Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/92zEoJLfZfRNe4Vbn4vJyZul8pY.roa
File: 92zEoJLfZfRNe4Vbn4vJyZul8pY.roa (raw, json)
Hash identifier: GGutfbcQ1e0OwZUNegVD1trDfDhAfAeh2S6j94qGFKU=
Subject key identifier: F7:6C:C4:A0:92:DF:65:F4:4D:7B:85:5B:9F:8B:C9:C9:9B:A5:F2:96
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 09A9
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/92zEoJLfZfRNe4Vbn4vJyZul8pY.roa
Signing time: Sun 07 Feb 2021 13:15:37 +0000
ROA not before: Sun 07 Feb 2021 13:15:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17809
IP address blocks: 210.209.128.0/17 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2473 (0x9a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 7 13:15:37 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F76CC4A092DF65F44D7B855B9F8BC9C99BA5F296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:65:49:0f:f0:54:3a:8d:51:8c:d7:3b:94:fb:
bb:44:50:d1:10:23:6b:56:44:07:d3:ce:9a:f4:76:
db:d0:49:6e:3f:21:43:51:91:94:96:95:0e:c3:92:
40:7b:0c:ec:3e:3b:02:b7:bf:b4:8c:8c:26:c3:7f:
a6:80:04:7f:eb:22:e2:ab:a3:f3:5f:2f:58:e1:55:
ca:57:90:79:75:e5:8a:60:4a:bf:1f:34:29:42:c8:
29:a2:32:5f:f0:5a:0a:8f:2d:8b:be:40:ee:5f:a5:
84:20:55:f4:4c:d1:2e:5e:3f:bb:17:59:40:2d:08:
1f:a8:1f:1a:63:85:8b:f1:69:26:bc:54:bb:a3:69:
84:1b:cf:30:16:ea:f7:51:64:bf:8f:ae:7d:02:ab:
35:3f:89:92:87:26:09:d8:87:62:ec:aa:34:a1:3f:
2e:4d:30:95:01:4f:ce:49:49:b6:06:a7:30:f3:d2:
c2:8a:c1:33:0f:0b:13:51:cb:0f:ae:b3:d7:0b:99:
58:ce:cd:fa:60:a3:ef:fe:4b:d3:90:05:74:64:39:
26:f2:a3:64:a9:f1:75:7a:28:f1:21:e8:d7:e6:d2:
3f:5c:4f:9f:52:dd:84:a5:ae:7a:1e:93:23:10:29:
04:fd:ff:39:a1:5a:39:c0:3f:4b:d9:eb:9b:45:ce:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6C:C4:A0:92:DF:65:F4:4D:7B:85:5B:9F:8B:C9:C9:9B:A5:F2:96
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/92zEoJLfZfRNe4Vbn4vJyZul8pY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.209.128.0/17
Signature Algorithm: sha256WithRSAEncryption
12:1b:db:04:ec:d9:f0:7a:a6:d4:a7:73:6f:fe:2d:ca:1a:b8:
1c:bd:f4:05:fb:bf:d5:a6:28:d1:39:74:16:95:32:57:28:db:
51:a8:47:08:ad:93:5b:89:6b:e4:77:b8:8d:01:c9:59:c6:dc:
68:94:88:0d:c8:56:a3:c6:a1:93:0d:cc:8a:23:24:2b:5e:b4:
30:1f:b6:fd:5d:4a:04:91:eb:60:e6:12:60:8b:a0:1a:36:a5:
ec:40:5f:f6:d3:ff:b6:9e:b4:29:12:71:99:05:64:9b:10:01:
92:0d:a8:fd:dc:3e:56:88:6d:f4:50:e3:59:5b:56:53:33:c2:
df:a1:bf:66:fa:4a:8c:ca:85:b0:e6:af:58:8b:ad:20:27:3d:
eb:b9:11:80:cf:0f:08:10:52:74:56:47:91:8d:93:9b:ca:9e:
50:b7:e8:9e:73:42:e4:eb:c7:1c:97:ee:44:8b:e2:51:f0:e9:
ac:00:6f:7c:66:99:17:34:b0:94:71:ec:80:49:ae:75:b8:98:
ed:6e:34:ce:2c:7c:30:3d:90:9f:28:98:1f:bf:24:59:bd:72:
cc:1c:e8:20:8d:a3:44:34:88:f9:1d:2c:78:23:5a:67:29:97:
fc:0f:d1:8d:a7:58:27:fe:c4:fb:47:74:ce:00:59:c1:3f:84:
41:8c:bc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:52 2023 by rpki-client on console-ams.rpki-client.org