 16 Dec 2021 06:33:42 +0000
ROA not before: Thu 16 Dec 2021 06:33:42 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17809
IP address blocks: 113.61.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2790 (0xae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 16 06:33:42 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=EDC9F77D1F50F90366A93B6DDA58A56BE1B02EA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:0e:82:df:a9:65:09:5f:13:9c:e5:8f:15:
b4:a3:a3:9c:04:da:fd:dd:5f:59:dc:a6:bf:85:aa:
fc:34:ea:85:5d:c3:89:3b:6a:73:7d:ed:6a:b1:13:
c8:00:a3:f7:b4:06:e8:a9:23:d7:45:2c:2b:01:58:
af:cd:79:8c:f2:9e:d6:cd:3a:52:f4:c7:e8:88:7a:
81:8d:4b:37:c9:26:06:39:ad:7e:85:f7:17:36:e1:
95:0b:98:2d:85:51:22:74:1f:f9:aa:ab:b7:7d:bb:
f9:74:0b:40:f3:05:d3:0c:89:fe:7c:c2:df:7c:5a:
f8:c3:b1:06:4c:eb:14:a0:82:cf:a7:71:62:da:e9:
f4:86:cb:3b:66:a0:85:c5:ee:d6:2f:ff:b0:85:e7:
d4:49:8b:9e:82:50:ed:7b:a5:25:cf:77:4f:bd:c9:
19:ff:a6:aa:da:14:ab:c7:05:31:5f:4e:73:51:f0:
b3:75:1d:3a:be:f7:14:bd:c2:6b:d0:79:2e:ed:e3:
b8:a5:98:c4:26:50:9f:d7:ce:8a:1b:21:2f:6c:5a:
d6:ab:be:df:55:ba:bb:c0:e2:31:73:55:86:9a:2c:
b5:87:f7:59:c0:cb:9f:69:82:ff:c5:3e:16:a9:8b:
df:9a:cb:48:ed:5b:20:95:e2:17:1e:a8:e1:35:6f:
cf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C9:F7:7D:1F:50:F9:03:66:A9:3B:6D:DA:58:A5:6B:E1:B0:2E:A9
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/7cn3fR9Q-QNmqTtt2lila-GwLqk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.160.0/20
Signature Algorithm: sha256WithRSAEncryption
03:b2:78:20:02:3c:a3:3c:3c:6a:c2:25:2b:09:03:f8:d9:ec:
cf:04:a7:31:75:e2:f5:b2:66:0f:d0:ad:6a:7b:b4:db:65:3b:
b7:b5:78:72:b4:31:1a:0a:05:5f:a3:28:3a:c8:9d:a1:78:fb:
52:bf:4b:2f:82:00:8f:b4:65:60:76:81:1e:f9:de:9c:2d:ad:
01:06:40:a5:81:2f:8c:84:74:ec:5c:28:a6:a3:e6:64:b0:95:
dd:16:04:40:97:f0:79:a8:1d:8b:89:98:0f:80:37:4c:92:95:
2e:0d:08:45:1f:39:eb:c2:b8:f8:60:74:84:f0:88:a1:9f:70:
6d:bb:b9:d1:fe:37:1e:cc:0d:46:82:74:3a:12:e8:98:c7:91:
e3:78:b9:2c:8a:78:3e:47:f1:17:88:43:5c:43:ee:4a:10:82:
2e:fd:b0:44:42:9f:8b:fd:a3:44:b7:b4:4e:03:c6:5b:21:49:
08:d1:86:91:bf:7b:f7:47:0c:2b:a9:97:72:4b:f7:9d:93:7f:
d4:8e:3d:58:2c:b5:22:6f:36:bd:8b:9d:e2:fb:f4:ab:d9:0e:
f9:7c:01:fd:4a:db:57:8d:70:9f:51:a7:03:fa:3b:2f:8d:69:
2c:af:9c:a2:b1:d6:1d:59:04:2d:f1:f9:cb:e7:4e:b0:42:ef:
30:e8:cf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org