Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/F8nMHal6kftTIQFASf1KfL8FvfA.roa
File: F8nMHal6kftTIQFASf1KfL8FvfA.roa (raw, json)
Hash identifier: MObuWYC9OdcEHNE9JTbYSycVbrAs63LNhcM9up3NG7k=
Subject key identifier: 17:C9:CC:1D:A9:7A:91:FB:53:21:01:40:49:FD:4A:7C:BF:05:BD:F0
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/F8nMHal6kftTIQFASf1KfL8FvfA.roa
Signing time: Thu 15 Sep 2022 02:37:18 +0000
ROA not before: Thu 15 Sep 2022 02:37:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 182.155.0.0/16 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=17C9CC1DA97A91FB5321014049FD4A7CBF05BDF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:2c:a5:c9:8c:67:c0:f8:00:7f:ba:63:ad:
1f:36:c0:e4:bd:be:f5:94:1b:41:ab:c9:d9:22:a5:
7e:64:d6:e1:63:68:fe:0f:47:c9:1b:3e:42:7e:c2:
36:0e:ae:db:38:31:fe:5b:4f:1f:8e:31:3b:82:b0:
d5:ac:b4:4f:5e:be:d0:36:bd:ad:2d:92:bc:f9:43:
f0:13:1c:b0:fd:aa:6b:d2:b2:80:cc:2a:16:21:9c:
0e:07:2a:ce:12:7b:0b:a0:d2:10:6c:cd:5e:d7:fd:
55:cd:84:46:d0:8f:5c:31:bd:b8:3c:81:e7:64:79:
5b:dd:72:27:fc:ee:f5:f3:5e:bf:82:3f:17:f6:ae:
66:2f:b1:1b:54:36:89:4e:6e:08:17:95:36:67:62:
6c:d6:e5:a1:ff:08:ef:c7:49:53:2d:9a:93:4a:39:
44:4d:c3:90:01:0b:1d:37:cb:a9:09:ae:2b:00:cd:
8f:07:46:2e:fa:59:cf:1d:2d:15:36:9c:5a:de:d4:
ca:e7:e6:32:9c:c5:f8:e3:2d:76:e4:8f:5c:8f:27:
99:5b:1d:c7:6c:ca:7b:90:46:b5:72:10:ce:52:2b:
7c:01:10:b5:9e:38:31:fc:a6:55:1e:f3:e5:41:dc:
e8:87:1d:2a:85:e5:8c:f7:db:b9:31:b2:55:1c:89:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C9:CC:1D:A9:7A:91:FB:53:21:01:40:49:FD:4A:7C:BF:05:BD:F0
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/F8nMHal6kftTIQFASf1KfL8FvfA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:35:fc:ac:80:e3:2e:fc:23:8f:0c:8c:c3:5c:68:10:52:66:
0b:43:d3:c5:95:b1:6c:c3:eb:de:b3:bb:25:22:4f:69:6c:9c:
92:72:b6:5f:91:04:87:bf:be:34:16:c5:f6:8f:4c:cb:11:7a:
76:44:66:04:2b:00:5e:10:f0:3e:88:0f:22:9b:77:2b:77:66:
5d:fa:a3:ed:78:89:9a:68:6b:c8:ca:29:0f:cf:7d:9b:2a:2c:
5d:1e:7d:99:9e:5e:ef:84:46:10:3d:08:08:26:f9:ba:dc:53:
66:59:5b:0d:f2:ee:4f:cd:ba:22:df:0a:f0:40:e9:96:fb:ab:
68:dc:21:56:5e:37:30:dd:8c:f2:c2:ab:9d:cd:31:2e:d3:ad:
1c:53:57:f1:a4:cd:fa:01:0d:6e:f4:ec:73:56:bb:7b:1c:02:
33:c6:f4:17:ca:f8:1e:3e:d8:8c:46:84:20:67:9e:3f:cf:2e:
fc:c4:64:67:0d:06:53:be:4e:68:c1:98:fe:77:14:2c:2d:7f:
91:a7:85:b9:fe:30:09:31:15:2c:94:13:71:48:de:7e:78:6a:
3e:89:1d:84:e5:25:6d:ba:90:1a:07:b9:48:c4:2e:dd:70:fe:
87:69:1c:9c:a4:f8:2a:74:8c:a3:0d:cf:c1:7a:2d:b9:43:38:
3d:7a:34:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org