Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/D1_JltrPU3GZqBG2AzWWtgvJ5Hk.roa
File: D1_JltrPU3GZqBG2AzWWtgvJ5Hk.roa (raw, json)
Hash identifier: ZqwckFufppyMbQoQY0bGQSG6AUo0ak8bqUEQJfp14WM=
Subject key identifier: 0F:5F:C9:96:DA:CF:53:71:99:A8:11:B6:03:35:96:B6:0B:C9:E4:79
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 08CE
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/D1_JltrPU3GZqBG2AzWWtgvJ5Hk.roa
Signing time: Wed 18 Nov 2020 07:51:51 +0000
ROA not before: Wed 18 Nov 2020 07:51:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17809
IP address blocks: 182.155.0.0/16 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2254 (0x8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Nov 18 07:51:51 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0F5FC996DACF537199A811B6033596B60BC9E479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:77:65:79:d5:22:6e:82:03:a1:49:5f:ba:
35:c3:db:5a:90:54:3c:0e:79:53:46:e4:26:c6:18:
5b:8a:26:d1:d9:b7:a1:63:f8:40:0b:a8:68:f5:0f:
0d:dd:78:4f:41:0b:0a:a4:47:2c:67:a2:e0:37:6f:
68:30:6f:c1:44:3f:6a:79:18:63:18:63:d2:16:79:
27:de:3b:74:87:9d:ef:27:c1:02:88:89:62:7c:5f:
b3:cf:51:95:c1:c3:33:6c:91:43:cf:2c:0f:61:78:
63:37:7c:9c:a7:08:be:90:5e:61:2b:48:92:6c:81:
92:57:ce:94:35:4d:88:46:c7:b6:43:d4:e4:bd:53:
61:56:07:b0:ab:40:b4:32:f0:a0:8a:ad:b2:88:18:
f8:4b:fb:f2:ce:0d:c4:06:86:84:33:4a:e8:b9:66:
10:e7:db:1e:8c:05:78:e0:35:43:1e:7d:2e:b4:bf:
cc:a6:e4:bc:cb:b4:62:98:8c:e4:b7:df:78:a0:36:
b5:f9:34:06:00:0c:86:05:32:48:b9:23:97:7c:51:
2d:0a:75:54:da:b4:94:ac:eb:d5:b5:98:32:aa:cc:
b9:67:80:3f:bf:60:ea:80:a7:87:9a:79:9e:61:04:
6d:34:3c:53:87:23:c4:ad:18:34:1e:84:d9:d1:b9:
74:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5F:C9:96:DA:CF:53:71:99:A8:11:B6:03:35:96:B6:0B:C9:E4:79
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/D1_JltrPU3GZqBG2AzWWtgvJ5Hk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:86:ad:73:76:2a:a1:21:70:1b:46:63:87:b2:04:ad:12:75:
3b:54:a9:62:d3:eb:9f:ce:c2:7b:ed:5b:a3:8a:39:e9:4b:cc:
09:6b:24:5c:8d:50:08:c1:7f:f2:2c:58:e3:72:58:9b:73:52:
b9:73:0c:d6:37:11:73:be:be:81:13:99:06:61:08:11:06:48:
0a:97:50:6a:6e:36:97:25:a5:c1:d7:3b:a3:1a:ba:66:f3:63:
bc:7a:41:ff:02:75:fc:fe:80:15:1e:08:25:98:59:1b:22:a1:
dc:46:d6:0c:31:0e:a0:55:35:fc:05:42:67:38:0a:e2:7e:74:
18:c2:5b:de:c7:0e:62:45:7a:ff:1a:87:82:32:94:81:a5:f5:
47:45:d9:f1:1d:1a:42:f9:7e:52:74:ad:09:5f:1e:db:f4:29:
aa:b1:a0:c4:c9:06:72:27:d5:dc:ea:24:a5:37:75:76:67:02:
26:41:60:f2:cf:5f:53:b1:09:f7:e4:59:d0:6e:f6:86:bb:48:
36:e0:cc:56:70:48:ad:0d:c6:cd:ed:1b:d5:99:b5:ac:96:a5:
d2:53:70:cf:33:7f:dd:8b:bb:25:c3:11:aa:ed:2d:61:df:a5:
cb:8b:51:d1:24:e0:17:4f:80:a2:c1:33:cf:09:66:04:cf:42:
13:f2:95:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:52 2023 by rpki-client on console-ams.rpki-client.org