Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/8FtGKw_4aHKHERZc_EQgYGUmFf4.roa
File: 8FtGKw_4aHKHERZc_EQgYGUmFf4.roa (raw, json)
Hash identifier: 9lZVYyjEoHzIDMrT6zwjKZpGScJEtFa/TuBoYpLi9p0=
Subject key identifier: F0:5B:46:2B:0F:F8:68:72:87:11:16:5C:FC:44:20:60:65:26:15:FE
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0902
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/8FtGKw_4aHKHERZc_EQgYGUmFf4.roa
Signing time: Tue 24 Nov 2020 03:14:39 +0000
ROA not before: Tue 24 Nov 2020 03:14:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17809
IP address blocks: 113.61.128.0/17 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2306 (0x902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Nov 24 03:14:39 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F05B462B0FF868728711165CFC442060652615FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:98:6a:55:b0:3c:e8:25:01:b2:bc:74:26:6d:
21:33:ec:fb:b5:3b:56:1b:31:6e:38:cb:6b:ab:c6:
a0:d6:5c:bc:cf:09:23:ab:28:80:4e:e8:7f:47:9a:
8d:01:78:cc:b4:13:40:78:8d:06:3d:15:dd:2c:69:
2d:8d:75:12:14:a2:b4:c9:de:b5:ca:20:3d:d2:8c:
04:9c:45:b1:4c:b2:11:3c:a9:93:bd:1f:c9:da:02:
4b:e2:f9:89:ca:56:d2:bc:23:9a:42:6b:57:8e:8b:
c2:e2:0b:7a:f5:ce:e2:67:f8:3e:88:b1:60:f2:cc:
08:0d:56:a9:15:37:22:0b:bc:1f:5b:73:c8:81:b6:
c4:99:70:70:95:9d:a1:8b:99:d6:c4:d6:93:a7:22:
7c:3b:81:b3:c5:66:b5:ef:17:cb:5b:eb:2e:00:2d:
5d:14:a1:18:89:ff:d0:f9:85:94:61:1a:32:57:92:
06:2a:fa:57:47:04:89:be:3e:5d:89:aa:32:83:1f:
12:fe:e5:2a:09:c6:a8:28:e1:28:c9:09:b0:1f:87:
cf:ed:22:78:74:ed:a0:51:fe:47:81:f8:47:ee:fa:
dc:23:5e:3e:60:fd:c3:27:e1:03:33:c5:65:e8:d5:
9f:cb:98:6e:4e:e7:c2:c1:d2:12:cd:c2:d9:42:a0:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5B:46:2B:0F:F8:68:72:87:11:16:5C:FC:44:20:60:65:26:15:FE
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/8FtGKw_4aHKHERZc_EQgYGUmFf4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.128.0/17
Signature Algorithm: sha256WithRSAEncryption
34:c6:d1:e1:ea:47:f2:08:8e:80:18:c1:21:06:2a:27:67:a0:
0d:2f:79:61:10:4b:3c:e5:7d:d2:99:03:5a:6d:e3:f9:cd:e7:
2b:4c:82:ee:3b:52:69:7d:d6:fc:02:7a:77:e2:fe:6e:d8:f0:
81:c6:2c:90:ae:80:1d:1c:c5:59:b8:4f:e6:a9:f4:0b:69:c4:
fe:ff:64:68:5e:2d:b1:32:a0:4f:a4:d4:3a:c0:72:63:a0:b6:
ab:9f:41:3c:5e:01:b9:d1:4e:ee:22:2b:8d:a7:20:a4:07:b1:
a9:76:5f:92:0f:77:14:24:3a:9e:b6:c5:f6:1e:84:30:34:38:
9a:ab:ac:d6:69:24:d4:7b:3a:ea:e2:0f:cf:e6:6d:20:19:0b:
29:fe:6f:07:ce:55:4f:1b:92:fd:7e:9d:e1:7a:99:fd:39:e0:
f5:30:bc:a9:94:4e:71:15:6a:2e:12:21:f6:89:fd:1e:d8:64:
c7:71:63:92:c5:19:70:02:e8:1d:b8:c3:4a:ca:fa:c1:2c:3c:
03:93:6f:a2:46:71:3a:a7:16:a9:de:a9:7c:a6:e1:91:f0:9a:
5f:a1:0e:2d:06:af:53:da:f3:c2:96:9b:23:18:05:79:12:72:
a0:38:e4:b9:eb:6a:0a:ef:74:a7:cf:ad:65:8e:ef:ab:d5:bf:
8e:f7:63:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org