Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/DHiVX4AgSDwbDM3XE5mf91tVtHs.roa
File: DHiVX4AgSDwbDM3XE5mf91tVtHs.roa (raw, json)
Hash identifier: KA9NFPt53csc2A3Nc/YGzXROkmtKXEPsa8PSL0DPt4A=
Subject key identifier: 0C:78:95:5F:80:20:48:3C:1B:0C:CD:D7:13:99:9F:F7:5B:55:B4:7B
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0AE8
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/DHiVX4AgSDwbDM3XE5mf91tVtHs.roa
Signing time: Thu 16 Dec 2021 06:34:01 +0000
ROA not before: Thu 16 Dec 2021 06:34:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17809
IP address blocks: 113.61.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2792 (0xae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 16 06:34:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0C78955F8020483C1B0CCDD713999FF75B55B47B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:a8:3f:45:f6:34:44:7e:a8:53:8b:c6:6a:
f0:5d:6e:6b:e1:f2:eb:30:91:ce:69:46:58:fb:3a:
20:2a:5f:ff:53:f3:22:f6:aa:60:18:0b:b2:13:4c:
dd:3f:9f:04:eb:39:0e:a5:5d:c0:88:25:0d:5b:83:
a2:8d:6c:54:f7:1f:90:3e:48:f5:54:12:b6:43:66:
24:d7:49:d0:3b:e8:1e:60:32:86:4b:f4:aa:62:81:
9e:7d:9c:b9:1c:c4:52:65:d8:cd:64:ff:5a:49:e6:
9b:93:0d:8b:09:11:57:25:9c:ba:9e:30:95:6c:4e:
a0:4c:df:a6:17:83:62:37:1f:fb:35:e8:cd:ec:9c:
3e:84:21:f4:96:4b:0d:22:ac:a6:24:f1:2e:74:b7:
c5:1c:f3:6f:ce:45:77:a4:5c:c3:71:6e:c4:36:b0:
6b:92:f4:6e:21:40:43:47:23:b3:06:94:ff:ea:6a:
c4:55:5c:0a:7b:16:bb:9d:1c:c9:f9:66:9a:52:3e:
db:63:99:e5:06:9e:57:4b:38:6b:5b:0f:38:3d:b1:
09:77:da:5c:75:6e:0d:f9:90:39:a9:23:dd:69:ea:
b7:a6:83:23:bd:7f:a1:fb:21:d6:e1:0c:39:b6:e3:
ab:8f:17:60:ba:02:eb:d0:c1:35:5e:1d:19:31:11:
8a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:78:95:5F:80:20:48:3C:1B:0C:CD:D7:13:99:9F:F7:5B:55:B4:7B
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/DHiVX4AgSDwbDM3XE5mf91tVtHs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.168.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6c:a4:97:85:70:c0:28:74:dc:59:7f:73:ba:ae:cf:f6:c2:
b2:55:56:4d:7e:ad:16:c0:88:ba:ff:93:35:64:cd:aa:61:a6:
8b:9f:27:f1:38:e4:42:16:b4:e4:37:22:2d:62:42:a9:68:6f:
e4:b8:d3:a3:37:2f:f1:18:0f:fb:39:b5:66:5e:36:b8:a1:89:
08:43:92:ce:34:51:c0:33:e6:d1:a8:8f:e2:85:84:a2:5b:c2:
82:2c:d0:cf:ac:d3:ba:2a:58:6e:1d:3a:1a:75:43:ac:1c:ab:
df:04:c8:a5:ff:ce:c2:03:ed:c0:db:51:9b:0d:25:36:13:38:
99:13:95:86:75:eb:7f:21:78:1e:05:78:85:08:82:46:3c:07:
bf:91:95:73:5d:21:ff:a0:2e:7c:3a:46:d4:0e:8c:2a:23:98:
04:48:79:18:58:68:4f:91:48:5c:dc:18:78:c2:b7:7c:b8:b5:
ab:07:3a:27:a3:75:ab:d8:ee:2a:df:0c:c5:94:e2:36:d2:3c:
47:a6:d1:96:b0:1b:0b:ef:cf:81:34:83:25:8b:ff:c9:25:2e:
82:f1:0c:23:58:42:d3:79:01:05:97:43:c9:ee:13:1e:b9:a6:
b6:bb:6a:2b:3b:b3:42:bb:65:1d:2a:04:ab:31:b3:69:11:16:
88:2d:6b:23
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCugwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMTEyMTYw
NjM0MDFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDBDNzg5NTVGODAyMDQ4
M0MxQjBDQ0RENzEzOTk5RkY3NUI1NUI0N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDT4Kg/RfY0RH6oU4vGavBdbmvh8uswkc5pRlj7OiAqX/9T8yL2
qmAYC7ITTN0/nwTrOQ6lXcCIJQ1bg6KNbFT3H5A+SPVUErZDZiTXSdA76B5gMoZL
9KpigZ59nLkcxFJl2M1k/1pJ5puTDYsJEVclnLqeMJVsTqBM36YXg2I3H/s16M3s
nD6EIfSWSw0irKYk8S50t8Uc82/ORXekXMNxbsQ2sGuS9G4hQENHI7MGlP/qasRV
XAp7FrudHMn5ZppSPttjmeUGnldLOGtbDzg9sQl32lx1bg35kDmpI91p6remgyO9
f6H7IdbhDDm246uPF2C6AuvQwTVeHRkxEYoxAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUDHiVX4AgSDwbDM3XE5mf91tVtHswHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvREhpVlg0QWdTRHdiRE0zWEU1bWY5
MXRWdEhzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHE9qDAN
BgkqhkiG9w0BAQsFAAOCAQEAZWykl4VwwCh03Fl/c7quz/bCslVWTX6tFsCIuv+T
NWTNqmGmi58n8TjkQha05DciLWJCqWhv5LjTozcv8RgP+zm1Zl42uKGJCEOSzjRR
wDPm0aiP4oWEolvCgizQz6zTuipYbh06GnVDrByr3wTIpf/OwgPtwNtRmw0lNhM4
mROVhnXrfyF4HgV4hQiCRjwHv5GVc10h/6AufDpG1A6MKiOYBEh5GFhoT5FIXNwY
eMK3fLi1qwc6J6N1q9juKt8MxZTiNtI8R6bRlrAbC+/PgTSDJYv/ySUugvEMI1hC
03kBBZdDye4THrmmtrtqKzuzQrtlHSoEqzGzaREWiC1rIw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org