Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/A6ACAzRXfULhgbKpchVKEtiBC5s.roa
File: A6ACAzRXfULhgbKpchVKEtiBC5s.roa (raw, json)
Hash identifier: 5DYuiRvQNFJqcFckH6aQDLqvT0G8DlwGrGa7vWiUjw4=
Subject key identifier: 03:A0:02:03:34:57:7D:42:E1:81:B2:A9:72:15:4A:12:D8:81:0B:9B
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0999
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/A6ACAzRXfULhgbKpchVKEtiBC5s.roa
Signing time: Sun 07 Feb 2021 13:15:23 +0000
ROA not before: Sun 07 Feb 2021 13:15:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17809
IP address blocks: 27.96.224.0/19 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2457 (0x999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 7 13:15:23 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=03A0020334577D42E181B2A972154A12D8810B9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:6b:f1:db:ee:cf:1a:2c:98:1c:06:a9:be:
10:29:da:5f:a4:46:fe:42:a5:21:59:c2:89:46:60:
29:da:62:d4:64:d3:bc:19:6a:81:a4:d1:e0:2e:00:
b4:9c:35:cc:8e:3c:6c:73:33:fe:28:70:d8:a8:4e:
4a:6a:79:cb:31:e3:e8:35:23:d4:bf:3f:c2:18:d9:
f0:be:81:4f:fc:84:c3:fb:9c:be:64:93:50:aa:f9:
d0:cf:71:5e:2f:64:a5:75:91:3e:97:df:e9:33:c6:
2a:88:8a:51:3a:9e:0e:e9:4f:f0:9d:03:b6:2b:17:
61:7e:e9:17:15:56:95:7a:7a:4f:71:24:b1:b0:99:
05:29:2f:15:0c:f1:08:f2:49:21:f2:1c:7f:9e:c5:
7a:40:f7:e0:7a:76:6e:ec:ba:6c:8f:85:e1:3c:8f:
02:b9:8e:85:bb:6e:77:1a:a7:65:2e:a7:da:b9:a9:
53:b7:80:19:3a:01:ec:5f:58:dc:7f:71:f0:4c:50:
6c:4f:7e:52:72:a6:f6:3f:ae:3f:9f:06:c1:42:2d:
46:40:dc:73:1a:0a:ce:55:cc:a5:82:3e:72:6a:76:
69:09:77:f4:48:c7:3b:14:17:24:ed:17:e4:a7:da:
25:28:6b:d6:0d:b8:f6:f8:90:d0:95:3f:28:3f:28:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A0:02:03:34:57:7D:42:E1:81:B2:A9:72:15:4A:12:D8:81:0B:9B
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/A6ACAzRXfULhgbKpchVKEtiBC5s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.224.0/19
Signature Algorithm: sha256WithRSAEncryption
15:f0:41:4d:19:ca:59:69:bc:db:41:8d:66:d8:2d:fa:18:3b:
24:08:0b:a9:87:f7:9e:47:be:71:ad:35:f7:91:10:dc:54:40:
5e:5b:32:b8:c7:1c:f7:6d:e9:f2:ff:8f:9a:97:6e:a1:3f:6b:
84:88:fe:54:ee:8e:36:5a:ed:30:32:52:48:33:62:8a:25:d7:
7b:dd:69:d0:b5:33:a8:81:2c:8a:f1:1c:1c:5d:dc:fd:e4:f7:
15:c8:8f:5a:5c:96:51:b0:dc:37:70:8d:04:e3:91:41:9f:54:
76:85:5d:16:d0:4f:cd:df:27:15:ff:a4:e3:45:93:52:ed:e2:
f0:cc:f2:9f:44:db:64:93:10:9e:cc:2e:6c:c8:8a:78:d4:ba:
3d:87:47:2b:28:30:e0:fe:4c:ed:d2:39:59:02:7e:9b:e6:17:
a3:f4:a6:e7:24:69:6d:c7:27:bf:fd:b0:d3:cf:d1:36:fe:b3:
11:38:16:83:7f:c6:88:c7:75:99:39:07:92:02:42:c7:a4:f8:
0b:0a:fc:31:fe:bc:fd:fe:52:67:c2:48:26:7c:be:d9:f4:c3:
bd:8b:45:99:54:c0:10:fc:c7:8e:51:6c:20:d4:7e:28:fd:50:
f9:05:c1:c2:e7:43:d4:56:65:5b:f1:3a:cb:68:87:e4:01:91:
40:1c:0b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org