Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/9McQQn1wjdJXZjt8qNBrw3llWUI.roa
File: 9McQQn1wjdJXZjt8qNBrw3llWUI.roa (raw, json)
Hash identifier: Ezs2QoyAbwHxQMB8VQ/yHKsWkNtufmWkVRvje5QhMX0=
Subject key identifier: F4:C7:10:42:7D:70:8D:D2:57:66:3B:7C:A8:D0:6B:C3:79:65:59:42
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 08DC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/9McQQn1wjdJXZjt8qNBrw3llWUI.roa
Signing time: Wed 18 Nov 2020 08:00:39 +0000
ROA not before: Wed 18 Nov 2020 08:00:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 119.15.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2268 (0x8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Nov 18 08:00:39 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F4C710427D708DD257663B7CA8D06BC379655942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:e1:11:a3:a6:93:f9:54:35:1f:43:d8:5f:
9f:4d:b6:65:fb:06:88:e0:54:1c:ec:0f:c4:20:02:
cd:ed:49:16:a5:22:5f:9a:00:b5:72:c6:a6:9b:04:
73:a8:a5:3d:ba:56:b4:6b:1b:47:77:d3:54:20:35:
2e:0b:a4:87:d6:7f:6b:76:0e:92:7f:32:26:15:72:
61:6e:67:82:3d:84:37:c6:c2:56:d4:d2:68:10:9d:
f7:2a:9c:65:6c:68:7d:40:79:01:78:9f:f0:81:64:
c8:b8:f3:73:ff:7d:90:c9:64:45:98:b7:5c:80:8d:
96:e6:bc:9f:13:ae:65:6a:05:17:03:ec:9e:31:48:
f5:50:ed:6f:a4:72:aa:29:ad:89:d8:48:36:b8:cd:
b1:40:68:0c:60:9d:2c:da:38:66:8b:4a:0f:9f:91:
79:09:e6:55:b9:db:7e:aa:a8:8e:bb:05:28:92:0e:
fd:d4:8b:b4:03:1b:3a:b0:89:b8:c9:65:68:2c:d9:
3a:a2:bb:d1:7a:93:14:0d:f3:91:5b:45:43:d8:fc:
c6:b7:a5:a2:82:a8:b4:a7:96:1b:8c:5a:88:b4:6a:
83:19:6e:de:d1:67:4a:b2:20:7f:a3:2c:c8:b7:2e:
61:55:06:a7:3a:75:6b:a2:6f:9c:a1:48:5e:0c:0e:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C7:10:42:7D:70:8D:D2:57:66:3B:7C:A8:D0:6B:C3:79:65:59:42
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/9McQQn1wjdJXZjt8qNBrw3llWUI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1b:e2:d1:fc:cf:5d:21:04:0c:52:ca:a9:8a:5f:59:aa:f8:b3:
a1:d2:d9:61:97:73:de:9a:31:4b:09:7c:5f:6f:2b:e9:4b:6b:
53:e3:5c:ef:ff:c3:f3:bc:37:77:ca:4f:5e:ba:00:78:8b:c6:
ae:6d:16:b8:96:8c:14:1c:5f:26:53:be:6d:49:54:af:01:5d:
17:9e:0d:2c:a6:79:34:91:c5:93:65:76:fd:f2:37:7c:49:9f:
a6:b9:4a:e1:c7:1f:22:ac:d4:7a:dc:c2:ea:82:3b:03:b4:05:
8b:2f:e2:3b:21:4d:f9:42:74:6f:3b:d7:66:ed:49:e4:5f:1f:
d6:5a:e6:73:27:a2:ca:7b:90:6a:ad:c2:aa:77:2d:6d:f3:72:
58:0b:3a:01:cc:9c:91:6f:42:60:fa:f0:d1:44:cb:60:11:09:
12:30:5c:8c:4f:b2:bf:ec:4e:4b:4a:6d:2c:69:e6:60:5c:aa:
95:98:7c:08:7e:fa:ec:01:63:fd:81:06:23:8f:df:77:b9:07:
df:78:fe:57:e8:90:c2:8c:8d:5c:69:93:15:f7:26:e1:46:b4:
ca:91:6f:24:c3:70:60:19:66:97:b4:51:50:5c:f5:70:38:68:
c0:9e:4a:22:41:ca:c0:9c:1f:af:4b:74:bb:12:78:2e:9d:80:
60:d5:6b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org