Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/9A6Zw3sGrdTYt-NUdAU_1HPWWcU.roa
File: 9A6Zw3sGrdTYt-NUdAU_1HPWWcU.roa (raw, json)
Hash identifier: Ui9QkMkUfafq7IudI7fOAv8VM9Gcaur1mNKzemyhX28=
Subject key identifier: F4:0E:99:C3:7B:06:AD:D4:D8:B7:E3:54:74:05:3F:D4:73:D6:59:C5
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0B47
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/9A6Zw3sGrdTYt-NUdAU_1HPWWcU.roa
Signing time: Fri 24 Dec 2021 11:44:16 +0000
ROA not before: Fri 24 Dec 2021 11:44:16 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17809
IP address blocks: 182.155.0.0/16 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2887 (0xb47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 24 11:44:16 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F40E99C37B06ADD4D8B7E35474053FD473D659C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:c1:d3:15:b9:c7:9d:92:53:3d:c9:cd:1f:
aa:85:e4:b3:6d:d3:8b:e6:81:48:e1:80:fa:4d:34:
d9:95:38:bf:92:c7:f7:88:5b:17:81:ed:aa:7e:56:
50:54:15:b0:63:ca:b2:76:ce:00:92:b9:b1:ac:9c:
21:70:a3:05:7b:2e:2b:e0:fb:42:64:e7:0e:b4:65:
f5:27:bc:00:98:df:80:ef:d2:2b:77:1d:f4:34:cc:
25:d8:54:84:ea:7e:c0:a9:fc:0f:ce:cc:35:f8:f0:
fc:e8:fc:65:06:ca:3d:4d:39:e1:66:55:2a:a5:5c:
b8:e2:93:d7:bc:3f:22:48:cd:a5:31:d1:b0:dc:3c:
94:2a:74:3f:3d:f7:d7:9f:5b:b4:8c:1b:d2:f4:8d:
de:43:7e:0b:22:80:1d:be:10:74:06:01:a6:e2:48:
46:cd:0a:6c:3b:14:20:a5:5e:f3:f8:ad:af:d8:07:
56:97:73:0e:ef:2f:be:bb:1e:76:d3:7e:93:7d:91:
e1:62:b0:03:22:4a:6c:cb:c0:80:f6:ae:dd:85:29:
bf:f5:80:de:38:8c:a1:50:ae:38:55:3e:53:fe:9c:
f0:b2:5b:d4:b2:43:df:ab:94:e6:44:1d:8d:77:4b:
75:0b:ad:af:95:8e:bd:14:4e:7b:4e:37:e8:17:3c:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0E:99:C3:7B:06:AD:D4:D8:B7:E3:54:74:05:3F:D4:73:D6:59:C5
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/9A6Zw3sGrdTYt-NUdAU_1HPWWcU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:53:ce:56:83:ba:f2:74:68:cc:ab:2a:1e:1c:5e:06:e3:f3:
ce:98:c9:ba:1a:29:35:01:9a:f4:1c:01:bb:44:53:94:ae:9f:
0c:88:24:e9:5a:6d:11:73:5f:ed:aa:f0:88:97:97:ad:3c:34:
5d:fd:6c:7b:dd:2f:98:87:28:29:e2:32:3d:2f:0c:a6:f3:0a:
57:f0:0d:21:20:87:f3:7c:09:36:9f:ed:fe:9a:51:17:a5:31:
6c:b2:52:a2:30:70:19:d2:7d:e4:8a:97:9b:b3:79:a8:5c:ed:
c6:f4:8b:7e:96:36:77:21:5d:1d:fe:2b:3d:c8:6b:96:26:24:
7b:22:3d:d7:d1:87:36:81:5a:4c:e7:4e:ac:5d:24:07:d6:c6:
7f:c7:f6:af:09:65:22:4e:40:6f:b5:e1:9a:f5:2c:26:8a:4d:
53:78:7d:03:b7:dc:82:cb:46:3b:af:53:d9:fc:7c:92:46:ef:
b6:c1:af:bf:5d:e3:a9:55:72:75:b5:cb:27:10:a2:a5:d0:d8:
cf:8d:31:aa:f9:39:06:17:0f:a5:64:81:31:27:be:b2:45:97:
4f:e2:3a:64:1c:75:06:9d:6e:a1:10:a1:7a:b9:c3:74:09:91:
9b:69:8b:38:f7:7c:45:ad:c6:da:7c:2d:4e:b7:d7:e3:97:bb:
0b:fc:7e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org