Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/DUtX36ovPfOQeZ5ACUTzyHFzXlo.roa
File: DUtX36ovPfOQeZ5ACUTzyHFzXlo.roa (raw, json)
Hash identifier: uLsZ1U+w2VFx1WVPEseXQ9/MYvszNBSPFe6mBvO5fbE=
Subject key identifier: 0D:4B:57:DF:AA:2F:3D:F3:90:79:9E:40:09:44:F3:C8:71:73:5E:5A
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0CA1
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/DUtX36ovPfOQeZ5ACUTzyHFzXlo.roa
Signing time: Wed 26 Apr 2023 05:49:08 +0000
ROA not before: Wed 26 Apr 2023 05:49:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 27.96.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3233 (0xca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 05:49:08 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0D4B57DFAA2F3DF390799E400944F3C871735E5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:b2:ff:5b:40:57:d8:cf:57:09:99:b3:84:
50:8e:5a:d7:fe:cb:eb:e4:fa:b1:6d:fd:ac:47:54:
c0:a2:c0:cf:4a:da:80:93:a5:f7:65:96:36:b6:af:
52:0b:2d:45:dc:07:ee:dd:98:71:1d:85:23:77:a8:
90:87:d4:0c:82:5b:47:13:ba:58:e5:9a:ec:ff:33:
ed:98:63:ea:e5:64:ac:0f:f5:58:d5:00:8d:86:b1:
43:76:ca:60:59:a9:d1:cb:ef:b5:a9:5e:39:19:08:
e6:7f:af:4d:01:9d:47:c4:d7:95:a4:4d:b8:23:9b:
29:10:b5:5e:8b:a2:7a:c3:b3:38:10:f7:d8:a6:45:
5b:a4:02:9d:d5:b1:e8:40:71:aa:05:2e:d4:5e:03:
49:6b:08:61:b6:0f:a8:97:e2:a8:c2:96:ca:3b:22:
a0:93:2b:6a:81:8f:ea:8b:13:85:1a:78:dd:bf:80:
33:ce:76:bc:87:91:52:dd:09:84:91:fc:34:22:79:
48:a9:0a:0c:cf:d4:83:23:48:cd:4e:2a:31:6c:19:
12:eb:4f:b2:cf:6c:46:fb:c1:1b:37:5b:11:7e:1f:
07:96:fb:1a:be:e9:9c:20:06:f9:43:fc:03:b1:28:
01:50:53:c0:b1:7f:aa:c9:15:ba:f1:e6:02:be:5b:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4B:57:DF:AA:2F:3D:F3:90:79:9E:40:09:44:F3:C8:71:73:5E:5A
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/DUtX36ovPfOQeZ5ACUTzyHFzXlo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:f4:4a:2f:32:48:5e:80:d9:5c:5f:e7:69:b4:65:b2:1d:89:
64:90:d7:54:37:b9:09:bf:bd:48:ef:38:85:3a:a4:b1:62:b3:
61:bf:ce:c2:6a:b0:26:be:6a:f8:39:de:13:cd:9e:0d:2e:53:
d0:bc:2c:bc:08:9e:c2:9f:bc:99:ad:80:92:70:6e:42:89:bc:
65:62:f5:af:6e:23:9b:74:da:30:75:62:ce:9a:4d:f1:16:ba:
14:5d:ca:1c:53:bd:2f:c0:c8:1e:58:70:8f:18:db:32:67:7d:
85:15:f8:95:ad:4d:aa:a5:d2:b9:57:99:fd:72:fb:6a:8a:df:
06:90:a6:54:07:22:6b:a4:1e:fe:f9:63:ca:5e:ca:5a:6d:3e:
9a:52:ec:66:9d:2e:ba:90:6e:b1:83:6a:7f:dd:0e:09:86:5e:
e7:5f:31:f0:ab:d7:40:9c:b1:19:2b:a9:a8:7d:dc:64:36:07:
92:03:82:4e:85:ba:0a:20:36:02:ca:fa:bd:38:43:0f:41:fd:
67:55:94:a1:db:44:c5:6d:c8:f8:37:c9:ba:35:16:cf:76:38:
a9:7c:eb:d0:de:0f:ec:39:ae:70:32:bf:95:b5:b3:aa:80:c4:
a4:68:de:2c:dc:0d:90:b4:f6:73:4d:56:57:03:7c:fb:b3:22:
22:ba:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org