Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/C8HPus53L_7FdqmTJEG_x2yuzWk.roa
File: C8HPus53L_7FdqmTJEG_x2yuzWk.roa (raw, json)
Hash identifier: TssEZPvWr086B1Semq1pWBRPYtPNeScdJRjgsC8M2Mg=
Subject key identifier: 0B:C1:CF:BA:CE:77:2F:FE:C5:76:A9:93:24:41:BF:C7:6C:AE:CD:69
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D1A
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/C8HPus53L_7FdqmTJEG_x2yuzWk.roa
Signing time: Wed 26 Apr 2023 10:31:32 +0000
ROA not before: Wed 26 Apr 2023 10:31:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 210.209.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3354 (0xd1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:32 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0BC1CFBACE772FFEC576A9932441BFC76CAECD69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:5e:c1:d6:41:b8:6a:a4:72:a7:75:b9:43:
dc:9e:9f:5d:5b:76:8a:39:38:fe:88:f2:c0:b0:a1:
7b:79:ac:e2:c7:5c:29:de:38:57:73:0e:cd:33:bb:
93:a6:75:25:76:43:f8:b5:38:2b:4b:f7:89:ae:23:
11:57:80:bb:01:b0:d3:91:ec:b5:f0:f2:6f:95:4f:
b6:21:87:23:2d:71:c1:ca:96:68:ca:7a:46:1f:ed:
92:d3:94:57:d8:08:e9:63:c6:1d:45:aa:66:3a:3b:
c7:03:09:f5:00:58:b1:bc:25:a4:28:a2:ec:42:32:
dc:eb:cf:bc:98:81:d7:68:64:1b:ce:fe:60:79:1c:
98:70:30:f6:a2:68:9c:8c:56:08:e1:4d:15:06:e1:
1e:58:20:e3:b8:03:18:f6:c6:c4:3e:83:db:88:54:
d0:ef:fe:27:6c:9b:0c:06:f7:a7:5f:95:e5:2b:b1:
bc:5b:79:dc:b0:7b:07:72:12:d7:1f:db:71:a3:8e:
70:8a:67:3f:40:1e:7a:1f:35:88:d4:78:36:83:1a:
74:df:43:e7:5a:1a:ee:82:e4:c4:a5:15:62:86:09:
c4:32:a2:44:01:5d:d7:fa:50:1c:1d:44:a6:40:1d:
00:d9:07:a8:b3:a9:5b:ee:ad:9b:94:f7:0b:f3:01:
3f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C1:CF:BA:CE:77:2F:FE:C5:76:A9:93:24:41:BF:C7:6C:AE:CD:69
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/C8HPus53L_7FdqmTJEG_x2yuzWk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.209.192.0/18
Signature Algorithm: sha256WithRSAEncryption
38:6e:af:12:8e:19:df:eb:38:ee:f0:d9:29:91:fa:f0:47:8b:
44:b8:b9:93:33:38:3b:3f:7d:6a:c9:da:d6:5e:d7:cc:6a:55:
4e:bd:70:84:2a:b7:2f:90:81:7f:4f:56:5d:5e:ba:23:5d:26:
56:a4:aa:b1:19:bd:02:7a:13:78:96:43:a7:a2:85:ca:f4:5d:
78:06:bc:d5:f0:93:79:5b:f1:27:86:88:17:63:fa:81:9e:cc:
de:5f:9b:9f:3c:11:7f:1e:af:3a:f1:5e:90:00:a9:3f:af:ee:
47:c4:87:ac:a0:5c:c2:2c:20:66:5b:4d:64:79:7a:2a:d2:67:
91:ed:73:e4:98:56:24:af:a6:6d:63:ca:04:3e:5b:74:5f:c8:
d5:2c:c7:ef:87:1d:b1:23:59:a9:4a:13:20:f4:34:cf:76:39:
f5:f3:ad:fc:b0:0b:55:58:40:07:01:7c:9f:97:27:e3:55:19:
b5:6c:5b:d2:77:02:a8:d5:c2:de:8d:99:2c:02:87:f0:91:2b:
94:f1:08:0b:6c:f9:ba:89:76:83:ec:d3:75:87:38:79:d5:ae:
7c:37:a3:ae:75:0d:90:92:aa:1d:15:ec:dd:a5:15:b5:f6:11:
7b:b3:4d:53:8d:e9:95:6f:20:ea:68:80:10:1f:88:f8:f2:37:
4f:7d:95:d9
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDRowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA0MjYx
MDMxMzJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDBCQzFDRkJBQ0U3NzJG
RkVDNTc2QTk5MzI0NDFCRkM3NkNBRUNENjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoa17B1kG4aqRyp3W5Q9yen11bdoo5OP6I8sCwoXt5rOLHXCne
OFdzDs0zu5OmdSV2Q/i1OCtL94muIxFXgLsBsNOR7LXw8m+VT7YhhyMtccHKlmjK
ekYf7ZLTlFfYCOljxh1FqmY6O8cDCfUAWLG8JaQoouxCMtzrz7yYgddoZBvO/mB5
HJhwMPaiaJyMVgjhTRUG4R5YIOO4Axj2xsQ+g9uIVNDv/idsmwwG96dfleUrsbxb
edywewdyEtcf23GjjnCKZz9AHnofNYjUeDaDGnTfQ+daGu6C5MSlFWKGCcQyokQB
Xdf6UBwdRKZAHQDZB6izqVvurZuU9wvzAT+RAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUC8HPus53L/7FdqmTJEG/x2yuzWkwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvQzhIUHVzNTNMXzdGZHFtVEpFR194
Mnl1eldrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtLRwDAN
BgkqhkiG9w0BAQsFAAOCAQEAOG6vEo4Z3+s47vDZKZH68EeLRLi5kzM4Oz99asna
1l7XzGpVTr1whCq3L5CBf09WXV66I10mVqSqsRm9AnoTeJZDp6KFyvRdeAa81fCT
eVvxJ4aIF2P6gZ7M3l+bnzwRfx6vOvFekACpP6/uR8SHrKBcwiwgZltNZHl6KtJn
ke1z5JhWJK+mbWPKBD5bdF/I1SzH74cdsSNZqUoTIPQ0z3Y59fOt/LALVVhABwF8
n5cn41UZtWxb0ncCqNXC3o2ZLAKH8JErlPEIC2z5uol2g+zTdYc4edWufDejrnUN
kJKqHRXs3aUVtfYRe7NNU43plW8g6miAEB+I+PI3T32V2Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org