Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/7gZl6jXZ4FoKwISmZUinJa0dpVg.roa
File: 7gZl6jXZ4FoKwISmZUinJa0dpVg.roa (raw, json)
Hash identifier: Ov64qZsSUVtliBvHW1lkRuFZH14k2Slo1SVnPtnTOwI=
Subject key identifier: EE:06:65:EA:35:D9:E0:5A:0A:C0:84:A6:65:48:A7:25:AD:1D:A5:58
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0AF4
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/7gZl6jXZ4FoKwISmZUinJa0dpVg.roa
Signing time: Thu 16 Dec 2021 06:37:26 +0000
ROA not before: Thu 16 Dec 2021 06:37:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17809
IP address blocks: 113.61.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2804 (0xaf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 16 06:37:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=EE0665EA35D9E05A0AC084A66548A725AD1DA558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9c:19:fb:31:16:cf:6c:9f:f3:9d:92:54:3f:
29:9a:e7:7b:ad:a0:ec:0e:2c:52:2c:59:34:0b:ad:
39:98:20:24:90:36:0a:4d:f8:d6:cd:1a:84:d4:d4:
88:a8:23:a0:00:bf:42:9d:9c:ab:a5:4d:44:ea:79:
10:b3:ee:49:4d:1a:e1:14:bd:89:01:60:c0:1b:e1:
65:3c:c8:34:29:33:e5:fd:d5:5b:5b:9d:ff:eb:f5:
e6:6c:52:aa:fb:3d:1b:30:a7:18:04:35:cf:34:5e:
85:46:94:b7:46:05:31:45:30:88:cc:96:11:e3:91:
49:44:19:c7:4e:70:ad:73:35:49:33:1e:a5:4d:e1:
82:af:79:38:96:b6:e9:1e:7e:db:98:d0:5e:66:13:
af:2a:64:83:29:a5:67:78:eb:f8:84:f0:98:c3:7c:
e9:37:21:e2:09:76:0a:3d:31:3f:7c:27:be:b9:c0:
ba:29:e7:13:e8:fd:e6:54:18:da:37:10:f9:8a:f7:
21:3e:6d:22:39:64:9d:e7:d4:0f:99:06:cf:be:af:
ff:5b:5e:2d:62:5c:1a:43:6d:26:d7:2b:d2:40:fc:
8b:04:8e:f5:33:80:15:3e:d4:b7:59:f4:3f:fc:93:
c9:49:d8:67:db:3b:3f:ab:f8:28:3f:92:e3:1f:64:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:06:65:EA:35:D9:E0:5A:0A:C0:84:A6:65:48:A7:25:AD:1D:A5:58
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/7gZl6jXZ4FoKwISmZUinJa0dpVg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.224.0/20
Signature Algorithm: sha256WithRSAEncryption
61:c7:08:fd:07:6a:66:85:57:d1:c9:63:f4:11:38:bc:43:23:
06:6e:b0:8c:3e:8c:44:f5:90:b1:a2:54:cf:b7:b9:c4:e4:5f:
e8:31:48:7b:4a:43:05:dd:13:64:c9:70:5c:01:b4:93:00:c1:
df:94:bd:69:3f:d9:66:6a:08:92:be:76:b2:77:a5:5a:d3:7e:
06:09:34:e8:be:1c:45:dd:5a:70:d1:72:4f:50:33:e8:16:f3:
ae:40:56:c3:42:3e:fb:d8:26:1d:8c:85:c8:ee:57:0a:ac:3c:
34:90:5a:dd:fe:ca:0a:64:8c:62:65:74:ab:a3:1a:ea:e6:e0:
43:c1:13:c6:f2:c0:9e:f6:b5:b7:89:18:b9:cd:39:6a:71:ab:
fd:ef:bc:c6:96:b9:9c:71:b1:93:bf:7f:21:1d:57:e0:2e:89:
42:3c:c4:8c:ff:e6:23:9f:17:55:77:c5:7a:f4:15:b4:8e:50:
d5:b4:0f:3c:8c:71:83:a3:6c:bb:8f:f2:74:49:6a:6a:cd:81:
ba:8e:75:e7:e8:1d:57:16:0c:39:e6:d5:a5:ec:74:3b:89:b2:
c3:f0:d3:1e:82:09:1e:b5:40:60:a6:ce:63:b9:d9:da:37:1d:
52:ee:bd:5b:7f:56:b2:75:ec:b2:84:08:2d:23:e2:d5:e6:e7:
45:b8:4a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org